This Privacy Policy explains how Yoria Technologies Limited ("we", "us", "our") collects, uses and protects your personal data when you use the AI Workplace Simulator (the "Service"). We are the data controller for the personal data described below.
Yoria Technologies Limited
Company registration number: 17261859
Registered address: 12 Saffron Way, Chatham, Kent, United Kingdom
Data protection contact: admin@yoriatechnologies.com
What data we collect
- Account data — your email address and name, used to create and secure your account (handled by our authentication provider, Supabase).
- Deliverable and submission content — the work you draft and submit within the simulation, together with the structured assessment results produced by our Verification Engine.
- Payment details — processed by Stripe. We never see or store your full card number; we receive only a payment confirmation and limited transaction metadata.
- AI assistant content — when you use the in-simulation coach or AI feedback features, the relevant text is sent to our AI processor (OpenAI) to generate a response. It is used to provide the feature and is not used by us to build a profile of you.
- Usage data — basic first-party analytics such as page views and key actions, plus technical error reports, used to operate and improve the Service.
How we use your data and our legal basis (UK GDPR)
- To provide the Service (create your account, run the simulation, grade deliverables, process payments) — legal basis: performance of a contract with you.
- To secure, maintain and improve the Service (error monitoring, fraud prevention, aggregate analytics) — legal basis: our legitimate interests in running a reliable, secure product.
- To meet legal and accounting obligations (e.g. retaining transaction records) — legal basis: legal obligation.
Third-party processors
We share personal data with the following processors only as needed to run the Service. Each is bound to protect your data:
- Supabase — authentication and database hosting.
- Stripe — payment processing.
- OpenAI — AI-generated feedback and coaching.
- Sentry — application error monitoring.
- Replit — application hosting and deployment.
Some processors may process data outside the UK. Where they do, we rely on appropriate safeguards (such as the UK International Data Transfer Agreement or equivalent) to protect your data.
Cookies
We use a small number of cookies:
- Strictly necessary cookies — keep you signed in, maintain your session and remember preferences such as your display theme. The Service does not function correctly without these.
- Analytics cookies — a first-party identifier used to understand, in aggregate, how visitors move through the site so we can improve it. We do not use third-party advertising cookies.
Data retention
- Account and deliverable data — retained while your account is active and for up to 12 months after it becomes inactive, after which it is deleted or anonymised, unless you ask us to delete it sooner.
- Payment and transaction records — retained for up to 7 years to meet UK accounting and tax requirements.
- Error and analytics logs — retained for a short period (typically up to 90 days) and then deleted or aggregated.
Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected (rectification);
- have your data deleted (erasure), where applicable;
- receive your data in a portable format (portability);
- object to or restrict certain processing.
To exercise any of these rights, email admin@yoriatechnologies.com. We will respond within one month.
ICO registration
Complaints
If you have a concern about how we handle your data, please contact us first at admin@yoriatechnologies.com. You also have the right to complain to the ICO at ico.org.uk.
Changes to this policy
We may update this policy from time to time. We will revise the "Last updated" date above when we do.