Privacy Policy

Last updated: July 2026

This Privacy Policy explains how Authority Group LLC(“Capital Prep,” “we”) collects, uses, shares, and protects personal information when you use our websites and study platform (the “Service”), and the choices you have. It works alongside our Cookie Policy and Terms of Service.

1. Information we collect

  • Account & identifiers — name, email, and sign-in details when you create an account or start a trial.
  • Purchase & payment — your plan and transaction records. Card payments are processed by Stripe; we don’t store full card numbers.
  • Study & usage data — your answers, progress, readiness, settings, and how you use features, so the Service can work and improve.
  • Device & technical — IP address, browser/device type, and similar data collected automatically via cookies and pixels.
  • Support & communications — messages, error reports, and requests you send us.
  • Interest signals — when you tap “show interest” on a coming-soon exam page, we record that interest (and a device/browser identifier) to gauge demand and for advertising.

2. Where it comes from

From you (when you sign up, buy, study, or contact us); automatically (cookies, pixels, and our servers as you use the Service); and from partners such as our payment, analytics, and advertising providers, and our affiliated free brand, Career Employer.

3. How we use it

  • Provide, personalize, and improve the Service (including your readiness score and recommendations).
  • Process purchases, provide support, and administer the Pass Guarantee.
  • Send you service messages (receipts, magic-link sign-in, and important notices).
  • Measure and run marketing, including retargeting and building lookalike audiences with advertising partners.
  • Maintain security, prevent fraud and abuse, and comply with law.

4. How we share it

We do not sell your personal information for money. We share it with:

  • Service providers that run the Service for us — hosting and database (Supabase), payments (Stripe), email (Resend), and analytics. They may only use it to provide their service to us.
  • Advertising & measurement partners (e.g., Meta, Google, TikTok) via pixels, to measure campaigns and show relevant ads. Under some U.S. state laws this counts as “sharing” for targeted advertising — you can opt out (see §7).
  • Legal & safety — when required by law or to protect rights, safety, and the integrity of the Service.
  • Business transfers — as part of a merger, acquisition, or sale of assets.

5. Cookies & tracking

We use essential, analytics, and advertising cookies and pixels. You can control them in your browser and via each ad platform’s settings — details are in our Cookie Policy.

6. Data retention

We keep personal information for as long as your account is active and as needed to provide the Service, then for a reasonable period to meet legal, tax, security, and dispute-resolution needs, after which we delete or anonymize it.

7. Your choices & rights

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, and to opt out of targeted advertising / “sharing.”

8. California residents (CCPA/CPRA)

We describe the categories of personal information we collect, our sources, purposes, and the categories we share above. California residents have the rights to know, delete, correct, and opt out of sale/sharing, and to limit use of sensitive information. We do not sell personal information for money, and we do not knowingly sell or share the information of anyone under 16.

9. GDPR / EEA & UK

If you’re in the EEA or UK, our legal bases for processing are: performance of our contract with you (to provide the Service), your consent (for certain marketing/cookies), our legitimate interests (to secure and improve the Service), and legal obligations. You may object to or restrict certain processing and lodge a complaint with your supervisory authority.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child provided us information, contact us and we will delete it.

11. Security

We use technical and organizational safeguards — encryption in transit, access controls, and trusted infrastructure — to protect your information. No method is perfectly secure, but we work to protect your data and to respond quickly to any issue.

12. International transfers

We operate primarily in the United States, and your information may be processed there. Where required, we use appropriate safeguards for cross-border transfers.

13. Changes & contact

We’ll update this policy from time to time and post the new version with a new date; we review it at least annually. Questions or requests? Email support@capitalprep.com or write to Authority Group LLC, 1401 Lavaca Street, Unit #7073, Austin, TX 78701, United States.

This is a plain-language summary of our policies. It is provided for transparency and does not constitute legal advice.