Reasora
← Back to home

Privacy Policy

Last updated: 22 August 2026

Important: Reasora is independent exam preparation software. We are not affiliated with, endorsed by, sponsored by, or connected to Università Bocconi or any other university. “Bocconi” and “Online Bocconi Test” are used only to describe which admissions exam our practice is designed for.

This Privacy Policy explains how Reasora (“we”, “us”) processes personal data when you use https://reasora.org (the “Service”). We aim to comply with the EU General Data Protection Regulation (GDPR) and applicable Italian privacy law.

1. Data controller

Reasora
Email: support@reasora.com

2. What we collect

  • Account and profile data: email address, authentication identifiers, access status (such as Full Access), referral code, referral attribution (who referred you, if applicable), referral discount usage, and Reasora Coin balance.
  • Study progress: practice attempts, mock attempts, answers, scores, and reports stored to power your dashboard and results.
  • Referral and reward activity: referral links used, referral attribution, qualifying purchase records linked to referrals, and Coin ledger entries where applicable.
  • Payment and purchase data: we do not store full card numbers. Stripe processes payments and may collect billing details, card metadata, and transaction records. We store purchase identifiers, amounts, currency, discount flags, and related audit records needed to operate access and referrals.
  • Promotional redemption records: when you redeem an eligible promotional code, we record that redemption against your account.
  • Technical data: IP address, browser type, device information, and server logs needed to operate and secure the Service.
  • Cookies and browser storage: authentication session cookies, referral attribution cookies, study progress, in-session exam state, consent preferences, and optional analytics when enabled. See our Cookie Policy.

3. Why we use your data

  • To create and manage your account;
  • To deliver practice content, scoring, and progress tracking;
  • To process payments, grant Full Access, and verify paid access;
  • To operate referral discounts, Coin rewards, and promotional codes;
  • To respond to support requests;
  • To keep the Service secure and prevent abuse;
  • To improve reliability and fix errors;
  • To measure optional analytics when you consent.

4. Legal bases (GDPR)

  • Contract: processing needed to provide the Service you signed up for or purchased.
  • Legitimate interests: security, fraud prevention, referral abuse prevention, and basic service reliability, balanced against your rights.
  • Legal obligation: where tax, accounting, or consumer law requires us to retain certain records.
  • Consent: where required for optional analytics; you may withdraw consent at any time via Cookie settings.

5. Processors and sharing

We use trusted providers who process data on our instructions:

  • Supabase — authentication and database hosting;
  • Stripe — payment processing;
  • Plausible — optional analytics when configured and you consent;
  • Vercel (or equivalent hosting) — application hosting and delivery.

We do not sell your personal data. We may disclose information if required by law or to protect our rights, users, or the public.

6. International transfers

Some providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms offered by those providers.

7. Retention

  • Account, progress, referral, and Coin data are kept while your account is active.
  • When you delete your account, account-linked personal data accessible through the Service is removed or detached as described in section 8.
  • Some payment, webhook, or audit records may remain in anonymised or detached form where needed for operational consistency, fraud prevention, or accounting. Those records are no longer linked to an active account you can sign in to.

8. Account deletion

You may permanently delete your account from your account settings. Deletion removes your ability to sign in and removes account-linked access and benefits, including Full Access, saved progress, referral identity on the Service, and Reasora Coins visible through your account.

Account deletion does not automatically refund previous purchases. Some operational or audit records may remain where appropriate for payment and platform consistency, as described above.

You may also contact support@reasora.com for privacy requests.

9. Your rights

If you are in the EEA, UK, or Switzerland, you may have the right to:

  • Access your personal data;
  • Correct inaccurate data;
  • Delete data in certain cases;
  • Restrict or object to processing;
  • Data portability where applicable;
  • Withdraw consent where processing is consent-based;
  • Lodge a complaint with your local supervisory authority.

To exercise these rights, email support@reasora.com. We may need to verify your identity before responding.

10. Security

We use reasonable technical and organisational measures, including HTTPS, access controls, and provider security features. No online service can guarantee perfect security; please use a strong, unique password.

11. Children

The Service is intended for applicants preparing for university admissions, typically aged 16 and above. We do not knowingly collect data from children under 16 without appropriate consent. Contact us if you believe a child has provided personal data.

12. Changes

We may update this Privacy Policy. The “Last updated” date at the top will change when we do. Material changes may also be highlighted on the site.

13. Cookies and tracking choices

We use a consent management layer for optional analytics. Strictly necessary cookies and storage remain active to operate the Service. For a full inventory, purposes, and providers, see our Cookie Policy. Use Cookie settings in the footer to change your choices.

14. Contact

Privacy questions: support@reasora.com. See also our Terms of Service.