Privacy Policy

You can drill, browse the HTSUS and 19 CFR, and read explanations without an account and without telling us anything. If you make an account we store your email and your study history so the scheduling works. We never sell your data, and we never see your card number.

Without an account: ordinary server logs — IP address, browser user-agent, the pages and API paths requested, and timestamps. These are used to run and secure the service and are not tied to an identity.

With an account: your email address, a display name if you give one, and the account identifier from our sign-in provider. If you complete onboarding we also store the study-plan answers you give us: which exam sitting you are targeting, how many weeks you have, and how many hours a week you can study.

As you study: which questions you answered, what you chose, whether it was right, how long it took, and the review schedule and topic-mastery figures derived from that. This is the product — spaced repetition cannot schedule anything without it.

If you buy a pass: the customer and payment identifiers our payment processor returns, and the resulting access status. We do not receive, store, or process your card number, CVC, or bank details.

If you give us your email for a download or an alert: that email address and what you asked for.

To give you an account, to schedule your reviews and show your progress, to grant the access you paid for, to send you what you asked us to send, and to keep the service running and free from abuse. We do not use your study history to build advertising profiles.

We use a small number of processors, each for one job, and each sees only what that job needs:

• Clerk — accounts and sign-in. Holds your email and session.
• Stripe — payments. Handles your card details directly; we get back only identifiers and payment status.
• Railway — hosting for the site, the API, and the database.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We may disclose information where the law requires it.

We set no advertising or cross-site tracking cookies. The cookies in use are the ones our sign-in provider needs to keep you signed in, and, at checkout, the ones the payment processor needs to complete the payment and detect fraud. Both are strictly necessary to deliver a function you asked for.

Account and study data are kept while your account exists, and for up to 30 days after you ask us to delete it, so the deletion can be undone if it was a mistake. Records of purchases are kept for as long as tax and accounting rules require. Server logs are kept for a short operational period and then rotated out.

Wherever you are, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it and close your account. If you are in the EU/UK or in California, you also have the specific rights your law gives you — including the right to object to processing and, in California, the right not to be discriminated against for exercising them. We do not sell or share personal information as those terms are defined under the CCPA.

To exercise any of this, email [email protected] from the address on the account. We answer within 30 days.

This is a professional licensing-exam product and is not directed at children. We do not knowingly collect information from anyone under 16. If you believe a child has given us data, email us and we will delete it.

Traffic is encrypted in transit. Study data is isolated per user at the database level, so one account’s queries cannot reach another’s rows. No system is perfectly secure; if a breach ever affects your data we will tell you.

If we change this policy the “last updated” date above changes with it. If a change materially affects how we use data we already hold about you, we will email account holders before it takes effect.