Privacy Policy

State6 Prep is operated by State6 Prep Ltd, a company incorporated in England and Wales (company number 17230529, registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ), acting as data controller for the purposes of applicable data protection law. State6 Prep is registered with the Information Commissioner's Office (ICO). Our ICO registration number is ZC138846. Contact for all privacy and data protection matters: hello@state6.co.uk

We collect only the information reasonably necessary to provide and operate the service.

Account Data

Email address. Authentication credentials (stored in encrypted or hashed form via Clerk). Account status, rank pathway selection and access period information.

Purchase Data

Selected plan type and purchase date. Access expiry date and AI credit balances. Transaction reference identifiers. We do not store payment card details. All payment processing is handled securely by Stripe.

User Content

STARR evidence entries and PEEL preparation content. Interview practice answers, including transcripts of spoken Mock Board and Mock CBI answers. Written Exercise drafts and submitted responses. Portfolio material, evidence notes and preparation records. AI prompt submissions and coaching session content. Exported portfolio content. On the Applying for Your Next Role plan, the job adverts or role profiles you upload, whether as text, a PDF or a photo of the advert, and the draft application or expression of interest text you submit for review. Uploaded adverts are used only to shape your own practice and feedback and are never shared with any other user.

Technical and Security Data

IP address, browser type, operating system and device information. Session information, login timestamps and authentication logs. Basic usage analytics used to maintain platform stability, detect misuse and improve security. We see your full IP address when you use the demo, download a guide, unsubscribe or start the free trial mock board question. We use it to stop abuse and we do not use it to identify you. For the free trial mock board question we also keep a one way hashed form of the address against that board's record, so we can see when several trial boards start from one connection; the hash cannot be turned back into the address. Our lawful basis is our legitimate interest in keeping the service usable.

Usage and Analytics Data

Through PostHog we collect usage data such as pages visited, features used and general interaction patterns, to understand how the site is used and improve it. PostHog events are linked to an identifier for you, your account ID when you are signed in, or the email address you gave on the demo. They are not anonymous, but we do not add your answers to them. If you are signed in, we tag your analytics events with your account, including the email address on it, so we can support you and see how members use the tool. That happens whether or not you accept analytics cookies, because it is tied to your account and not to anything stored on your device. For a visitor who is not signed in, this is by default measured in cookieless mode using a privacy-preserving hash, with nothing stored on your device. If you accept analytics on the cookie banner, we also record a masked session replay of your visit: it captures navigation and clicks but masks every input and all on-screen text, so it never records what you type, your board evidence or your personal details. Vercel also measures visits and page speed for us without cookies and without storing anything on your device. We do not build advertising profiles and do not track you across other websites.

Communications Data

Support emails, customer service enquiries and feedback submissions.

Prospective Users (Free Demo and Downloads)

If you try the free demo or download a free guide, we collect the email address you enter, your marketing choice and the source of the signup. We also record the first page of your visit and the website that sent you, so we can see which pages lead people to try us; neither is used to contact you. The single answer you write in the demo is processed to generate your marking and is not saved to any account. We use this information to deliver what you asked for and, only where you have agreed, to send you the marketing emails described in section 4.

State6 Prep is designed for anonymised preparation content only, whether you are preparing for promotion or applying to join the police. Users must not upload or enter operational policing information, intelligence, protectively marked material, safeguarding content, identifiable personal data, confidential force information, information relating to live investigations, or any content capable of identifying a living individual. If you are an applicant, the everyday examples you practise with must be anonymised in the same way: do not include the real names or identifying details of any person. Users are responsible for ensuring all content entered complies with any applicable force policies, professional standards, confidentiality obligations, UK GDPR and the Data Protection Act 2018.

Special category and criminal-offence data. We do not need, seek, or have a lawful basis to process special category data under Article 9 of the UK GDPR, or criminal-offence data under Article 10, and we do not knowingly do so. The platform is built for fully anonymised reflective practice, and we ask you not to enter such information. If any is entered despite this, we treat it as entered in error: it is held only in your private account, is never used to build a profile of you and is never shared with your force, employer or any third party, and you can delete it, or ask us to delete it, at any time by emailing hello@state6.co.uk. Our anonymisation guidance is set out above and in our Terms of Use, and we ask you to follow it before entering any content.

Contract Performance

We process personal data where necessary to provide the services you have purchased, including providing platform access, managing accounts, processing payments and providing support.

Legitimate Interests

We process certain data where necessary for our legitimate interests in maintaining platform security, preventing fraud and misuse, improving platform reliability, understanding which pages bring people to the service, measuring use without cookies, and sending preparation tips to people who have started a trial, provided those interests are not overridden by your rights and freedoms.

Legal Obligations

We process data where necessary to comply with legal obligations, including maintaining accounting and tax records and responding to lawful requests from authorities.

Consent

Where we rely on your consent, such as for cookie-based product analytics and a masked session replay through PostHog, we set those cookies and record a replay only after you accept on our cookie banner. If you choose Essential only, PostHog still measures your visit in cookieless mode, which sets nothing on your device and records no replay. The replay, when you have accepted it, masks every input and all on-screen text, so it does not capture what you type. You can withdraw consent at any time by changing your cookie choice. See our Cookie Policy for detail.

Marketing Emails

If you try the free demo, the optional tick on the demo alone decides whether we may send you marketing email; leave it unticked and you will only receive the result you asked for. If you download a free guide or start a free trial, we may send you related preparation tips and occasional offers under the soft opt-in rules for people who have shown an interest in our service. Every marketing email carries an unsubscribe link that takes effect immediately, and unsubscribing never affects service emails you need, such as receipts.

Age

The service is for adults applying to or serving in policing. It is not intended for anyone under 18 and we do not knowingly collect their data.

