Last updated: August 30, 2026
This policy explains how CaTCF handles personal information while providing question-bank practice, exam planning, study records, AI feedback and fixed-term membership access.
We use this information to operate the service, synchronize study history, generate requested AI results, process orders and access, answer support requests, prevent fraud and misuse, troubleshoot errors and understand whether features work as intended.
We do not sell personal information, and we do not use writing or speaking content for targeted advertising unrelated to providing, securing or improving the service you requested.
CaTCF uses the following providers where needed to deliver the service:
Providers may process information outside your region under their own terms and privacy documentation. We send only information reasonably needed for the relevant function.
Authentication uses cookies to maintain sessions. Local or session storage may hold unsubmitted writing drafts, test answers, timer state, an unsynced exam countdown plan, an analytics session identifier, attribution parameters and feedback-submission state. Clearing browser data may remove these local items but does not automatically delete server-side account or transaction records.
We retain information for as long as reasonably needed to provide account and study services, resolve disputes, protect the service and meet accounting or legal obligations. Retention varies by category: account study records generally remain with the account; order and refund records may remain longer; temporary caches, logs and backups rotate on operational schedules.
After an approved deletion request, limited copies may remain temporarily in restricted backups, anti-fraud records or transaction records that must be retained, but they will not continue to power ordinary account features.
We use measures such as access controls, server-side secrets, encryption in transit, signature verification and least-privilege access. No online service can guarantee absolute security. Contact support promptly if you suspect an account or data-security issue.
Depending on applicable law, you may ask to access, correct or delete information about you, or ask how it is handled. See our data request instructions. We may need to verify identity, and some transaction, security or legally required records cannot be deleted immediately.
We will update this page and its date when our data practices or service materially change. Submit privacy questions through the data request page or the footer support channel.