Privacy policy

Version of 19 September 2026.

This policy describes how LetzTest processes personal data under Regulation (EU) 2016/679 (GDPR) and applicable Luxembourg law. The controller is SayPeter SARL-S, a limited liability company incorporated in Luxembourg, identified in the legal notice.

1. Data processed

  • Account: email address, name, interface language, exam date if you provide one.
  • Purchase: billing details and payment history. Card data is handled solely by the payment provider; we never receive it.
  • Learning use: your questionnaire answers, the marks obtained and the feedback comments that go with them.
  • Technical: connection logs and aggregate audience measurement.
  • First-party funnel measurement: a cookieless, identifier-free landing count is sent before the cookie question; your choice is counted separately as accepted or necessary only.
  • Advertising measurement, only with your consent: PageView, InitiateCheckout and Purchase events sent to Meta from your browser and from our server (IP address, user agent, Meta advertising identifiers, and for a purchase your email address as an irreversible hash). The exact detail is in the cookie policy.

2. Purposes and legal bases

  • Providing the service and performing the contract: account, access, feedback, progress tracking.
  • Legal obligations: invoicing and accounting.
  • Legitimate interest: service security, abuse prevention, improving feedback quality on aggregated data.
  • Consent: non-essential audience measurement and non-transactional messages, withdrawable at any time.

3. Processing by artificial intelligence

Marking is automated: your answers are compared with the exercise key and produce a mark and a comment. It produces a practice estimate and involves no decision producing legal effects concerning you. You may ask for human review of a piece of feedback by writing to our contact address.

4. Retention

  • Transcripts, scores and history: for the life of the account.
  • Invoicing documents: the statutory accounting retention period in Luxembourg.
  • Account deletion: data is erased within 30 days, apart from legal retention obligations.

5. Recipients and processors

We use providers for hosting, transactional email, payment, and speech and language processing. Those providers act on instructions and are bound by contract. Where a transfer outside the European Economic Area is necessary, it is covered by the European Commission’s standard contractual clauses. The current list of processors is available on request.

6. Company customers

Where an employer funds an employee’s access, the employer receives activity indicators and estimated scores only. It has no access to the detail of answers or mistakes. The employee is informed of this on first access.

7. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability, and the right to withdraw consent. Write to hello@letztest.lu. You may lodge a complaint with the Commission nationale pour la protection des données (CNPD) in Luxembourg.

8. Security

Recordings are stored in private storage reachable only through time-limited signed links. Internal access is restricted and logged. Traffic is encrypted in transit.