ACE
Privacy policy
Last updated: 2 November 2026
Data controller
Léo Jayles — leo.jayles@edhec.com. For any question about your data or to exercise your rights, write to this address.
Data we collect
Account: email address, username, password (stored encrypted by Supabase, never readable), profile photo (optional), chosen language.
Revision: progress (mastered notes, flashcards, MCQ drafts), results in MCQs, mock exams and cases, revision time, points and rank, saved diagrams.
Contributions: published reviews (rating, comment, name or anonymous), messages sent with “An idea? A problem?” (message, page, device and browser, optional screenshot, optional email if you are not signed in).
Essays: the texts sent for AI correction (Composition and Communication Skills), with their mark and feedback.
No audience measurement tool, no advertising and no advertising tracker is used.
Why (purposes and legal bases)
Providing the service (account, progress, results, essay correction, AI assistant): performance of the contract (the Terms).
Handling your requests and reports, preventing abuse (sending limit, daily AI limit): legitimate interest.
Publishing your review: your choice, when you publish it.
Recipients and processors
Supabase (database, accounts, files) and Vercel (website hosting).
Essay correction: the essay text and topic are sent to Google (Gemini API) to be graded. Do not put personal information in your essays.
Course AI assistant: your question, the latest messages of the conversation and extracts from the course are sent to Google (Gemini API) to generate the answer. Neither your email nor your username is sent. The conversation history stays in your browser; only the number of questions asked per day is stored in your account. Do not put personal information in your questions.
ACE uses the paid tier of the Gemini API: Google does not use these texts to improve its products; it keeps them for a limited period, only to detect abuse.
Your data is never sold or used for advertising.
Some of these providers are located outside the European Union (notably in the United States); transfers are covered by the European Commission's standard contractual clauses or the Data Privacy Framework.
Retention
Your account data is kept as long as your account exists, then deleted within 30 days of your deletion request.
Messages sent without an account are kept for 12 months.
Storage in your browser
ACE stores in your browser (local storage) your sign-in session, your language, your light/dark theme and your current progress. This storage is needed for the site to work and is not used to track you.
Your rights
You can access, correct, export, object to the processing of, or request the deletion of your data by writing to leo.jayles@edhec.com.
To delete your account and all your data, write to leo.jayles@edhec.com: the deletion is done within 30 days.
You can also lodge a complaint with the CNIL (www.cnil.fr).