Privacy Policy

PassVerge is an independently operated exam-preparation service.

Effective date: October 24, 2026. Contact: support@passverge.com.

This policy explains how we handle information when you use PassVerge.

Information we handle

• Account information, including your email address, account identifier and sign-in/security records. Our authentication provider handles passwords and confirmation/recovery requests. Never send a password or account-link token to support.
• Learning activity, including diagnostic responses, practice and simulation attempts, results, progress and readiness estimates. Guest activity is associated with a temporary browser session; signing in and claiming it associates it with your account.
• Technical information used to operate and protect the service, such as IP addresses, browser/device information, request times and error/security logs.
• Information you choose to send to support. Please omit unnecessary personal information.
• If purchases become available, purchase references, amount/currency, payment status, refund history and exam-access records. Payments are not currently enabled. Before checkout is offered, we will identify the payment processor and update this notice as needed. Do not send payment-card details by email.

How we use and share information

We use information to provide accounts, save progress, calculate learning results, send requested account emails, respond to support, protect against misuse and meet applicable obligations. Readiness estimates guide study; they are not licensing or eligibility decisions.

Our current infrastructure providers include Vercel for hosting, Supabase for database/authentication and Resend for transactional email and support correspondence. They process information needed to deliver those services. We may disclose information when legally required or necessary to protect the service and people using it. Information may be processed in countries where these providers operate, including the United States.

Google Analytics measurement is managed through Google Tag Manager. Limited cookieless measurement may occur before you choose, after you reject optional cookies, and after you withdraw permission. Analytics cookies require analytics consent; advertising storage and advertising data use require the separate advertising choice. It records visits and completed steps, such as starting or finishing a diagnostic, viewing results, completing signup, viewing Full Prep and starting checkout. It does not receive your answers, scores, weak topics, account details or authentication information. Google may process browser and device information, network information and pseudonymous cookie identifiers. If you also allow advertising measurement, this information may be used to measure Google campaign performance. We do not build personalized advertising audiences. No Meta Pixel is currently enabled. We do not sell personal information or share it for targeted advertising. We will update this policy before adding a new data use or provider.

Cookies and browser storage

Essential cookies support login, guest diagnostics, account confirmation/recovery and security. Blocking or clearing them may prevent sign-in or access to an unclaimed guest result. To complete account links reliably, open the delivered email link in the same browser/profile used to request it. We do not use the current essential cookies for advertising.

Use Cookie preferences to accept, reject or change optional storage choices. Rejecting does not prevent login, diagnostics or saving results. Analytics and advertising measurement have separate choices; personalized advertising remains disabled. Global Privacy Control disables advertising measurement. Choices are remembered for up to 180 days. With analytics permission, approved campaign labels and duplicate-event markers are kept for the browser tab session. A random, non-identifying signup receipt may be kept for up to ten minutes to count a confirmed signup once. Optional Google cookies may last longer according to the configured retention settings. Rejecting or withdrawing permission updates consent, removes supported optional browser storage and reloads the page. Limited cookieless measurement may continue without optional cookies; rejecting or withdrawing does not erase information already received by Google. Contact us about deletion requests. To stop all Google measurement on this browser, select Exclude this browser from measurement in Cookie preferences.

Retention and your choices

Guest sessions expire 30 days after creation. Expired, unclaimed guest diagnostics and their responses may then be deleted, including completed diagnostics. Claim a result into your account before expiry if you want to keep it.

Account-linked completed diagnostics, practice/simulation attempts and the learning history needed for progress are retained while needed to provide your account and purchased exam access. A pause in new learning sessions does not erase existing history. Security, support and future transaction records are retained only as needed for their purpose, disputes and applicable obligations. Backup copies can remain until the provider's backup lifecycle removes them; deletion is not necessarily immediate in every copy.

Contact support@passverge.com to request access, correction or deletion of your information, to close your account, or to question a privacy decision. We may verify your identity and explain any information we must retain. We will respond as required by applicable law. Some requests need manual handling; we do not promise that deleting a login immediately deletes all linked records. If a privacy request is denied, reply asking for review and explain your concern. Any additional rights or appeal procedures required by applicable law remain available.

Security and children

We use access controls and other safeguards to protect information, but no service can guarantee absolute security. This service is intended for people preparing for professional licensing exams, not children under 13. We do not knowingly collect information from children under 13. Contact us if you believe a child has provided information so we can investigate.

Changes

We will date updates to this policy and provide notice of material changes when appropriate or legally required. New purposes requiring consent will not be applied without that consent.