Privacy Policy

1. Scope

This Privacy Policy describes how DutyReady-365 (the “Service”) handles information when you create an account, purchase access, and use the study material at cfdstudy.org.

It applies to the Service only. It does not apply to any third-party site you may reach from the Service.

2. Information We Collect

We collect only what is needed to operate the Service:

• Account information — the email address and password credential you register with.
• Purchase information — the record that your access was paid for, the access term, and the payment processor's transaction and event identifiers.
• Study activity — your flashcard, learn, practice test, exam, and progress data so your results and review queue persist.
• Agreement records — your acceptance of the Liability Waiver & Disclaimer, including the version, timestamp, IP address, and browser user agent at the time of acceptance.
• Device and security data — device/session identifiers, IP address, browser user agent, and content-protection and access events used to enforce single-device access and detect credential sharing.

We do not ask for your name, home address, phone number, employment file, badge number, or any other personal profile information, and the Service has no profile fields or contact forms that collect it.

3. Payment Information

Payments are processed by Stripe. Card numbers and other payment credentials are entered on Stripe's systems and are never received, stored, or accessible to DutyReady-365. We retain only the transaction reference and paid/unpaid status needed to grant your access term.

Stripe's handling of payment data is governed by Stripe's own privacy policy.

4. How We Use Information

Information is used to:

• create and authenticate your account;
• grant, maintain, and renew your one-year access term;
• save your study progress, scores, streaks, and review scheduling;
• record and evidence your acceptance of the waiver and these policies;
• enforce the single-user, single-device license and investigate suspected sharing or content copying; and
• monitor and improve reliability, accuracy, and security of the study material.

We do not sell your information, rent it, or use it for advertising or behavioral tracking.

5. Service Providers

We share information only with the providers that make the Service run: our hosting and database/authentication provider (which stores account, progress, and audit records), Stripe (payment processing), and our email delivery provider (account and administrative notices).

These providers may process information only to deliver their service to us. We do not otherwise disclose your information except when required by law, to enforce our Terms of Use, or to protect the rights, safety, and integrity of the Service.

6. Security Measures

The Service uses encrypted connections (HTTPS), row-level database access rules that restrict records to their owning account, server-side authorization checks for administrative pages, security response headers, redaction of email addresses in application logs, and an audit log of access and content-protection events.

No online service can be guaranteed completely secure. You are responsible for keeping your login credentials confidential and for notifying us of any unauthorized use of your account.

7. Retention

Account, purchase, waiver acceptance, and security audit records are retained while your account exists and afterward for as long as needed to meet legal, accounting, and dispute-resolution obligations. Study progress data is retained while your account exists.

When information is no longer needed for those purposes, it is deleted or de-identified.

8. Your Choices

You may:

• update your account credentials at any time from within the Service;
• request a copy of the information associated with your account;
• request correction of inaccurate account information; and
• request deletion of your account, understanding that deletion ends your access without refund and that certain purchase, waiver, and security records may be retained as described above.

Requests are made through the account owner channel published to purchasers. We may need to verify that the request comes from the account holder before acting on it.

9. Cookies and Local Storage

The Service stores a session token and study-state values (such as your place in an exam, saved exam presets, and progress) in your browser using cookies and local storage. These are required for sign-in and for the study features to work. We do not use advertising or cross-site tracking cookies.

10. Children

The Service is intended for adult candidates preparing for a promotional examination and is not directed to anyone under 18. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this Privacy Policy as the Service changes. Material changes take effect when posted on this page, and the effective date above will be updated. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.

12. Related Documents

This policy works together with the Terms of Use and the Liability Waiver & Disclaimer, both linked below and from every page of the Service.