What Vantage knows about you, and why.

Vantage is a product of IAAA — the Institute of Applied AI and Analytics. The legal entity that operates Vantage and acts as the data fiduciary for the purposes of applicable data protection law is Rahul Ghai, trading as Institute of Applied AI and Analytics (GST registration 29AHOPG8778Q2ZY), a proprietorship registered in Bengaluru, Karnataka, India. A full registered address is on file for GST and regulatory purposes and available on request via the grievance contact below; it isn't published on this page since it's a residential address rather than a business office.

Verified against the actual database schema, Vantage stores:

• your email address (used for sign-in and account identification);
• authentication metadata managed by Supabase Auth (account creation date, last sign-in time);
• your learning progress: per-concept mastery and skill levels, spaced-repetition scheduling, attempt history (which questions you answered, whether you were correct, your stated confidence), and mock exam results;
• account-level access settings (whether your access has an expiry date, and — for admin accounts only — an admin flag);
• a record that you accepted these Terms/Privacy Notice, and which version.

We do not collect your name, date of birth, phone number, physical address, employer, demographic information, or any government-issued identifier. Nothing beyond the above is collected because nothing else is needed for Vantage to function — this list is not padded with data "we might use later."

• You provide it directly — your email address, when invited or signing in.
• Generated through your use of Vantage — your progress, attempt history, and mock exam results are all created automatically as you study; you don't enter them yourself.
• Automatically, at the infrastructure level — sign-in session cookies (see Cookies & local storage below). Vantage does not run any analytics or tracking script, so no behavioral/device data is collected this way beyond what Supabase's authentication infrastructure itself requires to keep you signed in.

• authenticating you and keeping your session secure;
• delivering the core learning functionality (showing you your own progress);
• maintaining your spaced-repetition schedule and mastery state between sessions;
• personalizing which concepts and questions you see next;
• generating the short AI coaching note on your Today page;
• evaluating free-text explain-back answers when AI grading is enabled;
• administering invite-only access and, if applicable, an access expiry date;
• using feedback and bug reports you send us to fix issues and improve Vantage; and
• meeting our own legal and record-keeping obligations.

Nothing is processed for advertising, profiling for marketing, or resale.

Two AI-assisted features exist, and this is exactly what each sends, verified against the code that calls them:

Explain-back grading. When AI grading is enabled, the concept name, the grading rubric, and the free-text answer you typed are sent to Anthropic's API to produce a score and short feedback. Your email address or any account identifier is not included in that request. The result Vantage keeps is the computed judgment — a score and feedback text — not a stored transcript of your original answer; Vantage's own attempt records do not carry your free-text wording. A server-side cache avoids re-grading identical answers twice; it stores the computed judgment, keyed by a one-way hash of the question and answer, not your original text in a retrievable form.

Coaching notes. A short summary of your own progress — your streak, strongest and weakest domains, concepts flagged as forgotten or misunderstood — is sent to Anthropic to write the 2–3 sentence coaching note shown on your Today page. This summary contains no free text you've written and no personal identifiers.

Anthropic processes this information under its own commercial API terms. IAAA has not independently verified, and does not represent, what Anthropic's retention or model-training policies are for this specific integration — if that matters to you, review Anthropic's own published terms, or avoid submitting sensitive content through the explain-back feature.

If no AI provider is configured, Vantage falls back to a deterministic, zero-cost local evaluator that sends nothing to any third party.

• Supabase — hosts the authentication system and the Postgres database that stores your account and progress. This is the primary processor of your personal data.
• Resend — delivers the sign-in email itself (your email address and the one-time link). Resend does not receive your learning data.
• Anthropic — processes the AI-feature inputs described above, only when those features run.
• Vercel — hosts the application; standard web-request metadata (such as IP address) passes through it as part of ordinary hosting, as with any website.

This list reflects the providers Vantage actually uses today, not a generic template.

Supabase, Resend, Anthropic, and Vercel are international infrastructure providers, and your information may be processed on servers outside India as a result. We do not control or disclose the specific data-center locations these providers use at any given time; each operates under its own published data-processing terms.

We keep information for as long as reasonably necessary for the purpose it was collected for — operating your account, maintaining your learning progress, and meeting security or legal record-keeping needs. Mock exam attempt detail is capped at your most recent 8 attempts; older attempts are automatically reduced to a summary (score only, item-level detail dropped).

IAAA reserves the right to delete an account that has had no sign-in for 24 consecutive months, after emailing prior notice to the address on file. This is a policy commitment, not something the app currently automates or enforces on a schedule — no account has been deleted on this basis to date, and if it ever is, it will be a deliberate, manual action, not a background job.

Subject to applicable law, you can:

• ask what information we hold about you;
• ask us to correct inaccurate information;
• ask us to delete your account and data — see Account deletion below;
• withdraw consent where our processing relies on it (this mainly affects optional AI features — you can simply not use explain-back grading);
• raise a grievance — see Grievances below; and
• exercise any nomination or other rights available to you under India's Digital Personal Data Protection Act, 2023, once its relevant provisions and rules are in force, as applicable to your account.

We don't promise a right that doesn't actually apply to you or your jurisdiction.

You can delete your own account below at any time. This removes your Supabase Auth identity and, because your progress and profile records are linked to it with cascading deletion, your learning progress and profile data are removed in the same action. This can't be undone and isn't recoverable — there's no separate backup retained for your convenience.

Privacy questions or grievances can be sent to support@iaaa.academy.

Your progress data is protected by database-level row-level security: Supabase's Postgres itself refuses to return your data to any other account, independent of any bug in Vantage's own application code. Sign-in uses email-based one-time links rather than passwords, removing an entire class of password-related risk. No system is completely secure, and we don't claim otherwise.

Vantage is intended for adults preparing for a professional certification, not for children. We do not knowingly collect information from children. Account creation is currently invite-only and administered manually, which limits — though does not technically enforce — this in practice.

Vantage uses one category of cookie: the session cookie set by Supabase Auth, strictly necessary to keep you signed in. There is no analytics, advertising, or tracking cookie anywhere in the app — verified directly in the codebase, not assumed. Because only strictly necessary storage is used, no cookie-consent banner is shown; one would be implemented before any non-essential tracking is ever added.

Separately, your browser's local storage is used to save your in-progress mock exam answers on your own device, purely so a refresh doesn't lose your work. This never leaves your browser as part of that mechanism.

We may update this notice as Vantage changes. The "Last updated" date at the top reflects the current version; material changes will be communicated through the app where appropriate.