EmbeddedPrep.io is operated by [COMPANY LEGAL NAME] ("we", "us"), located at [BUSINESS ADDRESS]. We are the data controller for the personal data described here. We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and the rights you have over it. For privacy requests, contact [PRIVACY CONTACT EMAIL] (or hello@embeddedprep.io).
1. Information we collect
We collect the minimum data needed to run the service:
- Account data — name, email address, and a unique user ID, provided by Clerk during sign-up.
- Payment data — card details are handled entirely by Stripe; we store only a Stripe customer ID and your subscription status.
- Progress data — which lessons you've marked complete, used to render your dashboard and sidebar checkmarks.
- Analytics — we use Cloudflare Web Analytics, which is cookieless and does not track individual users across sites or build advertising profiles.
- Automatically collected technical data — like any website, our infrastructure providers process your IP address and basic device/browser information (user agent) in server and security logs. Cloudflare (hosting, DNS, and web-application firewall) uses this to deliver the site and protect against abuse and attacks; Clerk uses it to secure your sign-in sessions. We use it only for delivery, security, and debugging — not advertising.
2. How we use your data
- To authenticate you and provide access to the platform
- To process subscription payments and send billing emails
- To save your lesson progress
- To send service-related emails (account changes, receipts)
- To debug errors and improve the platform
We do not sell your data, share it with advertisers, or use it for advertising purposes.
3. Third-party services
We rely on a small number of vetted providers:
- Clerk — authentication and session management
- Stripe — payment processing
- Cloudflare — hosting, DNS, and analytics
Each provider has its own privacy policy and acts as our processor under a data-processing agreement. Stripe and Clerk handle personal data directly; Cloudflare processes technical/security data (see §1). These providers are based in the United States, so if you access the service from outside the US your data may be transferred to and processed there under the safeguards each provider offers.
4. Data retention and deletion
We retain your account data for as long as you have an active account. You can delete your account at any time from Settings → Account → Delete account. Deleting your account immediately removes your user record and all associated progress, enrollment, and subscription rows from our database, and deletes your identity from our authentication provider (Clerk). Any active subscription is canceled so you are not billed again.
Two honest caveats: (1) our payment processor, Stripe, retains transaction and invoice records it is legally required to keep for tax and accounting purposes, even after your account is deleted; and (2) routine encrypted database backups are purged on their normal rotation cycle rather than instantly. Anonymized, aggregate analytics that cannot identify you may be retained indefinitely.
5. Your rights
Depending on where you live (for example under the GDPR/UK GDPR or the CCPA/CPRA), you may have the right to:
- Delete your account and associated data — do this yourself anytime in Settings → Account → Delete account.
- Correct your name from Settings, or ask us to correct other inaccurate data.
- Access or export a copy of the data we hold about you — email us and we will provide it.
- Object to or restrict certain processing, and (where applicable) opt out of the sale/sharing of personal data — note we do not sell or share your data for advertising.
- Opt out of marketing emails — we don't currently send any, but we will honor this if we add them.
To exercise any right that isn't self-service, email [PRIVACY CONTACT EMAIL] (or hello@embeddedprep.io). You also have the right to lodge a complaint with your local data protection authority.
6. Cookies
We use only essential cookies required for authentication (set by Clerk) and payment session management (set by Stripe during checkout). We do not use tracking cookies. No cookie banner is needed.
7. Security
We use industry-standard practices to protect your data: HTTPS everywhere, encrypted database storage, secret rotation, and principle-of-least-privilege access controls. No system is 100% secure, but we work hard to keep yours safe.
8. Children
EmbeddedPrep.io is not intended for users under 16 years old. If you believe a minor has created an account, contact us and we'll delete it.
9. Changes to this policy
We'll update the "Last updated" date at the top of this page whenever this policy changes. For material changes, we'll also notify you by email.
10. Contact
Questions about this policy? Email hello@embeddedprep.io.