Privacy Policy

• Account information: name, email address, password (hashed), license type and number
• Payment information: handled entirely by Stripe; we never store credit card numbers on our servers
• Course activity: enrollments, video progress, quiz attempts and scores, course evaluations, certificates issued
• Technical information: IP address, browser type, device information, pages visited, timestamps
• Communications: messages submitted through contact forms or topic submissions

We use your information to:

• Provide and maintain the platform (account access, course delivery, certificate generation, transcript records)
• Process payments through Stripe
• Send transactional communications related to your account, including: account confirmation, email verification, password resets, purchase receipts, course completion notifications, certificate availability, and important account notices
• Maintain compliance records you can produce to DORA upon request
• Improve our services and respond to support requests
• Detect and prevent fraud or abuse

By creating an account, you consent to receive transactional emails (and, where applicable, text messages) related to your account. These include account verification, password resets, purchase confirmations, course completion notifications, certificate availability, security alerts, and other notices necessary to provide the service. Transactional communications are not marketing — you cannot opt out of these while maintaining an active account, except by closing your account.

We may also send optional marketing communications, such as announcements of new courses, educational content, special offers, and platform updates. You may opt in or out of marketing communications at any time through your account settings or by following unsubscribe instructions in any marketing message. Opting out of marketing does not affect transactional communications.

We do not sell your personal information. We share information only with:

• Service providers who help us operate the platform (Supabase for hosting and database, Stripe for payments, Resend for email delivery, DigitalOcean for infrastructure)
• Legal authorities when required by law, court order, or to protect our rights
• A successor entity in the event of a merger, acquisition, or asset sale

We use reasonable technical and organizational measures to protect your information, including encrypted connections (HTTPS), hashed passwords, role-based access controls, and database row-level security. No system is perfectly secure, and we cannot guarantee absolute security.

We retain your account information and course completion records for as long as your account is active and for a reasonable period afterward to comply with legal obligations and to support your CE compliance documentation needs. You may request deletion of your account at any time, subject to our legal obligations to retain certain records.

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal information, and to opt out of marketing communications. To exercise these rights, please contact us.

We use cookies and similar technologies to maintain your session, remember preferences, and understand how the platform is used. You can control cookies through your browser settings; disabling them may affect platform functionality.

Our services are intended for licensed practitioners and adults. We do not knowingly collect information from children under 18.

We may update this policy from time to time. Material changes will be communicated via email or platform notice. The "Effective Date" at the top reflects the most recent revision.

If you have questions about this policy, please contact us.