Privacy Policy

UpFrench is a French language assessment platform that enables organisations — such as language schools, universities, and corporate training providers — to administer placement tests to students and manage results.

For the purposes of this policy, "organisations" refers to entities that register on UpFrench to administer assessments. "Students" refers to individuals who complete assessments through an organisation's registration link.

From students:

• Full name and email address (provided at registration)
• Test responses, including written answers and multiple-choice selections
• Oral test booking details (date, time), if applicable
• Tab-switch activity during the test (for academic integrity purposes)

From organisation administrators:

• Name, email address, and password (hashed)
• Organisation details including name, address, and contact information
• Email template content and notification preferences

Automatically collected:

• Basic usage analytics (page views, session duration) via Vercel Analytics
• Error logs via Sentry (no personally identifiable information is intentionally included)

• To administer French language placement assessments on behalf of organisations
• To communicate test confirmations, results, and booking confirmations by email
• To enable organisation administrators to review, grade, and manage student records
• To maintain the security and integrity of the platform
• To improve our service through aggregated, anonymised analytics

We do not sell personal data to third parties. We do not use student data for marketing purposes.

We share data only with the following third-party services, which are necessary to operate the platform:

• Neon (PostgreSQL) — primary database hosting
• Vercel — application hosting and deployment
• Resend — transactional email delivery
• Upstash Redis — rate limiting and session management
• Sentry — error monitoring

All third-party providers are bound by their own privacy policies and data processing agreements. We select providers that meet appropriate standards for data security.

Student test records are retained as long as the associated organisation maintains an active account on UpFrench. Organisation administrators may delete student records from their dashboard at any time.

If an organisation account is closed, associated data is deleted within 90 days, unless retention is required by applicable law.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Receive your data in a portable format

To exercise any of these rights, please contact us via our contact page. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Passwords are stored using industry-standard bcrypt hashing. All data in transit is encrypted using TLS.

No method of transmission over the internet is entirely secure. While we take data protection seriously, we cannot guarantee absolute security.

UpFrench uses session cookies for authentication purposes only. We do not use advertising or tracking cookies. Analytics are collected in an aggregated, privacy-preserving manner through Vercel Analytics.

UpFrench is not intended for use by individuals under the age of 16 without the consent of a parent, guardian, or educational institution acting in loco parentis. If you believe a minor has submitted personal data without appropriate consent, please contact us immediately.

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of UpFrench after changes are posted constitutes acceptance of the revised policy.

For any privacy-related enquiries, please use our contact page.