Privacy Policy

Last updated: August 17, 2026

This policy explains what personal data IQ Revealed ("we", "us") collects when you use iqrevealed.com, why we collect it, who we share it with, and the rights you have over it. It applies to all visitors, test-takers and members.

Key terms

• "Personal data" — any information relating to an identified or identifiable person.
• "Processing" — anything done with personal data: collecting, storing, using, sharing, deleting.
• "Processor" — a service provider that handles personal data on our instructions (e.g. our hosting or payment providers).
• "You" — the visitor, test-taker or member the data relates to.

1. Data we collect

• Account data: email address and a hashed password (we never store your password in readable form), and — only if you choose to add them on your dashboard — your first name, last name and phone number.
• Assessment data: your answers, scores and generated results (IQ estimate, personality type, career profile), and the optional gender you select before a test.
• Billing data: subscription status and billing history. Card details are collected and stored by our payment processor, Airwallex — they never touch our servers.
• Technical data: IP address, browser and device information, and pages visited, collected through server logs and — where enabled — the analytics tools below.
• Support data: the contents of emails you send to support.

2. Why we process it

• To provide the Service (performance of contract): running your tests, generating and storing your reports, operating your account and subscription.
• To take payment and prevent fraud (contract and legitimate interest).
• To improve the product and measure marketing (consent and legitimate interest): aggregate analytics about how the site is used and which campaigns brought visitors.
• To communicate with you (contract and legitimate interest): transactional emails about your account, billing and support requests.
• To comply with law (legal obligation): tax, accounting and lawful requests from authorities.

3. Analytics and advertising tools

We use Google Analytics 4 (usage analytics), Google Ads conversion tracking and Meta Pixel (advertising measurement). These tools set cookies or similar identifiers and receive technical data about your visit — see the Cookie Policy for exact names and lifetimes. We do not share your test answers with any of them. You can opt out of non-essential cookies through your browser settings or the ad platforms' own preference tools (Google Ads Settings, Meta Ad Preferences).

These tools also receive your contact details — email address, and the name and phone number if you have added them to your profile — so that a sign-up or purchase can be matched to the campaign that led to it. Google and Meta require these to be hashed before use for matching. This happens whenever the analytics and advertising tools are active in your browser: they load when you use the site, so to prevent the sharing you need to block those cookies in your browser settings or use its tracking-protection features, as described in the Cookie Policy. You can remove your name and phone number at any time from the Profile tab of your dashboard.

4. Who we share data with

• Service providers that run our infrastructure: DigitalOcean (hosting and database), Cloudflare (DNS and network security), Airwallex (payments), and the analytics providers above — each bound by data-processing agreements.
• Authorities, where required by law.
• A buyer or successor, if the business is sold or merged, under protections at least as strong as this policy.

We do not sell your personal data and we do not share it with data brokers.

5. International transfers

Our infrastructure is hosted in the United States. If you use the Service from outside the US (including the EU/UK), your data is transferred to and processed in the US and other countries where our processors operate, protected by appropriate safeguards such as Standard Contractual Clauses with those processors.

6. Retention

• Account and assessment data: kept while your account exists; deleted or anonymized within 90 days of a verified deletion request.
• Billing records: kept as long as tax and accounting law requires.
• Server logs: rotated automatically, typically within 30–90 days.

7. Your rights

Depending on where you live (including under the GDPR and CCPA/CPRA), you may have the right to access, correct, delete or receive a copy of your personal data, to restrict or object to processing, to withdraw consent at any time, and to not be discriminated against for exercising these rights. To exercise any of them, email [email protected] from your account address — we respond within 30 days. EU/UK residents may also lodge a complaint with their local supervisory authority. California residents: we do not sell or "share" personal information as defined by the CPRA.

8. Security

All traffic is encrypted in transit (TLS), passwords are hashed with an industry-standard algorithm, payment processing is PCI-DSS compliant through Airwallex, and access to production data is restricted. No system is perfectly secure; if a breach affecting your data occurs we will notify you and the relevant authorities as required by law.

9. Children

The Service is not directed at children and may not be used by anyone under 18. We do not knowingly collect data from children; if you believe a child has created an account, contact us and we will delete it.

10. Changes and contact

We will post any changes to this policy here with an updated date. For material changes we will notify account holders by email before the changes take effect; non-material clarifications may apply immediately. Disputes relating to privacy are handled as described in our Terms & Conditions. Questions or requests: [email protected].