Privacy Policy
Last Updated: January 2026 | Effective Date: January 2026
Our Commitment to Your Privacy
MedCertMaster ("we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our medical certification study platform and related services.
1. Information We Collect
1.1 Information You Provide
- Account Information: Name, email address, password (encrypted)
- Profile Information: Study preferences, certification goals
- Payment Information: Processed securely through Square/PayPal (we do not store credit card numbers)
- Communications: Messages you send to our support team or AI Study Buddy
1.2 Information Collected Automatically
- Usage Data: Study progress, quiz scores, time spent on platform
- Device Information: Browser type, operating system, IP address
- Cookies: Session cookies for authentication and preferences
1.3 Information We Do NOT Collect
- Patient health records or Protected Health Information (PHI)
- Social Security numbers
- Medical diagnoses or treatment information
- Credit card numbers (handled by PCI-compliant payment processors)
2. How We Use Your Information
We use your information to:
- Provide and maintain our study platform services
- Personalize your learning experience with adaptive study recommendations
- Process payments and manage subscriptions
- Send important account notifications and updates
- Provide customer support
- Analyze usage patterns to improve our services
- Comply with legal obligations
3. Data Security
We implement industry-standard security measures to protect your data:
Encryption
- • HTTPS/TLS encryption for all data in transit
- • Bcrypt password hashing
- • Encrypted database connections
Access Controls
- • JWT-based authentication
- • Role-based access control
- • Session management and timeouts
Monitoring
- • Login activity tracking
- • Automated security alerts
- • Regular security audits
Payment Security
- • PCI-DSS compliant processors
- • No credit card storage
- • Secure checkout via Square/PayPal
4. Your Privacy Rights
You have the following rights regarding your personal data:
Right to Access
Request a copy of all personal data we hold about you. Available in your Profile settings.
Right to Correction
Update or correct inaccurate personal information in your account settings.
Right to Deletion
Request deletion of your account and all associated data. Available in your Profile settings.
Right to Data Portability
Export your data in a machine-readable format. Available in your Profile settings.
Right to Opt-Out
Unsubscribe from marketing emails at any time using the link in our emails.
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. Upon account deletion:
- Personal account data is deleted within 30 days
- Anonymized usage statistics may be retained for analytics
- Payment records are retained as required by law (typically 7 years)
- Backup copies are purged within 90 days
6. Third-Party Services
We use the following third-party services that may process your data:
| Service | Purpose | Data Shared |
|---|---|---|
| Square | Payment processing | Payment details (not stored by us) |
| PayPal | Payment processing | Payment details (not stored by us) |
| SendGrid | Email delivery | Email address, name |
| OpenAI | AI Study Buddy | Chat messages (anonymized) |
| MongoDB Atlas | Database hosting | All user data (encrypted) |
7. Cookies and Tracking
We use cookies and similar technologies for:
- Essential Cookies: Required for authentication and security
- Preference Cookies: Remember your language and display settings
- Analytics Cookies: Understand how users interact with our platform
You can manage cookie preferences through our cookie consent banner or your browser settings.
8. Children's Privacy
Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected data from a child under 16, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.
10. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
MedCertMaster Privacy Team
Email: privacy@medcertmaster.com
For data deletion requests: Use the "Delete Account" option in your Profile settings
HIPAA Compliance Notice
MedCertMaster is an educational platform for medical certification exam preparation. We are not a covered entity under HIPAA as we do not provide healthcare services or handle Protected Health Information (PHI). However, we voluntarily implement security practices aligned with HIPAA guidelines to ensure the highest level of data protection for our users.
