CPA Tech Inc. and certain affiliated entities, including CPA Club Inc. (collectively, “we,” “our,” or “us”), are committed to protecting your privacy.

This Privacy Policy describes how we collect, use, disclose, store, transfer, and safeguard personal information when you access or use our software, applications, websites, educational offerings, artificial intelligence tools, integrations, communities, content, and related services (collectively, the “Platform” or “Services”).

By accessing or using the Platform or Services, you acknowledge that you have read and understand this Privacy Policy.

1. Information We Collect

We may collect the following categories of information.

1.1 Information You Provide Directly

We may collect information you provide directly to us, including:

• name;
• email address;
• password or authentication credentials;
• phone number;
• mailing address;
• profile photos;
• employer or organization information;
• professional credentials, certifications, licenses, or verification information;
• educational history or certifications;
• job title or role information;
• communications and support requests;
• survey responses and feedback;
• prompts, submissions, uploads, posts, comments, messages, and other User Content;
• enterprise or organizational account information;
• and other information voluntarily provided through the Platform.

Payment information may be processed by third-party payment processors. We do not directly store full payment card numbers.

1.2 Information Collected Automatically

When you access or use the Platform, we may automatically collect:

• device information;
• browser and operating system information;
• IP address;
• approximate geographic location;
• device identifiers;
• mobile network information;
• usage activity and interaction data;
• session information;
• feature engagement metrics;
• educational progress and completion data;
• workflow or productivity interaction data;
• AI prompt and interaction history;
• crash logs and diagnostic information;
• analytics and performance data;
• cookies and similar tracking technologies;
• and security or fraud-prevention information.

Precise GPS location information is collected only with your explicit permission.

1.3 Information From Third Parties

We may receive information from:

• authentication and single sign-on providers;
• payment processors;
• enterprise administrators;
• educational institutions or credentialing bodies;
• professional licensing or verification services;
• analytics providers;
• marketing partners;
• cloud infrastructure providers;
• integration partners;
• or other third-party services connected to the Platform.

If you authenticate using a third-party service such as Google, Microsoft, LinkedIn, or similar providers, we may receive certain profile and authentication information associated with your account.

2. How We Use Information

We may use information for purposes including:

• creating and managing accounts;
• delivering and operating the Platform and Services;
• providing educational offerings and certificates;
• processing subscriptions, purchases, and payments;
• personalizing user experiences;
• generating recommendations or learning paths;
• supporting AI-powered features;
• improving products, features, and workflows;
• monitoring Platform performance and analytics;
• customer support and communications;
• fraud prevention and security monitoring;
• enterprise account administration;
• regulatory or compliance obligations;
• enforcing Terms and policies;
• marketing and promotional communications;
• sending transactional emails and push notifications;
• and developing future products and services.

3. Legal Bases for Processing (EEA/UK Users)

If you are located in the European Economic Area (“EEA”), United Kingdom, or another jurisdiction requiring a legal basis for processing personal information, we may process your information under one or more of the following legal bases.

Contract Performance

Processing necessary to provide the Platform, Services, subscriptions, educational offerings, or other functionality requested by you.

Legitimate Interests

Processing necessary for our legitimate business interests, including:

• improving the Platform and Services;
• maintaining security and fraud prevention;
• analytics and product development;
• enterprise administration;
• customer support;
• communications;
• and marketing activities where permitted by law,

provided such interests are not overridden by your rights and freedoms.

Consent

Processing based on your consent, including where required for:

• marketing communications;
• certain cookies or tracking technologies;
• precise location collection;
• AI personalization features;
• or other optional processing activities.

You may withdraw consent at any time where processing is based on consent.

Legal Obligations

Processing necessary to comply with applicable laws, regulations, legal processes, professional obligations, or governmental requests.

4. AI & Automated Systems

Certain features of the Platform may utilize artificial intelligence, machine learning, recommendation systems, predictive analytics, or automated technologies.

We may process prompts, interactions, submissions, usage patterns, and related content to:

• generate responses or recommendations;
• personalize user experiences;
• improve Platform functionality;
• train, evaluate, or improve automated systems;
• monitor safety and misuse;
• and develop future AI-powered features and services.

You should not submit confidential, regulated, or highly sensitive information into AI-powered features unless expressly authorized by your organization or applicable law.

AI-generated outputs may not always be accurate, complete, or current.

5. How We Share Information

We may share information:

• between CPATech, CPAClub, and affiliated entities;
• with service providers and infrastructure vendors;
• with enterprise or organizational account administrators;
• with educational or credentialing bodies;
• with analytics, hosting, communications, payment, or support providers;
• during mergers, acquisitions, financings, reorganizations, or asset sales;
• with law enforcement or regulators where required by law;
• or as otherwise disclosed at the time information is collected.

We do not sell personal information for monetary consideration.

5.1 With Other Users

Certain profile information, community participation, leaderboard activity, certifications, or User Content may be visible to other users depending on your privacy settings and Platform functionality.

You are responsible for managing the visibility of information you choose to share publicly within the Platform.

