LingoGrade - HomeLingoGrAde

Privacy Policy

Last updated: April 19, 2026

ACSO Consulting LTD ("we", "us", or "our"), registered in Bulgaria, operates the website www.lingograde.com and provides language learning services under the LingoGrade brand. This Privacy Policy describes how we collect, use, and protect your personal information.

1. Information We Collect

We collect information you provide directly to us when you register for our services, enroll in a course, make a payment, or contact us. This may include your name, email address, phone number, and payment information.

If you sign in using a third-party identity provider (such as Google or Apple), we receive your name, email address, and profile identifier from that provider. We use this information solely to create and manage your LingoGrade account. We do not access your contacts, files, or any other data from these providers beyond what is needed for authentication.

When you make a purchase, payment processing is handled by Stripe, Inc. We do not store your full credit card details on our servers. Stripe's privacy policy is available at stripe.com/privacy.

We may also collect technical data automatically when you visit our website, including your IP address, browser type, device information, and pages visited, through server logs and cookies.

2. How We Use Your Information

We use the information we collect to process enrollments and payments, deliver language learning services and course materials, communicate with you about your courses and progress, respond to your inquiries and provide support, send you relevant updates about our services, comply with legal obligations, and improve our website and services.

3. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information with identity providers (Google, Apple) when you choose to sign in with their accounts, payment processors (Stripe) to complete transactions, service providers who assist in operating our website and delivering our services, and professional advisors and legal authorities when required by law.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. All payment transactions are encrypted using SSL/TLS technology and processed through PCI-compliant payment infrastructure.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Course enrollment and transaction data are retained in accordance with applicable Bulgarian and EU law.

6. Your Rights Under GDPR

As a data controller based in the European Union, we comply with the General Data Protection Regulation (GDPR). You have the right to access, correct, or delete your personal data, restrict or object to our processing of your data, request data portability, and withdraw consent at any time where processing is based on consent.

You can delete your account and all associated data directly from your account settings at app.lingograde.com. To exercise any other rights, please contact us using the details below.

7. Express Hiring Audit — Candidate Data

LingoGrade offers the Express Hiring Audit, a B2B service where an employer pays for an independent CEFR language audit of a candidate they intend to hire. For this product, the candidate is the data subject and the employer is a third-party recipient.

Lawful basis. Processing of candidate data is based on the candidate's explicit, informed, and freely given consent under GDPR Article 6(1)(a). No assessment takes place, and no report is generated, unless the candidate has actively consented via our consent page. Consent is captured with timestamp, IP address, user-agent, and the candidate's typed full name as evidentiary trail under Article 7(1).

Data processed. We record a 25-minute conversation with the candidate (audio), analyse their language performance against the CEFR framework, and produce a written audit report signed by the assessor.

Recipients. The written report is delivered to the candidate personally and to the employer (named on the consent page). Once the employer receives the report, they become an independent controller for their own subsequent processing and inherit responsibility for retention, access, and deletion within their own policies.

Retention. LingoGrade retains the audio recording, analysis artefacts, and report for 180 days after delivery, after which they are deleted from our systems. Invoice and transaction records are retained in accordance with applicable Bulgarian and EU accounting law.

Your rights as candidate. You may withdraw consent at any time before the assessment session by contacting us at marco@lingograde.com or by using the withdrawal link in the consent email. Withdrawal before the session cancels the assessment; if the employer has already been charged, they are refunded. Once the report has been delivered to the employer, you retain your rights against LingoGrade, but the employer's onward processing is governed by their own privacy notice.

8. Children's Data

LingoGrade offers language assessments for children (under 16). We only collect a child's data when a parent or legal guardian has provided consent. During sessions involving children, a parent or guardian must be present. We collect only the minimum data necessary for the assessment (first name, age range, and session recordings where applicable). We do not create marketing profiles for children, and a parent or guardian may request deletion of their child's data at any time by contacting us at the address below.

9. Cookies and Analytics

Our website uses cookies to ensure proper functionality and to analyze site traffic. These cookies are only set if you click "Accept" on our cookie consent banner. If you reject cookies, no analytics data is collected.

Google Analytics 4 (provided by Google LLC) collects anonymized data such as pages visited, session duration, and approximate location. We have enabled IP anonymization so your full IP address is never stored. You can opt out by declining cookies or by installing the Google Analytics Opt-out Browser Add-on. Google's privacy policy: policies.google.com/privacy.

Microsoft Clarity collects anonymized session recordings, heatmaps, and click data to help us understand how visitors interact with our pages and improve usability. Clarity automatically masks sensitive input fields. Clarity's privacy policy: privacy.microsoft.com.

Analytics cookies set by these services (consent-gated):

CookieProviderPurposeDuration
_gaGoogleDistinguishes unique visitors2 years
_ga_*GoogleMaintains session state2 years
_clckMicrosoftPersists Clarity user ID1 year
_clskMicrosoftConnects page views into a session1 day
CLIDMicrosoftIdentifies returning users1 year

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review their privacy policies before providing any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

ACSO Consulting LTD
Email: marco@lingograde.com
Website: www.lingograde.com