Privacy policy

The system stores email, questionnaire data, payment history, result files and audit trail data.

Account deletion is implemented as soft-delete to preserve financial and legal history.

The local environment uses cookie-based session auth and CSRF protection.