Privacy

Effective November 3, 2026. CAA School Prereqs is operated by Health Professions Data, LLC.

Your account and application records

We use your email address to send sign-in codes, connect you to your account, deliver purchase confirmations and respond to support requests. Your workspace stores the school selections, courses, experience logs, recommender details, writing, interview practice, deadlines and other records you choose to enter. Do not enter patient information, confidential recommendation letters or sensitive identity documents.

Services that make the dashboard work

GoDaddy hosts the public website, Cloudflare provides DNS and public-site delivery, Fly.io runs the application, Supabase provides authentication and database storage, Resend delivers transactional emails, and Stripe processes payments. Stripe collects payment details on its hosted checkout; we do not receive your full card number. Our application keeps purchase identifiers, purchased terms, payment status and access dates. Providers may process technical request and security information to operate their services.

Protection and use

Workspace content is encrypted by the application before database storage. The application holds the decryption key so it can return your records to you; this is not end-to-end encryption. Access is tied to your signed-in account. We do not sell application records or send your drafts to AI tools. The dashboard does not offer AI writing, review or scoring.

Retention, exports and deletion

Workspace content is retained during paid access and for 14 days after access expires. After that period, scheduled maintenance deletes the workspace content. Export your work before the retention period ends. While content remains, account access allows export or deletion without buying another term. Deleting workspace content removes your drafts and logs; a revision marker remains to prevent an older browser tab from restoring deleted content.

Account, purchase, delivery and security records are separate from workspace content. We retain them as needed to maintain accounts, reconcile payments, handle disputes and meet applicable recordkeeping obligations. Deleting workspace content does not itself delete your authentication account or financial records. Contact us about account deletion or other privacy requests. Provider backups may retain prior copies until their normal expiration.

Cookies and your choices

The application uses essential secure cookies for sign-in and session protection, and browser session storage to safely retry checkout. The public site does not currently run advertising or analytics scripts. Your downloaded exports contain readable personal information; keep them somewhere you control. School links lead to websites with their own privacy policies.

Privacy questions: support@caaschoolprereqs.com.