Privacy Protection

Your data, your rights.

Prepvora is built on transparent, privacy-first principles. We safeguard student data with strict access controls, zero ad-tracking, and full international compliance.

Last updated: April 2026 · Version 3.2

Data Minimization

We only collect data required for your test practice: email, hashed password, test answers, time spent, and domain performance statistics. We never store payment card numbers directly.

Zero Data Selling

We do not sell, rent, or monetize your personal data to advertisers or third parties — ever. Your study analytics are exclusively used to power your adaptive prep.

Enterprise Encryption

All network traffic is encrypted in transit via TLS 1.3. User passwords are cryptographically salted and hashed. Database tables are protected by strict Row-Level Security (RLS).

Your Rights & Deletion

Under GDPR and CCPA, you have the full right to export or permanently delete your account and all associated test records at any time from your settings or via email request.

Complete Privacy Policy

Prepvora (“Prepvora,” “we,” “us,” or “our”) operates https://www.prepvora.com. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you use our educational software and adaptive testing services.

1. Information We Collect

We collect information in the following categories:

Account Information: When you register, we collect your email address and authentication credentials. If you register via Google or Apple OAuth, we receive your basic profile identifiers provided by the authentication provider.
Practice & Diagnostic Performance Data: Answers selected, question response times, module routing paths, raw and scaled test scores, domain-level weakness breakdowns, and flagged questions.
Payment & Billing Information: Payment transactions are handled directly by our third-party payment processor, Stripe, Inc. Prepvora does not store or process full credit card numbers or sensitive CVV security codes on our servers.
Technical & Log Information: IP address, device type, browser user-agent, operating system, and session timestamps used solely for security verification and proctored test anti-cheat enforcement.

2. How We Use Your Information

We process your information strictly to provide and improve educational services:

To calibrate adaptive test routing (determining Easy vs. Hard Module 2 in accordance with official multistage testing algorithms).
To provide real-time Socratic AI coaching, mistake autopsies, and personalized weekly study schedules.
To manage your account, billing, and subscription status via Stripe.
To detect and prevent fraudulent account sharing, unauthorized scraping, and security breaches.

3. Children's Privacy (COPPA Compliance)

Prepvora is strictly designed for individuals aged 13 and older. We do not knowingly collect, solicit, or maintain personal information from children under the age of 13.

If we discover that a child under 13 has provided us with personal information without verified parental consent, we will promptly delete all associated account information and test records from our active databases. If you are a parent or guardian and believe your child under 13 has created an account, please contact us immediately at admin@prepvora.com.

4. Authorized Third-Party Sub-Processors

We only share data with essential third-party service providers who adhere to strict data protection standards:

Stripe, Inc.

PCI-DSS Level 1 certified payment processing, customer subscriptions, and billing invoices.

Supabase, Inc.

Encrypted cloud database, user authentication, and Row Level Security (RLS) enforcement.

Groq & Google Cloud AI

Zero-data-retention AI inference for Socratic question explanations and mistake autopsies.

Vercel, Inc.

Global Edge CDN hosting, performance optimization, and DDoS mitigation.

5. GDPR (European & UK Users) Data Subject Rights

If you reside in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the GDPR:

Right of Access: Request a full copy of the personal data we maintain about you.
Right to Rectification: Request correction of inaccurate or incomplete personal records.
Right to Erasure (“Right to be Forgotten”): Request the permanent deletion of your account and test history.
Right to Data Portability: Receive your test results and performance data in a structured, machine-readable format (JSON/CSV).
Right to Withdraw Consent: Withdraw consent for non-essential data processing at any time.

6. California Consumer Privacy Act (CCPA / CPRA) Disclosures

Under the California Consumer Privacy Act (CCPA/CPRA), California residents have specific statutory rights:

No Sale or Sharing of Personal Data: Prepvora has NOT sold or shared personal information to third parties for monetary or cross-context behavioral advertising in the preceding 12 months.
Right to Know & Delete: You have the right to request deletion or disclosure of categories of personal information collected.
Non-Discrimination: We will never deny services, charge different prices, or provide a different quality of service for exercising your privacy rights.

7. Data Security & Retention

We implement industry-standard administrative, physical, and technical safeguards to protect your personal information against unauthorized access, destruction, loss, or alteration. All database connections utilize TLS 1.3 encryption, and sensitive data is encrypted at rest using AES-256.

We retain your performance data and diagnostic history for as long as your account remains active. If you request account termination, your data will be permanently wiped from our active production database within seven (7) business days.

8. Privacy Officer & Contact Information

For any questions, data subject access requests (DSAR), deletion requests, or privacy concerns, please contact our Data Protection and Compliance team:

Data Protection Officer

Official privacy inquiries & requests:

admin@prepvora.com