Privacy Policy | CAASPPTest

CAASPPTest ("we," "us," or "our") operates caaspptest.com. This Privacy Policy explains what information we collect, how we use it, and your rights.

1. Information We Collect

Account information: When you register, we collect your name, email address, and a hashed password. We also store the grade level you select during signup.
Test data: We store your practice test results, scores, and answers so you can review them in your dashboard.
Payment information: Payments are processed by Stripe. We do not store credit card numbers. We receive a confirmation of the transaction amount and a Stripe customer ID.
Usage data: We log page visits and approximate location (city-level, derived from IP address) to understand how the site is used and to improve it. Raw IP addresses are not retained longer than necessary.

2. How We Use Your Information

To provide and improve the CAASPPTest service
To send your purchase confirmation and score report emails
To display your test history in your dashboard
To analyze aggregate usage trends (we do not sell individual data)

3. Children's Privacy (COPPA)

CAASPPTest is designed for students preparing for the CAASPP. Children under 13 must have parental consent to create an account. We recommend that parents create the account and purchase tests on behalf of their child. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe a child under 13 has provided us with personal information without consent, please contact us at support@caaspptest.com and we will delete it.

4. Data Sharing

We do not sell, trade, or rent your personal information. We share data only with:

Stripe — for payment processing (Stripe Privacy Policy)
Resend — for transactional email delivery
Render — for hosting the application

5. Cookies

We use a single session cookie to keep you logged in. We do not use advertising cookies or third-party tracking pixels.

6. Data Retention

We retain your account and test data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by emailing support@caaspptest.com.

7. Security

Passwords are stored as SHA-256 hashes and never in plain text. All traffic is served over HTTPS. Payment processing is handled entirely by Stripe on their PCI-compliant infrastructure.

8. Your Rights

You may request access to, correction of, or deletion of your personal data at any time. Contact us at support@caaspptest.com.

9. Changes to This Policy

We may update this policy from time to time. We will post the updated date at the top of this page. Continued use of the service after changes constitutes acceptance.

10. Contact

Questions? Email us at support@caaspptest.com.