Privacy Policy

At OsceSetGo, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered OSCE training platform.

1. Information We Collect

1.1 Personal Information

When you create an account, we collect:

• Name (first and last name)
• Email address
• Password (encrypted and securely stored)
• Student type (e.g., medical student, nursing student)
• Referral source (how you heard about us)

1.2 Usage Data

We automatically collect information about how you interact with our platform:

• Practice session data (stations attempted, completion times, scores)
• Conversation logs from OSCE practice sessions
• Feedback and performance analytics
• Device information (browser type, operating system)
• IP address and location data (general geographic area)
• Cookies and similar tracking technologies

1.3 Payment Information

For premium subscriptions, payment processing is handled by Stripe. We do not store your full credit card details. We only receive confirmation of payment and subscription status.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our OSCE training services
• Personalize your learning experience and recommend relevant stations
• Generate AI-powered feedback and performance analytics
• Process payments and manage subscriptions
• Send you important updates about your account and our services
• Respond to your inquiries and provide customer support
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our Terms of Service
• Conduct research and analytics to improve our platform (data is anonymized where possible)

3. Information Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

3.1 Service Providers

We work with trusted third-party service providers who assist us in operating our platform:

• Supabase: Database and authentication services
• Stripe: Payment processing
• OpenAI/Anthropic: AI-powered patient simulation and feedback
• Vercel: Hosting and infrastructure

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

3.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to protect our rights, property, or safety, or that of our users.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

4. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (SSL/TLS) and at rest
• Secure authentication and password hashing
• Regular security audits and vulnerability assessments
• Access controls and authentication for our team
• Compliance with data protection regulations

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and personal information
• Data Portability: Request your data in a portable format
• Opt-out: Unsubscribe from marketing emails (account-related emails will still be sent)
• Cookie Preferences: Manage cookie settings through your browser

To exercise these rights, please contact us at privacy@oscesetgo.com.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your session and authentication state
• Remember your preferences and settings
• Analyze platform usage and performance
• Improve user experience

You can control cookies through your browser settings. Note that disabling cookies may affect platform functionality.

7. Children's Privacy

OsceSetGo is designed for medical students and healthcare professionals. We do not knowingly collect personal information from children under 13 years of age. If you believe we have collected information from a child, please contact us immediately.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

9. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy, unless a longer retention period is required by law. When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal purposes.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: