Privacy Policy

1. Who We Are

CodeVault Academy (“we,” “us,” or “our”) operates the website at codevaultacademy.com and provides online exam preparation courses for the ICC B1 Residential Building Inspector certification. This Privacy Policy explains what personal data we collect, how we use it, and your rights in relation to it.

2. Data We Collect

We collect the following categories of personal information:

• Email address — collected when you purchase a course, create an account, complete the free sampler, or contact us.
• Name — optionally provided during checkout or account setup.
• Purchase information — transaction details processed by Stripe, including purchase amount and date. We do not store full card numbers; all payment data is handled directly by Stripe.
• Course activity — quiz answers, progress through chapters, flashcard mastery, and mock exam scores, used to power your in-app dashboard.
• Marketing consent — a record of whether you opted in to receive course updates when using the free sampler.
• Usage data — standard server logs and cookies as described in Section 5.

3. How We Use Your Data

• Course access — to authenticate your account, track your enrollment, and deliver course content you purchased.
• Transactional emails — to send your account credentials, password reset links, and purchase confirmations.
• Marketing emails (with consent only) — if you checked the consent box on the free sampler, we may send you course updates, study tips, and promotional offers. You can unsubscribe at any time (see Section 7).
• Platform improvement — aggregated, anonymized activity data helps us identify which questions are most difficult, improve course content, and fix bugs.
• Legal compliance — we may retain or disclose data where required by law.

4. We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share data only with the following service providers, strictly to operate the platform:

• Stripe — payment processing
• Supabase / PostgreSQL — database hosting
• Resend — transactional and marketing email delivery
• Vercel — web hosting and infrastructure

Each provider operates under its own privacy policy and is contractually obligated to protect your data.

5. Cookies

We use a small number of cookies and browser storage mechanisms:

• Session cookie — a secure, HTTP-only cookie set by NextAuth to maintain your login session. It expires when your session ends or after 30 days.
• Active course cookie — stores which course (2021 or 2024 IRC) you are currently viewing. Expires after one year. No personal data is stored in it.
• Local storage — used in the browser to save your quiz position and answers within a study session. This data never leaves your device.

We do not use advertising cookies, cross-site tracking pixels, or third-party analytics scripts.

6. Data Retention

We retain your account and course activity data for as long as your account is active or as needed to provide the service. If you request account deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g., transaction records).

Lead records from the free sampler are retained for up to 2 years and then permanently deleted.

7. Unsubscribing from Marketing Emails

You can opt out of marketing emails at any time by:

• Clicking the unsubscribe link at the bottom of any marketing email we send.
• Emailing us directly at codevaultacademy2025@gmail.com with “Unsubscribe” in the subject line.

Unsubscribing from marketing emails will not affect transactional emails related to your account or purchase.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (“right to be forgotten”).
• Withdraw consent for marketing communications at any time.

To exercise any of these rights, contact us at codevaultacademy2025@gmail.com. We will respond within 30 days.

9. Contact

For privacy-related questions or requests, please contact:

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Continued use of the platform after changes constitutes acceptance of the updated policy.