Privacy Policy
Last updated: June 2026
Overview
Defensia ("we", "us", "our") is committed to protecting your personal data. This policy explains what data we collect, how we use it, and what rights you have.
What data we collect
- Account data — your email address and, optionally, your full name and viva date.
- Thesis documents — PDF files you upload are stored securely in your account. We process them to create vector search indexes used during your practice sessions.
- Session data — audio from your practice sessions is processed in real time to generate transcripts and feedback. Session metadata (duration, date, scores) is stored in your account.
- Usage data — anonymous analytics to understand how the product is used. No personally identifiable information is included.
How we use your data
- To provide and improve the Defensia service.
- To generate AI-powered practice sessions and feedback specific to your thesis.
- To send essential account communications (password resets, purchase receipts).
We do not sell your data. We do not use your thesis content or session recordings to train AI models.
Data storage and security
Your data is stored using Supabase infrastructure hosted in the EU. All data is encrypted in transit (TLS) and at rest. Authentication is handled by Supabase Auth; passwords are never stored in plaintext.
Data retention
Your account data and thesis documents are retained until you delete your account. You can request deletion of your account and all associated data by contacting us at [email protected].
Third-party services
We use the following third-party processors:
- Supabase — database, file storage, and authentication (EU region).
- LiveKit — real-time audio infrastructure for practice sessions.
- OpenAI — embedding generation for thesis indexing and AI inference.
- Anthropic — AI model inference for examiner behaviour and feedback generation.
- Google Analytics — anonymised usage analytics, only if you accept analytics cookies.
- Google Ads — conversion tracking for our advertising, only if you accept marketing cookies.
Your rights
Under UK GDPR, you have the right to access, rectify, erase, restrict processing of, and export your personal data. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
Cookies
We use essential cookies required for authentication and session management. With your permission, we also use analytics and marketing cookies to understand how Defensia is used and to measure our advertising. Non-essential cookies are only set once you accept them, and you can change your choice at any time using "Cookie preferences" in the footer.
| Category | Provider | Purpose | Duration |
|---|---|---|---|
| Essential | Supabase, Defensia | Authentication and session state | Session / up to 1 year |
| Analytics | Google Analytics | Understand how the site is used | Up to 2 years |
| Marketing | Google Ads | Measure advertising performance | Up to 90 days |
Changes to this policy
We may update this policy from time to time. We'll notify you of significant changes by email. Continued use of the service after changes constitutes acceptance of the updated policy.
Contact
For privacy questions or data requests, contact us at [email protected].