PrepForge HQ Privacy Policy

PrepForge does not sell personal information.

PrepForge does not rent or trade personal information.

PrepForge does not disclose personal information to advertisers, data brokers, or other third parties for their own advertising, marketing, profiling, or independent commercial purposes.

PrepForge does not use personal information for targeted advertising.

Information is disclosed only in the limited circumstances described in this Policy, including to contracted service providers strictly necessary to operate PrepForge, when a user directs us to disclose it, or when disclosure is legally required.

Account information

When you create or access an account, PrepForge may receive:

• Your name.
• Email address.
• Profile image.
• Authentication-provider identifier.
• Account creation and login information.
• Account role and administrative status.

When you sign in through Google or another authentication provider, PrepForge receives only the information authorized through that provider and required to create or authenticate your account.

PrepForge does not receive your Google password.

Educational and user-created content

PrepForge may store content you create or submit, including:

• Course titles and descriptions.
• Chapters and topics.
• Questions and answer choices.
• Correct answers and explanations.
• Notes.
• Saved exams, midterms, and finals.
• Study settings.
• Confidence selections.
• Quiz responses.
• Scores and completion history.
• Missed and reviewed questions.
• Uploaded or imported educational material.

Usage and technical information

PrepForge and its infrastructure providers may automatically process limited technical information, including:

• IP address.
• Browser and device type.
• Operating system.
• Requested pages.
• Dates and times of access.
• Referring page.
• Error information.
• Security and authentication events.
• Approximate geographic region inferred from an IP address.
• Cookies or similar identifiers necessary for authentication, security, and session management.

PrepForge does not use this information to build advertising profiles.

Guest exam information

Users may be permitted to complete certain practice examinations without signing into an account.

For guest attempts, PrepForge may process:

• The public exam accessed.
• Answers submitted.
• Score.
• Start and completion times.
• Duration.
• Technical session identifiers.
• Security and abuse-prevention information.

Guest progress may be stored only within the browser session unless the user signs in or the Service clearly states otherwise.

PrepForge may retain limited aggregated or de-identified guest-exam statistics, such as completion counts, average scores, and commonly missed questions.

Payment information

If PrepForge introduces paid features, payments may be processed through a third-party payment provider such as Stripe.

PrepForge may receive transaction-related information such as:

• Payment status.
• Subscription status.
• Product purchased.
• Transaction identifier.
• Billing contact information.
• Limited payment-method details, such as card brand and last four digits.

PrepForge does not intend to store complete payment-card numbers.

PrepForge uses information to:

• Create and maintain user accounts.
• Authenticate users.
• Provide courses, quizzes, examinations, and study tools.
• Save progress and study history.
• Grade submitted answers.
• Display scores and explanations.
• Personalize study and review features.
• Maintain starter courses and official content.
• Process user-requested imports.
• Provide AI-assisted features requested by users.
• Respond to questions and support requests.
• Detect fraud, misuse, and security incidents.
• Diagnose errors and maintain reliability.
• Enforce the Terms of Use.
• Comply with legal obligations.
• Develop and improve PrepForge using aggregated, de-identified, or appropriately restricted information.

PrepForge does not use account or educational information for third-party targeted advertising.

PrepForge does not:

• Sell personal information.
• Rent personal information.
• Trade personal information.
• Provide personal information to data brokers.
• Provide personal information to advertisers.
• Share personal information for cross-context behavioral advertising.
• Allow third parties to use PrepForge user information for their own direct marketing.
• Use user-created educational content to create third-party marketing profiles.

Where applicable privacy law distinguishes between "selling" and "sharing" personal information, PrepForge does neither for advertising or independent commercial purposes.

PrepForge relies on carefully selected service providers to operate the Service.

These providers may process limited information only as necessary to perform services for PrepForge, such as:

• Website hosting and deployment.
• Database hosting.
• User authentication.
• Data storage.
• Security and fraud prevention.
• Error monitoring.
• Email delivery.
• Payment processing.
• User-requested artificial-intelligence processing.

Current or anticipated providers include:

• Vercel, for website hosting and deployment.
• Supabase, for authentication, database hosting, and related infrastructure.
• Google, when a user chooses Google authentication.
• OpenAI, when a user chooses to use an AI-assisted feature.
• Stripe, if payment processing is introduced.

These providers are not authorized by PrepForge to sell PrepForge user information or use it for their own advertising purposes.

The providers may maintain their own legal, security, and privacy obligations. Their handling of information is also subject to their applicable agreements and policies.

When you deliberately use an AI-assisted feature, the information needed to fulfill your request may be transmitted to an AI service provider.

This may include:

• Course descriptions.
• Chapter text.
• Questions and answers.
• Educational notes.
• Text submitted for import or analysis.
• Instructions necessary to produce the requested result.

PrepForge will not intentionally submit your entire account history when it is unnecessary to complete the request.

Do not submit:

• Protected health information.
• Patient names or medical-record information.
• Social Security numbers.
• Financial account credentials.
• Passwords.
• Confidential institutional records.
• Personally identifying student records.
• Proprietary examinations or test banks you are not authorized to share.

PrepForge will describe material AI-data practices before making an AI-assisted feature generally available.