The STARR examples, PEEL responses, interview answers, Written Exercise responses, evidence entries and portfolio content you create remain your content. We do not make your content visible to other users, share it with police forces or employers, or use it to train public AI models. Your content may be accessed by authorised State6 Prep personnel only where reasonably necessary for operational support, security maintenance or legal purposes.

When you use AI-supported functionality, your prompts and related content are securely transmitted to Anthropic's API for the purpose of generating AI-assisted coaching responses. Anthropic acts as a data processor in this context. Under our API arrangements, content submitted through State6 Prep is not used to train Anthropic's public AI models. Written Exercise responses are saved privately to your account and, where marked feedback is provided, are assessed through the same Anthropic API arrangements. AI-generated outputs may be inaccurate, incomplete or inappropriate and must always be independently reviewed, personalised and verified before use.

Voice features (Mock Board, Mock CBI interview and voice input). When you speak an answer, your speech is streamed in real time to Deepgram, who act as a data processor to convert it to text. Deepgram also provides a backup voice for the panel if our main voice provider is unavailable; only the script we write is sent to them for that. Audio is processed transiently for transcription and is not stored as a recording by State6 Prep, and our contract with Deepgram requires that they do not retain it as a recording either. Only the written transcript is retained, saved privately to your account alongside your feedback, where you can review or delete it at any time. The panel and interviewer voices you hear are synthesised by ElevenLabs from text we provide; your voice, audio and personal data are never sent to ElevenLabs. Transcripts of spoken answers are assessed by Anthropic's API under the same terms as written content above.

Free demo marking. If you use the demo at state6.co.uk/demo, the single answer you submit is sent to Anthropic's API to generate the marking you see, under the same arrangements as above: it is not used to train public AI models. The answer and its marking are processed to show you the result and are not saved to any account by us. Only your email address and marketing choice are retained, as described in section 2.

Your scores, debriefs and coaching are decision support, not automated decisions producing legal or similarly significant effects. Every AI output is advisory, generated for your own review, and you stay in control of whether and how to use it. You can request a human review of, or contest, any AI-generated assessment by emailing hello@state6.co.uk.

We use the following carefully selected third-party providers to operate the platform. We do not sell personal data to any third party.

Fonts are served from our own domain.

Your account data and the content you create are stored by Supabase in the European Union (Ireland). Some of our other third-party providers process personal data outside the United Kingdom. Anthropic (AI prompts), Deepgram (streamed speech for live transcription), Resend (email addresses for service and marketing emails), Clerk (authentication), Vercel (hosting), Stripe (payments), Cloudflare (bot protection on the free demo) and Upstash (short lived request counters for the demo, the free downloads, the unsubscribe page and signed in AI requests) process personal data on infrastructure that may be located in the United States. PostHog analytics is hosted in the European Union. We rely on the UK International Data Transfer Agreement, or the UK Addendum to the EU standard contractual clauses (and, where applicable, UK adequacy or data-bridge arrangements), together with each provider's data-processing terms, as the safeguard for transfers outside the UK in accordance with UK GDPR.

We use reasonable technical and organisational measures to protect personal data against unauthorised access, misuse, loss or disclosure, including:

• ·Encryption in transit using TLS and HTTPS.
• ·Encrypted data storage where supported by our infrastructure providers.
• ·Authentication controls managed through Clerk.
• ·Row-level access controls in Supabase.
• ·Restricted administrative access.
• ·Monitoring and security logging.
• ·Regular backups.

No internet-based service can guarantee absolute security. In the event of a personal data breach we will notify the ICO and affected users within the timeframes required by applicable law.

Active Accounts

Account and content data is retained while your account remains active.

Closed Accounts

We delete account data by hand within 30 days of a confirmed closure request, sent to hello@state6.co.uk. Backup copies age out within a further 30 days.

Session Replay

Session replays are kept for 30 days and then deleted automatically.

Prospective Users (Leads)

If you leave your email address through the free demo or a free download but do not create an account, we review lead records and delete any with no contact for twelve months. Unsubscribing stops marketing email immediately, and you can ask us to delete your details at any time by emailing hello@state6.co.uk.

Financial Records

Transaction and accounting records are retained for up to seven years to comply with legal and tax obligations.

Under UK GDPR and the Data Protection Act 2018 you have the following rights:

• ·Right of access — to request a copy of the personal data we hold about you.
• ·Right to rectification — to request correction of inaccurate or incomplete data.
• ·Right to erasure — to request deletion of your data in certain circumstances.
• ·Right to restriction — to request that we limit how we process your data in certain circumstances.
• ·Right to object — to processing based on legitimate interests.
• ·Right to data portability — to receive your data in a commonly used machine-readable format.
• ·Right to withdraw consent — where processing is based on consent.

To exercise any of these rights, email hello@state6.co.uk. We will respond within one calendar month.

How to Request Account Deletion

To close your account and request deletion of your data, email hello@state6.co.uk with the subject line "Account Deletion Request" and the email address associated with your account. We will confirm deletion within 30 days.

State6 Prep uses a small number of essential cookies necessary to operate the platform, manage sessions and remember your cookie preference. We do not use advertising cookies, tracking cookies or third-party behavioural analytics. Full details are set out in our Cookie Policy, accessible from the footer of the website and platform.

If you are unhappy with how we handle your personal data, please contact us at hello@state6.co.uk in the first instance. If you remain unsatisfied, you have the right to complain to the Information Commissioner's Office: ico.org.uk · Telephone: 0303 123 1113

We may update this Privacy Policy from time to time to reflect changes to the platform, our practices or applicable law. The latest version will always be published on the platform with the date it was last updated.

hello@state6.co.uk · State6 Prep Ltd · Company number 17230529 · Registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ · state6.co.uk