Privacy Policy

1. Overview

FrenchToPR.com (“the Platform”) takes your privacy seriously. This policy explains how we collect, use, store and protect your personal information. By using the Platform, you agree to this policy.

2. Information we collect

2.1 Information you give us

• Registration: email address, display name, password (stored encrypted)
• Profile: avatar, current French level, target level, study plan
• Writing: the texts you submit in writing practice
• NOC tool: the résumé or job description text you upload or paste (stored encrypted), and the employment details you enter for an employer reference letter
• Notes: the personal notes you add to questions
• Refund requests: the reason you give when asking for a refund (optional)
• Account deletion feedback: the reason and comments you give when deleting your account (optional)

2.2 Information from Google or Microsoft sign-in

When you sign in with Google or Microsoft, we receive only your email address, name and a link to your profile picture. We do not access your contacts, calendar or any other account data.

2.3 Information from buying a membership

• Order records: length purchased, price breakdown, referral code used, payment status, start and end dates
• Refund and dispute records: refund amount, days used, status
• Billing country or region: returned by Stripe at payment and used only for our own tax compliance
• Risk signals: the IP address and browser identifier at the time of the order, used to detect abuse such as fake orders or fake accounts

We never collect, see or store your card number, expiry date or security code. Stripe collects and processes them directly on its own pages.

2.4 Partner program information

Only if you apply to the partner (referral) program do we collect: your name, contact email, organization, website or social media page, a description of how you will promote the Platform and, once approved, the payout method and account details used to pay your commission.

2.5 Information collected automatically

• Study activity: answer history, accuracy, practice time, flashcard review progress
• Activity time: when you are active on the Platform, used to calculate study-time statistics
• Device information: browser type (used only for compatibility)
• Language preference: the site language you signed up in (Chinese or English), used to send you service emails in that language

3. How we use your information

We use your information to:

• Provide and maintain the service (account management, practice features, progress tracking)
• Produce your personal study statistics and skill assessments (the dashboard)
• Generate AI study advice (using an AI model fed with study data, without personal identifiers)
• Score your writing and give feedback with AI; in the NOC tool, analyze your résumé, match occupations and draft employer reference letters
• Send essential service emails (email verification, password reset)
• Process membership purchases and refunds (through Stripe; we do not store card details), and send order receipts and refund notices
• Send membership reminders (30, 7 and 1 day before your membership ends, and on the day it ends; you can stop these by contacting us)
• Prevent payment fraud and referral abuse, protecting the Platform and other users
• If you are a partner, calculate, settle and pay your commission and keep the required records
• Improve the Platform’s features and experience

We never sell your personal information to anyone.

4. Third-party services

The Platform uses the following third-party services:

Writing and résumés are sent to OpenAI as written. Before submitting, we recommend removing personal details that aren’t needed for your test prep or job search (such as ID numbers or your home address).

5. Data in the partner program

If you buy a membership with a partner’s referral code, we count that order toward the partner’s results. To do that:

• The partner portal never shows your email address, name, avatar, IP address or anything else that identifies you.
• Each buyer is shown in each partner’s portal under an irreversible pseudonymous tag (such as #K3F9QP). The same buyer has a different tag with each partner, so partners cannot compare notes to identify the same person.
• Partners can see only: the pseudonymous tag, purchase date, length purchased, order amount, discount and commission status.
• What a partner can query is limited by our servers based on who they are signed in as, so they cannot reach anyone else’s data by changing request parameters.

If you are a partner, your application details and payout details are used only by administrators to review your application and pay your commission, and are never shown publicly.

6. Storage and security

• Passwords are stored encrypted with bcrypt; we cannot see your password.
• Authentication uses HTTP-only cookies and JWTs, which keeps tokens out of reach of XSS attacks.
• The payment page is hosted by Stripe; card details never pass through our servers.
• The database is stored on protected servers and backed up regularly.
• Every administrator action on orders, membership time, refunds and commissions is written to an audit log that cannot be deleted.
• We do not collect more data than the service needs.

7. Retention and deletion

• Your account data is kept for as long as your account exists.
• You can ask to delete your account from the Settings page. A 30-day recovery period follows, after which all associated data is permanently deleted or anonymized. If you still have membership time remaining, the recovery period starts from your membership end date, so that deleting your account does not throw away time you have paid for.
• You can cancel a deletion request at any time during the recovery period.
• Exception for transaction records: orders, refunds, commissions and audit logs must be kept for financial and legal reasons. Once your account is deleted, identifying information in these records is removed (your email address and display name are anonymized), and only the fields needed for accounting, such as amounts and dates, are kept.
• The IP address and browser identifier used for risk checks are kept with the related order for handling disputes, and are never used for advertising or profiling.
• Heartbeat data is cleaned up automatically; only the last 2 days of raw records are kept.

8. Cookies

The Platform uses these cookies:

• access_token: authentication token (HTTP-only, session)
• refresh_token: token refresh credential (HTTP-only, valid for 7 days)
• NEXT_LOCALE: remembers the site language you chose (Chinese or English), valid for 1 year

Your browser’s local storage also keeps a few preferences on your device, such as the region you chose, what you entered in the CRS calculator, whether you dismissed certain reminders, and your filters on practice pages. These stay on your device and are never sent to us.

We do not use third-party tracking or advertising cookies. Referral codes take effect only when you enter them at checkout: we set no tracking cookie for referral attribution and do not record which link brought you to the site.

9. Your rights

You have the right to:

• Access and view your personal data (from your Settings page)
• Change your profile information
• See your membership status and all your orders on the My membership page
• Ask for a refund in line with the refund policy
• Delete your account and all associated data (transaction records are handled as in section 7)
• Contact us to ask how your data is used

10. Children

The Platform is intended mainly for adults. We do not knowingly collect personal information from children under 16. If you find that a child has registered without a parent’s consent, please contact us and we will delete the account.

11. Changes to this policy

We may change this policy. We will tell you about significant changes by a notice on the site or by email. Continuing to use the Platform means you accept the changed policy.

This policy is available in Chinese and English. If the two versions differ, the Chinese version prevails.

12. Contact

If you have any questions about this policy, or want to exercise your data rights, please contact:

Email: support@frenchtopr.com