Privacy Policy

Passforge is operated by Essiel Express LLC (“we”, “us”), a Florida limited liability company, USA. This Policy explains what we collect, how we use it, and your rights. It applies to users worldwide, including the UK and EEA.

1. Information we collect

• Account: name, email, password (hashed), role.
• Payments: processed by Stripe. We receive limited billing details and subscription status; we do not store full card numbers. Stripe does, under its own policy.
• Usage: exam attempts, scores, answers, reports/reviews you submit, and basic device/log data (IP, browser) for security and analytics.
• Cookies: a session cookie to keep you signed in, and limited analytics/preferences.

2. How we use it

To provide and improve the Service (run exams, score, show analytics), manage accounts and subscriptions, prevent abuse/fraud, respond to support and question reports, display moderated reviews, and send service or (with consent where required) marketing emails.

3. Legal bases (UK/EEA)

Where GDPR/UK GDPR applies, we rely on: contract (to provide the Service you bought), legitimate interests (security, improving the product), consent (marketing, non-essential cookies), and legal obligation.

4. How we share it

We share data only with service providers (sub-processors) that help us operate: Stripe (payments), our hosting/infrastructure, email delivery, and analytics. We do not sell your personal information. We may disclose information if required by law or to protect our rights.

5. Cookies

Essential cookies are needed to sign in and use the Service. Any analytics/preference cookies are used as described and, where required, with your consent. You can control cookies in your browser.

6. Your rights

UK/EEA (GDPR): access, rectification, erasure, restriction, portability, objection, and the right to withdraw consent or complain to your data authority.

California (CCPA/CPRA): the right to know, delete, correct, and to opt out of “sale”/“sharing” (we do not sell or share for cross-context behavioral advertising), without discrimination.

To exercise any right, contact [email protected]. We will verify and respond as required by law.

7. Children

The Service is for adults and is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect their data; if you believe a child provided data, contact us to remove it.

8. International transfers

We operate from the United States. If you use the Service from outside the US, your information will be transferred to and processed in the US and other countries that may have different data-protection laws. Where required, we rely on appropriate safeguards (e.g., Standard Contractual Clauses) for such transfers.

9. Data retention

We keep personal data while your account is active and as needed for the purposes above or to meet legal/accounting obligations, then delete or anonymize it.

10. Security

We use reasonable technical and organizational measures (e.g., hashed passwords, encrypted connections, access controls). No method is 100% secure; we cannot guarantee absolute security.

11. Email & communications

We may send transactional emails (receipts, account, results). Marketing emails include an unsubscribe link, consistent with CAN-SPAM and applicable consent rules.

12. Changes

We may update this Policy; the “Last updated” date will change. Material changes will be notified where required.

13. Contact

Privacy questions or requests: [email protected].