Privacy Policy

Last updated: February 14, 2026

1. Information We Collect

When you create an account or use CPAtutor AI, we may collect the following information:

Account Information: Your name, email address, and display name provided during registration through our authentication provider (Supabase Auth).

Usage Data: Quiz answers, study session activity, performance metrics, streak data, and feature interactions used to personalize your learning experience.

Payment Information: Billing details are processed securely by Stripe. We do not store your full credit card number, CVV, or other sensitive payment credentials on our servers.

Device & Technical Data: Browser type, IP address, and general device information collected automatically to maintain service quality and security.

2. How We Use Your Information

We use the information we collect to provide and improve your CPA exam preparation experience, including delivering personalized practice questions and adaptive remediation, tracking your study progress and performance analytics, processing subscription payments through Stripe, sending account-related communications (password resets, billing notices), and improving our content quality and platform features. We do not sell your personal information to third parties.

AI Processing: CPAtutor AI uses artificial intelligence systems to generate questions, evaluate responses, and personalize remediation. User inputs and quiz responses may be processed by third-party AI providers to deliver these features. We do not use your personal information to train public AI models.

3. Data Storage & Security

Your data is stored securely using industry-standard practices. Our database is hosted on Supabase (PostgreSQL) with encryption at rest and in transit. Authentication is handled by Supabase Auth with secure token management. Payment processing is handled entirely by Stripe, which is PCI DSS compliant. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, or destruction. While we implement industry-standard safeguards, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

4. Third-Party Services

We use trusted third-party service providers to operate CPAtutor AI:

Supabase: Authentication and database hosting.

Stripe: Payment processing and subscription management.

Vercel: Application hosting and deployment.

AI Model Providers: We use third-party artificial intelligence infrastructure providers to process quiz responses, generate practice questions, and deliver personalized study feedback.

These providers process data solely on our behalf and are contractually restricted from using your information for their own marketing or unrelated purposes. Each provider operates under its own privacy policy, and we encourage you to review those policies.

5. International Data Transfers

Your information may be processed and stored in the United States or other jurisdictions where our service providers operate. By using CPAtutor AI, you consent to the transfer of your information to these locations.

6. Cookies & Tracking

We use only essential cookies required for authentication and session management. We do not use advertising cookies or third-party tracking pixels.

7. Your Rights

You have the right to access the personal data we hold about you, request correction of inaccurate information, request deletion of your account and associated data, export your study data, and opt out of non-essential communications. To exercise any of these rights, contact us at the email address below.

8. U.S. State Privacy Rights

Residents of certain U.S. states, including California, may have additional rights under applicable privacy laws, including the right to request access to, correction of, or deletion of personal information. We do not sell personal information. To exercise these rights, contact support@cpatutor.ai.

9. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription, your data remains accessible under the free tier. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.

10. Children's Privacy

CPAtutor AI is designed for CPA exam candidates and is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date. Continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this privacy policy or how we handle your data, please contact us at support@cpatutor.ai.

CPAtutor AI is operated by Certprep.ai, located in Ohio, United States.