Privacy Policy

Information we collect

• Account information. When you create an account, we collect your email address, display name, and a hashed password.
• Purchase information. When you buy access, our payment processor (Stripe) handles your payment details. We never receive your full card number. We store the resulting purchase record and entitlement.
• Usage information. Quiz sessions, answers, scores, and progress are stored so you can resume sessions and track performance.
• Technical information. Standard server logs (IP address, user agent, request time) used for security and debugging.

How we use information

• To provide, maintain, and improve the service.
• To authenticate you and protect your account.
• To process payments and grant access to purchased content.
• To respond to support requests and send transactional email.
• To detect, investigate, and prevent fraud or abuse.

We do not sell your personal information. We do not use your content to train third-party AI models.

Analytics & attribution

We use PostHog, a product-analytics service, to understand how visitors find and use RxLaw.io. We capture page views, feature interactions, and the marketing source you arrived from (such as UTM campaign tags and the referring website). We do not send PostHog your name, email, or payment details; analytics are keyed to an anonymous identifier. This data helps us measure where prospective users discover us and improve the product.

Service providers

We share information only with the providers needed to operate the service:

• Supabase — database hosting and authentication.
• Stripe — payment processing.
• OpenAI — AI-assisted study tools (only the prompt necessary to generate the requested content).
• PostHog — product analytics (see the “Analytics & attribution” section above).
• Email and hosting providers — transactional email and application hosting.

Data retention

We retain your account and study history for as long as your account is active. You may request deletion at any time by emailing hello@rxlaw.io. We may retain limited records (such as payment receipts) where required for legal, tax, or fraud-prevention purposes.

Your choices

• You can update your profile and password from your account settings.
• You can request a copy or deletion of your data by contacting us.

Security

We use TLS in transit, hashed passwords at rest, and role-scoped database access. No service can guarantee absolute security; please use a strong, unique password.

Children

RxLaw.io is intended for use by candidates preparing for a pharmacy licensure exam. It is not directed at children under 13, and we do not knowingly collect information from children.

Changes

We may update this policy from time to time. Material changes will be posted here with a new “Last updated” date.

Contact

Questions or requests: hello@rxlaw.io