Privacy Policy

Last updated: January 27, 2025

1. Introduction

ACS Mastery ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our aviation education platform.

By using ACS Mastery, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, and password when you create an account.
  • Profile Information: Certificate type you're studying for (Private, Instrument, Commercial).
  • Payment Information: When you subscribe, payment details are collected and processed directly by Stripe. We receive only the last 4 digits of your card and billing postal code for records.
  • Support Communications: Information you provide when contacting our support team.

2.2 Information Collected Automatically

  • Usage Data: Study progress, flashcard reviews, quiz scores, and time spent studying.
  • Device Information: Browser type, operating system, and device identifiers.
  • Log Data: IP address, access times, pages viewed, and referring URLs.

2.3 Cookies and Tracking

We use cookies and similar technologies to:

  • Keep you signed in to your account
  • Remember your preferences
  • Analyze how you use our Service
  • Protect against unauthorized access (CSRF tokens)

You can control cookies through your browser settings, but disabling them may limit functionality.

3. How We Use Your Information

We use your information to:

  • Provide and maintain the Service
  • Process your subscription and payments
  • Track your study progress and provide personalized recommendations
  • Send important service updates and security alerts
  • Respond to your support requests
  • Improve and optimize our platform
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share information with:

4.1 Service Providers

  • Stripe: For payment processing. Stripe's privacy policy governs their handling of your payment information.
  • Resend: For transactional emails (password resets, account notifications).
  • Hosting Providers: For infrastructure and data storage.

4.2 Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect our rights, property, or safety.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.

5. Data Security

We implement industry-standard security measures including:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure password hashing (bcrypt)
  • Regular security audits and updates
  • Access controls and authentication

No method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information as long as your account is active or as needed to provide services. After account deletion:

  • Personal information is deleted within 30 days
  • Anonymized usage data may be retained for analytics
  • Legal and compliance records may be kept as required by law

7. Your Rights and Choices

You have the right to:

  • Access: Request a copy of your personal information.
  • Correction: Update or correct inaccurate information.
  • Deletion: Request deletion of your account and personal data.
  • Portability: Export your study progress data.
  • Opt-out: Unsubscribe from marketing emails (transactional emails cannot be opted out).

To exercise these rights, contact us at [email protected].

8. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected
  • Right to delete personal information
  • Right to opt-out of sale of personal information (we do not sell data)
  • Right to non-discrimination for exercising privacy rights

9. International Users

ACS Mastery is based in the United States. If you access the Service from outside the US, your information may be transferred to and processed in the US. By using the Service, you consent to this transfer.

10. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect information from children under 13. If we learn that we have collected such information, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last updated" date at the top indicates when changes were made.

12. Contact Us

For questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: [email protected]