Privacy Policy
What ChatCPA collects, and what it does not
Written to describe what the software actually does, so that it can be checked against the software. CHATCPA LLC, an Oregon limited liability company.
Effective October 11, 2026. Adds the ChatCPA phone app, progress sync for members, account deletion, and corrects two statements in the previous version (see section 9). Earlier versions: October 4, 2026, August 13, 2026 and January 28, 2023.
The short version. If you are a signed-in member, your study progress is saved to your ChatCPA account so it follows you between the website and the phone app. We use it to run that sync and nothing else. We ask for an email address at the free practice exam, and when you choose to get job alerts or AI accuracy updates. You can delete your account and everything we keep for it from the app or from this page. We do not sell data, we do not share it with data brokers, and we do not share it with anyone for their own marketing.
1. Your study data
The test bank, the practice exam and the simulation engine run on your own device, in your browser or in the ChatCPA app. What the product remembers about your studying is kept there first:
- Session history: which questions you answered, what you picked, whether it was right, and how long you took.
- Which questions you have already seen, and which you flagged.
- Teach-back results and the explanations you type.
- Your predicted score, mastery state, study plan, and settings such as dark mode.
Members who sign in also get that data saved to their ChatCPA account (a copy is stored on our server at Cloudflare) so it syncs between devices. It is stored under your account's member ID, not your name. Only the software reads it, to keep your devices in step and to count overall activity (for example, how many members studied today). If you do not sign in, it stays on your device only, and clearing your browser data removes it.
2. The ChatCPA phone app
- Sign-in. The app signs you in through your ChatCPA website account and keeps you signed in on that phone.
- Study reminders are scheduled on the phone itself. Your reminder settings stay on the phone.
- Job alerts (only if you turn them on): we keep your phone's notification address (a Firebase Cloud Messaging token from Google), the zip code, distance and job filters you chose, and your time zone, so we can send new jobs near you at a sensible hour. Turning alerts off deletes them. We never use your phone's location; you type a zip code.
- Offline questions: the app keeps copies of the question banks on the phone so you can study without a connection.
- Microphone: used only when you record a teach-back answer, and only after the phone asks your permission.
3. What we collect
| What | When | Why |
|---|---|---|
| Email address | When you unlock the free practice exam, join, sign in with an emailed code, or buy a subscription | To send the material you asked for, to sign you in, to deliver purchases, and to send product email you can unsubscribe from at any time |
| Synced study progress | While you are signed in as a member | To keep your progress the same on every device you use. See section 1 |
| Profile answers | Only if you answer the optional profile questions (such as exam date, career stage, employer type and pay range) | To tailor your study plan and to understand, in aggregate, who uses ChatCPA |
| Phone notification token, zip code and job filters | Only if you turn on job alerts in the app | To send those alerts. See section 2 |
| IP address | At the free practice exam unlock | Abuse and duplicate signup control. Retrieved through the third-party service api.ipify.org, which necessarily sees the request |
| Approximate country or US state | When you open the jobs board or the app's sign-in screen | To show jobs in your state and the right sign-up option. Worked out from your IP address by our server (Cloudflare) for that request only; not stored |
| Your progress file | Only if you press "email my progress" | To email that file to the address you type |
| Login records | When you sign in | Our hosts keep standard sign-in records, including date and IP, to secure accounts. We do not use them to track your browsing |
| Job alerts and AI accuracy updates | When you sign up on a jobs page or the AI accuracy page, and confirm by email | Your email address, the job search you saved, and when you signed up and confirmed. Used only to send those emails |
| Payment details | At checkout | Handled by Stripe. Your card number goes to Stripe, not to us: we never see it and it is never stored on our systems |
| AI tutor and teach-back | If you use them | Your messages, the question you are on, and your teach-back answer (typed, or your voice recording) are sent to OpenAI to generate the reply and the grade. In the app we ask for your permission first. Do not put confidential client information into it |
| Usage analytics | Using the simulator or browsing the site | Microsoft Clarity records how the simulator is used (taps, scrolls and replays of sessions) so we can find bugs and confusing screens. Plus standard web logs for hosting and security |
4. Who else touches it
We use ordinary service providers, and they only get what they need to do their job:
- Squarespace hosts the website and member accounts, runs the store, and provides site analytics.
