Privacy Policy
What ChatCPA collects, and what it does not
Written to describe what the software actually does, so that it can be checked against the software. CHATCPA LLC, an Oregon limited liability company.
Effective August 13, 2026. Replaces the version dated January 28, 2023.
The short version. Your study data lives in your own browser, not on our server. We never see your scores, your answers, your teach-back explanations or your study plan unless you press the button that emails them to yourself. We ask for an email address once, at the free practice exam. We do not sell data, we do not share it with data brokers, and we do not share it with anyone for their own marketing.
1. Study data stays in your browser
The test bank, the free practice exam and the simulation engine run entirely in your browser. Everything the product remembers about your studying is written to your browser's local storage on your own device:
- Session history: which questions you answered, what you picked, whether it was right, and how long you took.
- Which questions you have already seen, and which you flagged.
- Teach-back explanations you type.
- Your predicted score, mastery state, study plan, and display settings such as dark mode.
None of that is transmitted to us. There is no account database of student performance behind this site. Two consequences worth stating plainly, one good and one bad: nobody at ChatCPA can read your results, and if you clear your browser data or switch devices, that history is gone. The "email my progress" button exists because of the second one.
2. What we do collect
| What | When | Why |
|---|---|---|
| Email address | When you unlock the free practice exam, and when you buy a subscription | To send the material you asked for, to deliver purchases, and to send product email you can unsubscribe from at any time |
| IP address | At the free practice exam unlock | Abuse and duplicate signup control. Retrieved through the third-party service api.ipify.org, which necessarily sees the request |
| Your progress file | Only if you press "email my progress" | To email that file to the address you type. It contains your scores, seen questions, flags, predicted scores, study plan and teach-back text |
| Login records | When you sign in to a paid account | Our host keeps standard sign-in records, including date and IP, to secure accounts and to enforce the one-person subscription rule. We do not use them to track your browsing |
| Payment details | At checkout | Handled by Stripe. Your card number goes to Stripe, not to us: we never see it and it is never stored on our systems |
| Assistant conversations | If you use the AI assistant | Your messages are sent to the model provider to generate a reply. Do not put confidential client information into it |
| Standard web logs and analytics | Browsing the site | Hosting, security, and understanding which pages get used |
3. Who else touches it
We use ordinary service providers, and they only get what they need to do their job:
- Squarespace hosts the website, runs the store, and provides site analytics.
- Make.com receives the email-unlock, email-my-progress, and warranty-claim submissions and routes them to our email system.
- Stripe processes payments and holds the card details we never see.
- Cloudflare serves the question banks and runs the assistant's backend.
- OpenAI generates assistant replies from the messages you send it.
- api.ipify.org returns the IP address described above.
- Google and LinkedIn advertising tags tell us that an ad led to a signup. They are advertising cookies. Decline them in the cookie banner and they do not run.
What we do not do. We do not sell personal information. We do not share it with third parties for their own marketing. There are no affiliates or "business partners" receiving your data, and the previous version of this policy said there were, which was boilerplate rather than a description of anything we have ever done. We do not use your teach-back writing or your performance to train AI models. We do not run session recording or heatmap software. We do not email your scores to anyone, including you, unless you ask us to.
4. How long it is kept
Email addresses are kept until you unsubscribe or ask us to delete them. IP addresses collected at unlock are kept for one year, which is long enough to catch repeat abuse of the free exam and no longer. A progress file you email yourself passes through our email system and stays in the sent record like any other email; ask and we will purge it. Purchase records are kept as long as tax and business law requires, which for us is seven years. Study data in your browser is kept until you clear it, and we cannot delete it for you because we cannot reach it.
5. Your rights
Wherever you live, you can ask us what we hold about you, ask for a copy, ask us to correct it, and ask us to delete it. If you are in California, the CCPA rights to know, delete, correct and opt out of sale or sharing apply; we do not sell or share personal information as those terms are defined, and we will not treat you differently for exercising a right. If you are in the UK or EEA, we process your data to perform the contract you bought, to comply with law, and on the basis of legitimate interests in running and securing the site, and you may object or lodge a complaint with your supervisory authority. One email to finance@chatcpa.io starts any of this, and it reaches the person who owns the company. We answer within 30 days.
6. Cookies
The site uses cookies that are necessary for it to work, plus analytics and advertising cookies that you can decline. Declining does not limit the test bank, because the test bank does not rely on them. Your browser can also block cookies outright. See the cookie policy for the detail.
7. Security
Traffic to this site is encrypted in transit. The reason we can make a strong claim about your study data is architectural rather than a promise about our diligence: it is not on our server, so it cannot be taken from our server. For the data we do hold, mainly email addresses and purchase records, we rely on the security of the established providers named above. No system is perfectly secure, and anyone who tells you otherwise is selling something.
8. Children
This is a professional licensing exam product intended for adults. It is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us data, write to us and we will delete it.
9. Changes
If this policy changes in a way that affects what we collect or who receives it, the effective date at the top changes and the old version does not quietly disappear: ask and we will show you what changed.
10. Contact
CHATCPA LLC, Oregon. Questions, requests and complaints: finance@chatcpa.io. See also the terms and conditions, acceptable use policy, and disclaimer.
This policy describes practices, not legal advice, and I am a CPA rather than an attorney. If you find something here that does not match what the software does, tell me and I will fix the software or fix the page, and say which in the changelog. Nicholas Miller, CPA · Oregon license #14907.