1. Scope and who is responsible
This Privacy Policy explains how PrepVanta handles personal information when you visit prepvanta.com, create an account, purchase or use a preparation product, complete a diagnostic, contact support, or otherwise use the Services.
PrepVanta determines why and how this information is used for the Services. Our service providers process information for us under their own contracts and privacy terms. This policy does not govern websites or services that PrepVanta does not control.
2. Information we collect
Information you provide
- Account information: email address and, if supplied through the authentication flow, name.
- Purchase information: product, price, currency, payment status, Stripe customer and Checkout-session identifiers, and transaction time. Payment-card details are entered with Stripe and are not stored in PrepVanta’s database.
- Study information: product access, completed lesson identifiers, completion times, course progress, and text you choose to save in lesson error-log fields.
- Support and feedback: your email address and whatever you include in an access request, refund request, content report, or product-feedback message.
Information collected automatically
- Page and product views; diagnostic start, completion, restart, and overall score; checkout intent and verification; practice start, completion, and score; product key; page path; event time; and coarse referring-site origin.
- Random visitor and session identifiers stored in your browser. They are not advertising IDs. A visitor identifier may persist in local storage; the session identifier is kept in session storage.
- Standard hosting, security, and network logs that providers may generate, such as IP address, browser or device information, timestamps, requested URLs, and error details.
PrepVanta analytics does not collect your individual diagnostic answers, practice-question answers, passwords, or payment-card number.
3. How we use information
- authenticate accounts and deliver secure sign-in links;
- process and verify purchases, prevent duplicate purchases, and grant the correct product access;
- save progress and provide lessons, diagnostics, and practice tools;
- respond to support, refund, security, and content-quality requests;
- measure product funnels and improve accuracy, usability, reliability, and course value;
- detect fraud, abuse, unauthorized access, and violations of our Terms;
- maintain financial, audit, and business records; and
- comply with legal obligations and protect customers, PrepVanta, and others.
4. Service providers and disclosures
PrepVanta uses providers to operate the Services:
- Supabase provides authentication and database services for accounts, purchases, access, progress, and first-party analytics.
- Stripe hosts checkout and processes payment and transaction information.
- Netlify hosts the website and server functions and may process request, security, and deployment logs.
- Google Analytics provides optional traffic and engagement measurement after consent.
- Meta may provide optional website and marketing measurement through Meta Pixel when that connection is activated and the visitor consents.
- Email-delivery and mailbox providers transmit secure sign-in links and support communications.
We may also disclose information when reasonably necessary to comply with law or lawful process; prevent fraud, security incidents, or harm; enforce agreements; complete a merger, financing, reorganization, or sale subject to appropriate protections; or act with your direction or consent.
PrepVanta does not sell personal information. If you allow optional marketing measurement, Meta may receive page and conversion events for measurement and audience services under its own terms. PrepVanta does not send individual diagnostic answers, lesson notes, or course progress to advertising providers.
5. Browser storage and analytics choices
Account sessions, anonymous visitor and session identifiers, unfinished diagnostic progress, and your optional-tracking choice rely on browser storage. Diagnostic answers saved for refresh recovery remain on your device and are not sent as individual answers to PrepVanta analytics. Blocking or clearing storage may sign you out, reset anonymous measurement, erase an unfinished diagnostic, or prevent account and progress features from working correctly.
Google Analytics and Meta Pixel remain blocked unless you select “Allow analytics & marketing.” You can decline optional measurement or reopen “Privacy choices” at any time. Essential hosting and security logs may still be generated when you request a page.
6. Retention
We keep information only as long as reasonably needed for the purposes described here. Account, access, and progress records generally remain while the account or paid access is active. Purchase and refund records may be retained longer for accounting, tax, fraud, chargeback, and legal requirements. Support and security records are retained as needed to resolve the issue and preserve an appropriate audit trail.
Anonymous or aggregated measurements may be retained after they can no longer reasonably identify an individual. Deletion requests do not require removal of information that law permits or requires us to keep.
7. Security
PrepVanta uses passwordless authentication, product-specific access checks, encrypted connections, database row-level security, restricted service credentials, and payment processing hosted by Stripe. Access to administrative metrics and controls is limited to authorized accounts.
No system is completely secure. Protect access to your email account, do not forward sign-in links, and contact support promptly if you suspect unauthorized access. Do not email passwords, card details, employer-confidential information, or recalled exam questions.
8. International processing
PrepVanta and its providers may process information in the United States and other countries where they operate. Those countries may have different privacy laws from your location. Where required, providers use contractual or other safeguards for cross-border processing. Review the linked provider notices for their current locations and transfer practices.
9. Your choices and privacy rights
Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or objection, or to appeal a decision about a request. You may also have the right to complain to a privacy regulator. These rights can be subject to identity verification and legal exceptions.
Email support@prepvanta.com with “Privacy request” in the subject. Include the account email and the request, but do not send sensitive identification documents unless we ask through an appropriate process. We may need to verify that you control the account email.
10. Children
The Services are not directed to children under 13, and PrepVanta does not knowingly collect personal information from a child under 13. If you believe a child has provided information, contact support so it can be reviewed and deleted where appropriate. Users who are under the age of legal majority in their location should use the Services only with authorization from a parent or guardian.
11. Changes and contact
We may update this policy when products, providers, data practices, or legal requirements change. The revised page will show its last-updated date. Material changes will be communicated through the Services or account contact information when appropriate.
Questions about this policy or PrepVanta’s data practices may be sent to support@prepvanta.com. See also the Terms of Use, Refund and Returns Policy, and Support Center.
12. Diagnostic plans and email follow-up
If you explicitly opt in, PrepVanta stores your email address, selected product, overall diagnostic score, and recommended focus area to send the study plan you requested and useful course follow-up. Individual diagnostic answers are not stored for this purpose. A checkout reminder is queued only when you select the optional email checkbox, and a purchase-confirmation onboarding message may be sent to deliver paid access.
Every optional follow-up includes an unsubscribe link. Unsubscribing cancels queued marketing follow-up; essential account, purchase, security, and support messages may still be sent. We retain an unsubscribe record as needed to honor your choice. Email-delivery providers process message and delivery information for PrepVanta.