Privacy Policy
Last Updated: 28 June 2025
Introduction
Welcome to Case Study Coach. This Privacy Policy explains how Mantle Ventures Ltd ("we", "us", or "our") collects, uses, and protects your personal information when you use our website and services (the "Service").
We are the data controller responsible for your personal data. Our registered address is: 124 City Road, London, United Kingdom, EC1V 2NX.
1. Personal Data We Collect
We collect information to provide and improve our Service. The types of personal data we collect are:
- Account Data: When you register, we collect your email address and an encrypted password. We may ask for your name in the future, which you would provide voluntarily.
- Payment Information: We use Stripe to process payments. We do not store your full credit card details. We only store information necessary for billing management, such as a secure token provided by Stripe and the last four digits of your card.
- Interview Content: We process your voice input by sending it to a transcription service to convert it to text. We do notstore the raw audio files. The final, edited text you submit is stored in our database to provide you with a record of your interview session.
- Usage and Technical Data: We automatically collect data for debugging and service improvement purposes. This includes your IP address, browser type and version, device information, and event data on how you interact with our Service (e.g., features used, time spent on tasks).
2. How and Why We Use Your Data (Legal Basis)
We only use your personal data when we have a legal basis to do so.
| Purpose of Processing | Data Types Used | Legal Basis under GDPR |
|---|---|---|
| To provide and manage your account, process subscriptions, and run the core interview service. | Account, Payment, Interview Content | Performance of a Contract |
| To analyse, debug, and improve our Service. This includes training our AI models to make feedback more accurate. | Interview Content, Usage & Technical Data | Legitimate Interest |
| To send you occasional marketing emails about product updates, tips, and offers. | Email Address | Consent |
For marketing communications, we will always ask for your explicit, opt-in consent before sending you any promotional emails.
3. Data Sharing and Third-Party Services
We do not sell your personal data. We only share data with trusted third-party service providers ("sub-processors") who help us operate our Service:
- Hosting:
fly.io(hosts our application infrastructure) - Database:
Supabase(stores your account and interview data securely) - Payments:
Stripe(processes all payments and subscriptions) - AI Processing:
OpenAI,Anthropic,Google(process your text inputs to generate AI responses) - Analytics:
Google Analytics,Mixpanel(help us understand service usage to debug and improve the product)
4. Data Security and Retention
Security
We implement appropriate technical and organisational measures, such as data encryption and strict access controls, to protect your personal data from unauthorised access, loss, or misuse.
Retention
We retain your personal data for as long as your account is active. If you terminate your account, your personal data will be permanently deleted after a period of one (1) year. This retention period allows for account recovery and administrative purposes. You can request immediate deletion at any time.
5. Your Data Protection Rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request that we correct any inaccurate or incomplete data.
- Right to Erasure (Right to be Forgotten): You can request that we delete your personal data.
- Right to Restrict Processing: You can request that we limit the use of your personal data.
- Right to Data Portability: You can request that we provide your data in a machine-readable format.
- Right to Object: You can object to us processing your data for certain purposes (like marketing).
To exercise any of these rights, please contact us at hello@casestudycoach.com. For your protection, we may need to verify your identity before fulfilling your request, which will typically involve confirming the request from your registered email address.
6. International Data Transfers
Some of our third-party providers (like OpenAI) are based outside the United Kingdom (UK). When we transfer your data to these providers, we ensure that appropriate legal safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions, to protect your data to the standard required by UK law.
7. Cookies and Tracking Technologies
We use cookies to operate and improve our Service.
- Essential Cookies: These are necessary to provide core functionality, such as keeping you logged in. They do not require consent.
- Non-Essential Cookies: These are used for analytics, performance, and marketing. We will ask for your explicit consent through a cookie banner before placing these cookies on your device.
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date.
9. Contact Us
If you have any questions about this Privacy Policy, please contact us:
Mantle Ventures Ltd
Email: hello@casestudycoach.com