Who this notice covers
This notice explains how StationReady collects, uses, stores and shares personal information when you visit the website, create an account or complete a practice station. StationReady is responsible for the personal information described here.
Information we collect
We collect the name and email address you provide, authentication and account records, plan and usage information, promotion or access-code redemption status, Stripe customer, Checkout Session and Payment Intent identifiers, payment status and access dates, practice transcripts, selected scenario, timing, scores, feedback, rubric-decision and comparison records, limited delivery measures such as estimated pace and captured filler count, private enquiry and reply content, product-survey responses and submission times, prize-entry and follow-up consent choices, prize eligibility and draw records, technical request records and any privacy preferences you set.
If you submit a spoken response, the recording is first placed in private processing storage so the submission is not lost if transcription is interrupted. Transcript review is off by default. In that normal flow, the recording is deleted after successful transcription before marking continues. If you enable transcript review in your dashboard, the recording remains temporarily available while you read the complete transcript; listening to it is optional. It is deleted after you confirm that you have read the transcript for marking or discard it to record again. If an error interrupts deletion or requires support investigation, the private recording may remain linked to the saved job until recovery or support cleanup is complete. The transcript and report, not the raw audio, form part of your progress record. StationReady does not receive or store your full card number or card security code. StationReady stores mock access codes as one-way hashes rather than retaining their readable value.
Why we use it
We use account information to authenticate you and provide the service. We use practice information to transcribe and mark the response, display feedback, maintain your progress history, manage usage limits, investigate errors, protect the service and meet legal obligations. We use enquiry information to understand and reply to your question, resolve account or payment issues and improve the product. We use written customer feedback to identify strengths, problems and priorities for improving the site. If you enter an optional prize draw, we also use your account identity and feedback to check the published eligibility rules and administer the draw. Follow-up questions require your separate optional consent. We will not publish your survey feedback as a testimonial without separate permission. Only a verified winner is asked privately for the account holder name and bank details needed to pay a cash prize; these are not collected in the survey. We use only the information reasonably needed for these purposes.
Optional future model improvement
If you opt in, eligible existing and future transcripts, scores, feedback, rubric-decision records, comparison records and delivery measures may be selected to test, evaluate, calibrate or train future StationReady markers. This may include comparing a marker score with an independent human score if StationReady later carries out that work. Direct account identifiers will be removed where reasonably practical before records are selected, but a transcript may still contain identifying details entered by the student.
Consent is off unless you choose it. You can change the setting in your dashboard. Withdrawal applies to new use from that point forward and does not affect normal account access or results.
Service providers and overseas processing
StationReady uses service providers to operate the platform. Supabase provides authentication and database services. OpenAI API services provide transcription and AI-assisted marking. Stripe processes payments and manages billing. Website hosting and security providers deliver the application. These providers may process information outside New Zealand and are permitted to use it only for the services and protections described in their agreements with StationReady.
Storage and retention
Practice records are kept while your account remains active so that your dashboard and progress history work. Security and usage records may be kept for a shorter operational period. We will delete or anonymise personal information when it is no longer reasonably required, subject to legal, fraud-prevention, dispute and backup requirements.
You may request deletion of your account and practice records. A deletion request will not necessarily remove information that has already been lawfully de-identified or incorporated into an aggregated evaluation or trained model following your prior consent.
Your choices and rights
You may ask for access to personal information StationReady holds about you, ask for a correction, request account deletion, or withdraw future model-improvement consent. We may need to verify your identity before acting on a request. If a correction is not made, you may ask us to attach a statement of correction to the relevant information.
Security and safe practice content
We use access controls, row-level database policies, authenticated server functions and transport encryption to protect account records. No internet service can guarantee absolute security. Please use fictional or generalised practice examples and never submit patient-identifiable, confidential, placement or recalled interview information.
Changes and contact
We may update this notice when the service, providers or legal requirements change. The current effective date will appear at the top. Material changes will be communicated reasonably before they take effect when practical.
For access, correction, deletion or privacy questions, contact the StationReady privacy contact at mentoratutoring@gmail.com. You may also raise a concern with the Office of the Privacy Commissioner in New Zealand.