Privacy Policy — Alphura

Alphura ("we", "us", or "our") operates the website at https://alphura.com. This Privacy Policy describes how we collect, use, and safeguard your information when you use our platform.

1. Information We Collect

Account Information. When you register, we collect your name, email address, and (if you choose Google sign-in) basic profile data provided by Google OAuth.

Payment Information. Payments are processed by Stripe. We do not store your full credit card number. Stripe may collect billing details in accordance with its own privacy policy.

Usage Data. We automatically collect information about how you interact with the platform, such as quiz scores, topics practiced, timestamps, pages visited, and device/browser information.

Cookies. We use session cookies to keep you signed in and analytics cookies to understand how the platform is used. You can disable cookies in your browser settings, though some features may not work properly.

2. How We Use Your Information

Provide, operate, and maintain our CFA exam prep platform
Track your study progress, quiz scores, and spaced repetition schedules
Generate personalized performance reports (strengths and weaknesses)
Process payments and manage subscriptions
Send transactional emails (e.g., password resets, purchase receipts)
Improve our content, features, and user experience
Respond to support requests

3. How We Share Your Information

We do not sell your personal information. We may share limited data with:

Stripe — for payment processing
Google — if you use Google sign-in (OAuth)
Amazon Web Services — for email delivery (SES) and hosting
Law enforcement — if required by applicable law

4. Data Retention

We retain your account data and study history for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

5. Data Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), hashed passwords (bcrypt), and secure server infrastructure. However, no system is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and data
Withdraw consent for non-essential data processing

To exercise any of these rights, email us at [email protected].

7. Third-Party Links

Our platform may contain links to third-party websites (e.g., CFA Institute). We are not responsible for the privacy practices of those sites.

8. Children's Privacy

Our platform is not intended for anyone under the age of 16. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised effective date. Continued use of the platform after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, contact us at:

[email protected]