- Cloudflare serves the question banks, stores synced progress and job alerts, and runs the assistant's backend.
- OpenAI generates AI tutor replies and teach-back grades from what you send it.
- Google Firebase Cloud Messaging delivers the app's job-alert notifications.
- Microsoft Clarity provides the usage analytics described above.
- Make.com receives the email-unlock, email-my-progress, and warranty-claim submissions and routes them to our email system.
- Resend sends sign-in codes, job-alert and AI accuracy update emails.
- Stripe processes payments and holds the card details we never see.
- api.ipify.org returns the IP address described above.
- Google and LinkedIn advertising tags tell us that an ad led to a signup on the website. They are advertising cookies. Decline them in the cookie banner and they do not run. The phone app has no advertising.
What we do not do. We do not sell personal information. We do not share it with third parties for their own marketing. There are no affiliates or "business partners" receiving your data. We do not use your teach-back answers or your performance to train AI models. We do not show ads in the app. We do not email your scores to anyone, including you, unless you ask us to.
5. How long it is kept, and deleting your account
Synced progress, profile answers and app job-alert settings are kept until you delete your account (or, for job alerts, turn them off). Delete your account in the app (Menu, then Delete account) or at app.chatcpa.io/delete-account.html: that removes your synced progress, profile answers, sign-in records we hold, job-alert and news emails and phone alerts straight away, and your website membership within 7 days. Email addresses for alerts and updates are otherwise kept until you unsubscribe; every alert email has a one-click unsubscribe link. IP addresses collected at unlock are kept for one year. A progress file you email yourself stays in the sent record like any other email; ask and we will purge it. Purchase records are kept as long as tax and business law requires, which for us is seven years. Data that is only on your device stays until you clear it or uninstall the app.
6. Your rights
Wherever you live, you can ask us what we hold about you, ask for a copy, ask us to correct it, and ask us to delete it. If you are in California, the CCPA rights to know, delete, correct and opt out of sale or sharing apply; we do not sell or share personal information as those terms are defined, and we will not treat you differently for exercising a right. If you are in the UK or EEA, we process your data to perform the contract you bought or the free service you signed up for, to comply with law, and on the basis of legitimate interests in running and securing the service, and you may object or lodge a complaint with your supervisory authority. One email to finance@chatcpa.io starts any of this, and it reaches the person who owns the company. We answer within 30 days.
7. Cookies
The site uses cookies that are necessary for it to work, plus analytics and advertising cookies that you can decline. Declining does not limit the test bank, because the test bank does not rely on them. Your browser can also block cookies outright. See the cookie policy for the detail.
8. Security
Traffic to this site and the app is encrypted in transit. Synced progress is stored under a member ID rather than your name, and sign-ins use signed tokens. For everything we hold we rely on the security of the established providers named above. No system is perfectly secure, and anyone who tells you otherwise is selling something.
9. Corrections to the previous version
The October 4, 2026 version said your study data never left your browser and that we ran no session recording or heatmap software. Both stopped being true before that date: signed-in members' progress was already syncing to their account, and the simulator uses Microsoft Clarity. This version describes both. If this policy changes in a way that affects what we collect or who receives it, the effective date at the top changes and the old version does not quietly disappear: ask and we will show you what changed.
10. Children
This is a professional licensing exam product intended for adults. It is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us data, write to us and we will delete it.
11. Contact
CHATCPA LLC, Oregon. Questions, requests and complaints: finance@chatcpa.io. See also the terms and conditions, acceptable use policy, and disclaimer.
This policy describes practices, not legal advice, and I am a CPA rather than an attorney. If you find something here that does not match what the software does, tell me and I will fix the software or fix the page, and say which in the changelog. Nicholas Miller, CPA · Oregon license #14907.