This Privacy Policy explains what AmericasMarket ("we", "us", "our") collects when you use americasmarket.com and the related Service, why we collect it, who we share it with, how long we keep it, and the rights you have over it. We try to keep this short and human-readable. If anything here is unclear, and we'll fix it.
1. The TL;DR
- We collect what we need to run a self-paced exam prep product — your email, your purchases, and your study progress — and very little else.
- We do not sell your personal information. We do not run ad networks on the site.
- We use trusted infrastructure providers (Supabase, Stripe, Cloudflare, Resend) to handle accounts, payments, hosting, and email. Each only sees what they need.
- You can delete your account at any time by emailing us.
2. What we collect
You provide directly
- Account info. Email address, password (stored hashed by our auth provider), and any display name you choose.
- Purchase info. What you bought, when, and the Stripe customer/session IDs that link the purchase to your account. We do not store full card numbers — Stripe handles that.
- Support correspondence. If you email us, we keep the message thread so we can help you.
- Optional feedback. Bug reports, question corrections, or feature suggestions you submit.
Generated as you use the Service
- Study progress. Which questions you've answered, your answers, your per-topic accuracy, practice exam attempts and scores, and timing data used by our spaced repetition scheduler.
- Entitlements. Which Exam Pass Kits your account has access to and when access expires (if applicable).
- Session data. Sign-in sessions, auth cookies, and a "remember me" token so you don't have to log in every visit.
- Basic technical logs. IP address, user agent, referring page, and request paths. We use these for security, abuse prevention, and debugging.
We don't collect
- Government IDs, Social Security numbers, or contractor license numbers.
- Financial account numbers — Stripe holds card data; we never see it.
- Location beyond what an IP address implies.
- Microphone, camera, or contacts.
3. Why we collect it
- To run the product. Sign you in, show you the right Exam Pass Kits, schedule your next practice question, and grade your practice exams.
- To process payments and provide entitlements. Stripe handles the checkout; we record the resulting entitlement so we know what to unlock.
- To send transactional email. Purchase receipts, magic-link sign-ins, password resets, and important account notices.
- To improve the product. Aggregate accuracy data tells us which questions are too easy, too hard, or simply broken, so we can rewrite or retire them.
- To keep the Service safe. Detect abuse, rate-limit bots, investigate security incidents, and enforce our Terms.
- To comply with law. Tax records, fraud prevention, and responses to valid legal process.
4. How we share information
We share information only with infrastructure providers that need it to do their job. Each is bound by their own privacy commitments. Today these are:
- Supabase — hosts our Postgres database and handles authentication.
- Stripe — processes payments. Stripe receives your name, email, billing country, and card details; we receive only the resulting customer/session IDs and the last four digits of the card for receipts.
- Cloudflare — hosts and serves the site, terminates TLS, and helps block abuse.
- Resend — delivers transactional email (receipts, magic links, account
notices) from our
americasmarket.comsending domain.
We may also share information when required by law, in response to a valid legal request, or to protect the rights, safety, or property of AmericasMarket, our users, or the public.
If AmericasMarket is acquired, merges with another company, or transfers assets, user data may transfer too — but the receiving entity has to honor this Privacy Policy or give you notice and a chance to opt out.
5. We do not sell your data
We do not sell or rent personal information. We do not run third-party ad networks, ad retargeting pixels, or affiliate tracking that ships your identity off-site. If that ever changes, we'll update this policy and make the change clear before turning it on.
6. Cookies and similar technologies
We use a small number of cookies and local-storage entries:
- Auth cookies issued by Supabase to keep you signed in.
- Cart / checkout state while you're buying an Exam Pass Kit.
- Preferences such as which course you last studied, so the dashboard opens to the right place.
We don't use third-party advertising cookies. You can clear cookies in your browser at any time; you may need to sign back in afterwards.
7. Data retention
- Account and study data — retained while your account is active. If you delete your account, study data is removed within 30 days.
- Purchase and tax records — retained as long as required by applicable tax and consumer-protection law (typically up to 7 years), even after account deletion.
- Support email — retained for up to 3 years to maintain conversation history.
- Server logs — typically retained for up to 90 days for security and debugging.
8. Security
Traffic is served over HTTPS. Authentication is handled by Supabase Auth, which stores password hashes (we never see your plaintext password). Database access is gated by row-level security so users can only see their own records. Payments are handled directly by Stripe, a PCI-DSS Level 1 service provider — we never touch full card numbers.
No system is perfectly secure. If we become aware of a breach affecting your account, we will notify you in line with applicable law.
9. Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Delete your account and associated personal information.
- Export a copy of your data in a portable format.
- Object to or restrict certain types of processing.
- Withdraw consent (where we rely on consent as the legal basis).
- Lodge a complaint with your local data-protection authority.
To exercise any of these rights, sign in and from the account on file. We'll respond within 30 days. We don't charge a fee for reasonable requests.
California residents (CCPA / CPRA)
California residents have the rights described above, plus the right to know the categories of personal information we collect and the right to opt out of sale or sharing of personal information. As noted in Section 5, we do not sell or share personal information for cross-context behavioral advertising.
EU/UK residents (GDPR / UK GDPR)
Our legal bases for processing are: (a) contract — to provide the Service you've signed up for; (b) legitimate interests — to keep the Service secure, improve content quality, and run a sustainable business; (c) legal obligation — to keep tax records and respond to lawful requests; and (d) consent where applicable. If you're in the EU or UK and use the Service, your data may be transferred to and processed in the United States by us and our subprocessors; we rely on appropriate safeguards (such as Standard Contractual Clauses) where required.
10. Children
The Service is intended for adults preparing for U.S. contractor licensing exams. It is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with information, email us and we'll delete it.
11. Third-party links
The Service may link to third-party sites (the CSLB, PSI, code book publishers, etc.). Once you leave AmericasMarket, this Privacy Policy no longer applies. Read the destination site's own privacy notice.
12. Changes to this Policy
If we change this policy in a material way, we'll update the "Last updated" date and notify you in-product or by email before the change takes effect. Continued use of the Service after a change means you accept the updated policy.
13. Contact
Privacy questions, deletion requests, or anything else covered by this policy: .