Privacy Policy

1Information We Collect

We collect information you provide directly: name, email address, phone number (optional), state of residence, and language preference. We also collect usage data: test scores, practice session history, and question attempts.

2How We Use Your Information

We use your information to: provide and improve the Service, personalize your study experience, process payments, send transactional communications, and analyze usage patterns to improve our practice tests.

3Third-Party Services

We use the following third-party services that may process your data:

• Stripe — Payment processing
• PostHog — Product analytics
• Sentry — Error monitoring
• Twilio — SMS notifications (opt-in only)
• Resend — Email delivery
• Anthropic (Claude) — AI-powered explanations

4CCPA Rights (California Residents)

Under the California Consumer Privacy Act (CCPA), California residents have the right to:

• Access — Request a copy of your personal data via the data export feature in your account
• Delete — Request deletion of your account and all associated data
• Opt-out — Decline cookies via the consent banner and opt out of SMS communications
• Non-discrimination — We will not discriminate against you for exercising your CCPA rights

To exercise these rights, use the account settings in your dashboard or contact us at privacy@drivepass.com.

5TCPA Compliance

We comply with the Telephone Consumer Protection Act (TCPA). SMS notifications are opt-in only. You must explicitly consent to receive SMS messages during registration. You can opt out at any time by updating your notification preferences or replying STOP to any message.

6Data Retention

We retain your account data for as long as your account is active. Test session history is retained for progress tracking. After account deletion, we remove all personal data within 30 days. Anonymized analytics data may be retained indefinitely.

7Cookies

We use cookies for: session management, language preferences, and analytics (PostHog). You can manage cookie preferences using the consent banner displayed on your first visit. Essential cookies (session, language) cannot be disabled.

8Data Security

We protect your data with: encrypted connections (HTTPS/HSTS), hashed passwords, encrypted sensitive fields, token-based authentication with expiration, and two-factor authentication for administrative accounts.

9Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users of material changes via email. Continued use of the Service after changes constitutes acceptance of the updated policy.