Privacy Policy

Last updated: 2026-05-09

This page explains what personal data Virtual Driving School Pro ("VDS Pro", "we", "us") collects, why we collect it, and what you can do about it. We aim to keep this short and readable. For the formal version that will sit alongside our terms of service, see the referenced laws below.

What we collect

• Account info: your email address (used to sign in and to send you transactional email).
• Subscription info: your Stripe customer ID and subscription status. Stripe handles your payment-card data — we never see it.
• Progress data: when you use the simulator, we record the modules you attempt, your scores, and how long each session lasted.
• Achievements: the badges you've unlocked.
• Technical data: session cookies (so you stay signed in), basic request logs (IP, user-agent, requested URL).
• Organisation data: if you join an organisation, your name, role, and progress are visible to that organisation's instructors and admins.

Why we collect it

• To run your account and let you sign in.
• To bill you, only if you're on a paid plan.
• To show you, your instructor, or your driving school how you're progressing.
• To improve the product (we look at aggregate, anonymous usage).
• To send you essential transactional email (trial expiry warnings, receipts).

Who we share it with

• AWS: hosts our database and email delivery (DynamoDB, SES) in the US.
• Stripe: handles all payment processing.
• Cognito: AWS managed sign-in service that stores your email and a hashed password.
• If you join an organisation, with that organisation's admins and instructors only — never with other organisations.

We do not sell your data. We do not use it for advertising. We do not share it with anyone else without your consent or unless we are legally required to.

How long we keep it

We keep your account data while your account is active. If you delete your account at /account, we anonymise your email and name within minutes; aggregated, anonymous progress data may be retained where required for organisation-level reporting accuracy.

Your rights

Under UK GDPR / EU GDPR you can:

• Access your data — visit /account to download a JSON export.
• Delete your account — same page, "Delete your account" section.
• Correct inaccurate data — email support@vdspro.net.
• Object or restrict processing — same email.
• Complain to a supervisory authority (e.g. the UK ICO).

Cookies

We set one essential session cookie (connect.sid) so you stay signed in and so we can protect form submissions against cross-site request forgery. We do not use third-party tracking cookies or analytics that identify you personally.

Contact

Questions about your data? Email support@vdspro.net. We respond within 30 days.