PrepForge may disclose information when reasonably believed necessary to:

• Comply with a valid subpoena, court order, law, or governmental request.
• Protect the rights, safety, and security of users or others.
• Investigate fraud, abuse, or a security incident.
• Enforce the Terms of Use.
• Establish, exercise, or defend legal claims.

PrepForge will not voluntarily provide personal information to governmental authorities without valid legal grounds.

Where legally permitted and reasonably practical, PrepForge may notify an affected user before responding to a legal demand.

PrepForge does not sell user information as a standalone asset.

If PrepForge is involved in a merger, acquisition, financing, reorganization, bankruptcy, or transfer of the Service, information may be transferred as part of that transaction, subject to confidentiality protections and applicable law.

Any successor operating PrepForge would be required to honor this Privacy Policy unless users are given legally sufficient notice of a change.

Personal information may not be transferred for an unrelated advertising or data-brokerage purpose merely because of a business transaction.

PrepForge may use cookies, browser storage, and similar technologies that are necessary to:

• Keep users signed in.
• Maintain secure sessions.
• Remember user preferences.
• Preserve temporary guest-exam progress.
• Prevent fraud and abuse.
• Maintain application functionality.

PrepForge does not use third-party advertising cookies.

Disabling essential cookies or browser storage may prevent account access or interfere with certain features.

PrepForge retains personal information only for as long as reasonably necessary to:

• Provide the Service.
• Maintain a user's account and study history.
• Fulfill the purpose for which the information was collected.
• Meet legal, accounting, and security obligations.
• Resolve disputes.
• Prevent fraud and abuse.
• Maintain appropriate backups.

Account and study data may be retained while an account remains active.

Following an account-deletion request, PrepForge will delete or de-identify applicable information within a reasonable period, subject to:

• Backup-retention cycles.
• Security logs.
• Legal obligations.
• Fraud-prevention needs.
• Information that must be retained to resolve a dispute.
• Content that has been lawfully aggregated or de-identified.

PrepForge uses reasonable administrative, technical, and organizational safeguards designed to protect personal information.

Measures may include:

• Encrypted network connections.
• Access controls.
• Authentication protections.
• Database access policies.
• Restricted administrative access.
• Environment-variable protections.
• Logging and monitoring.
• Secure infrastructure providers.
• Software updates and vulnerability remediation.

No internet service can guarantee absolute security. Users should use secure devices, protect their accounts, and notify PrepForge of suspected unauthorized access.

Depending on where you live, you may have the right to:

• Request access to personal information.
• Request correction of inaccurate information.
• Request deletion of information.
• Receive a copy of certain information.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Appeal the denial of a privacy request.
• Receive equal service without unlawful discrimination for exercising privacy rights.

Because PrepForge does not sell personal information or share it for targeted advertising, there is no sale or advertising-based sharing from which users ordinarily need to opt out.

Requests may be sent to:

hollar@prepforgehq.com

PrepForge may need to verify your identity before completing a request.

California residents may have rights under the California Consumer Privacy Act, as amended.

Subject to applicable thresholds, definitions, and exemptions, those rights may include the right to:

• Know the categories and specific pieces of personal information collected.
• Know the purposes for collecting and using personal information.
• Know the categories of recipients to which information is disclosed.
• Request correction.
• Request deletion.
• Receive information in a portable format.
• Opt out of sale or sharing.
• Limit certain uses of sensitive personal information.
• Receive nondiscriminatory treatment.

PrepForge does not sell personal information and does not share personal information for cross-context behavioral advertising.

PrepForge does not knowingly sell or share the personal information of users under 16.

PrepForge is not intended for children under 13.

PrepForge does not knowingly collect personal information directly from children under 13.

If PrepForge learns that a child under 13 submitted personal information without appropriate parental authorization, reasonable steps will be taken to delete it.

A parent or guardian who believes a child has submitted information may contact:

hollar@prepforgehq.com

PrepForge is generally provided directly to individual users and is not automatically acting as a school official or institutional educational-record system.

Users should not upload personally identifying student records unless they have authorization and an appropriate written agreement is in place.

Using PrepForge independently does not make PrepForge compliant with every institution's obligations under FERPA or similar educational privacy laws.

PrepForge is an educational study service and is not intended to store protected health information.

PrepForge is not automatically a HIPAA-covered entity or business associate.

Users must not enter patient names, medical-record numbers, dates of birth, photographs, clinical notes containing identifiers, or other protected health information.

PrepForge is operated from the United States.

Information may be processed and stored in the United States or other locations where PrepForge's service providers operate.

Users outside the United States understand that privacy and data-protection laws may differ from those in their country.

Where required, PrepForge will use legally recognized mechanisms for international data transfers.

PrepForge does not engage in third-party targeted advertising or sell personal information.

Because PrepForge does not conduct those activities, a browser-based opt-out signal generally does not change PrepForge's processing.

PrepForge will honor legally applicable browser privacy signals where required.

PrepForge may update this Privacy Policy as features, vendors, or legal requirements change.

The revised Policy will display a new effective date.

Material changes may also be communicated through the Service or by email. PrepForge will not retroactively use personal information in a materially different manner without appropriate notice or consent where required.

Privacy questions and requests may be sent to:

PrepForge

Website: prepforgehq.com

Email: hollar@prepforgehq.com