5.2 Enterprise & Organizational Accounts

If your access to the Platform is provided through an employer, firm, school, organization, or enterprise account, certain administrators may have access to:

• usage metrics;
• educational progress;
• reporting data;
• subscription information;
• and other account-related information associated with your organizational account.

5.3 Educational & Credentialing Reporting

Where applicable, we may share educational completion information, attendance records, certificates, or related data with:

• NASBA;
• state boards;
• educational institutions;
• employers;
• enterprise sponsors;
• or other credentialing or regulatory organizations.

Users are responsible for determining whether educational offerings satisfy applicable professional requirements.

6. Cookies & Tracking Technologies

We may use cookies, pixels, SDKs, local storage, analytics tools, and similar technologies to:

• authenticate users;
• maintain sessions;
• personalize experiences;
• analyze Platform usage;
• improve performance;
• support marketing efforts;
• and enhance security.

You may manage cookie preferences through browser or device settings. Disabling certain technologies may affect Platform functionality.

Users may also limit advertising or tracking permissions through applicable mobile device privacy settings.

7. App Store Data Practices

If you access the Platform through the Apple App Store or Google Play, certain device identifiers, usage data, diagnostics, and purchase information may be collected in accordance with applicable app marketplace requirements.

We do not use information collected through the Platform to track users across third-party apps or websites for cross-context behavioral advertising purposes.

Additional app privacy disclosures may be displayed within applicable app marketplace listings.

8. Data Retention

We retain personal information for as long as reasonably necessary to:

• provide the Platform and Services;
• fulfill contractual obligations;
• maintain educational or compliance records;
• resolve disputes;
• enforce agreements;
• comply with legal obligations;
• or support legitimate business operations.

Retention periods may vary depending on:

• account activity;
• subscription status;
• legal or regulatory requirements;
• enterprise obligations;
• or operational needs.

Educational completion records may be retained in accordance with applicable professional or regulatory recommendations.

De-identified or aggregated data may be retained indefinitely.

9. Security

We implement commercially reasonable administrative, technical, and organizational safeguards designed to protect personal information, including:

• encrypted transmission protocols;
• encryption of certain data at rest;
• access controls;
• authentication measures;
• monitoring systems;
• secure infrastructure practices;
• periodic security reviews;
• and role-based access limitations.

No system can guarantee absolute security. Users are responsible for maintaining the confidentiality of their account credentials.

In the event of a data breach affecting personal information, we may provide notifications as required by applicable law.

10. Your Rights & Choices

Depending on your jurisdiction, you may have rights relating to your personal information, including:

• access rights;
• correction rights;
• deletion rights;
• portability rights;
• restriction rights;
• objection rights;
• and rights relating to automated decision-making.

You may also:

• update account information;
• manage communication preferences;
• opt out of marketing communications;
• disable push notifications through device settings;
• or request account deletion.

Requests may be submitted to:

[email protected]

We may require verification of identity before processing certain requests.

11. California Privacy Rights

California residents may have rights under the California Consumer Privacy Act (“CCPA”) and California Privacy Rights Act (“CPRA”), including:

• the right to know;
• the right to delete;
• the right to correct;
• the right to limit certain uses of sensitive personal information;
• and the right not to be discriminated against for exercising privacy rights.

We do not sell personal information for monetary consideration or share personal information for cross-context behavioral advertising as defined under California law.

California privacy requests may be submitted to:

[email protected]

12. EEA/UK Privacy Rights

Residents of the EEA and United Kingdom may have additional rights under GDPR or UK GDPR, including:

• the right of access;
• the right to rectification;
• the right to erasure;
• the right to restriction of processing;
• the right to data portability;
• the right to object to processing;
• and rights relating to automated decision-making.

You may also have the right to lodge a complaint with your local data protection authority.

Requests may be submitted to:

[email protected]

13. International Data Transfers

The Platform is operated from the United States.

If you access the Platform from outside the United States, your information may be transferred to, processed, and stored in jurisdictions with different data protection laws than your home country.

Where required by law, we implement appropriate safeguards for international transfers, including contractual safeguards where appropriate.

14. Children’s Privacy

The Platform is not intended for individuals under 18 years old.

We do not knowingly collect personal information from children under 18. If we become aware that such information has been collected, we may delete it.

If you believe information from a minor has been collected, please contact:

[email protected]

15. Third-Party Services

The Platform may integrate with or link to third-party services, websites, APIs, software, or external platforms.

This Privacy Policy does not apply to third-party services, and we are not responsible for their privacy practices or content.

Your use of third-party services is governed by their applicable terms and privacy policies.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Material changes may be communicated through:

• the Platform;
• email notifications;
• updated postings;
• or other reasonable methods.

Continued use of the Platform following updated policies constitutes acknowledgment of the revised Privacy Policy.

17. Contact Us

If you have questions, concerns, or privacy-related requests, please contact:

CPA Tech Inc.

[email protected]

100 Spectrum Center Drive

Suite 1480

Irvine, CA 92618