Privacy Policy

• Account details: your email address and, if you give it or sign in with Google, your name. If you sign up with a password we store only a one-way hash of it, never the password itself. If you use "Sign in with Google", Google confirms your identity and we receive your name and email address.
• Study data: your practice answers, mock exam results, saved questions and progress, so we can show your stats and readiness.
• Payment records: what you bought, when, the price, your pass dates and a Stripe customer reference. Stripe processes the payment; we never see or store your full card number.
• Referral data: the referral link you arrived through or share, the friends who bought through it, your earnings, and the eGift brand you choose when you cash out.
• How you found us: on your first visit we record the source of the visit (for example a search engine, a referring website or a campaign link with UTM tags) and keep it with your account when you sign up.
• Messages: anything you send us through the feedback form or by email.
• Technical data: basic logs, such as IP address, browser type and pages requested, that our hosting provider keeps to run and secure the Service.

We collect this information from you directly, from your use of the Service, and from Stripe and Google where you use them. You can read our free pages and sample questions without giving us any personal information, but we need an email address to create an account.

• to create your account, provide the Service and give you the pass you bought;
• to process payments and refunds, and keep the records tax law requires;
• to run Refer & Earn and send the eGifts you earn;
• to answer your questions and act on your feedback;
• to secure the Service and prevent fraud and misuse;
• to understand which channels bring visitors, so we can improve the Service and our marketing; and
• with your consent, to send you marketing email (section 3).

We do not sell your personal information.

Service emails, such as your sign-up confirmation, password resets, payment receipts, your pass confirmation and notices that your pass is about to end, are part of the Service and are sent whether or not you agree to marketing.

Marketing emails, such as study reminders, offers and news of new material, are sent only if you have given us express consent, in line with the Spam Act 2003 (Cth). You give it by ticking the opt-in box at sign-up, which is unticked by default, or by opting in later. Every marketing email identifies Adviser Exam Prep as the sender, tells you how to contact us and has a working unsubscribe link. You can also opt out at any time on our unsubscribe page or by emailing us. We act on an unsubscribe request within five working days.

We share personal information only with the service providers that help us run Adviser Exam Prep, under contract, and only as far as they need it:

• Vercel: application hosting and cookie-free page statistics. Our application runs in Vercel's Sydney region, and some of its services operate from the United States.
• Supabase: database hosting, in its Sydney (ap-southeast-2) region.
• Stripe: payments and billing, from the United States and other countries.
• Resend: delivery of our emails, from the United States.
• Google: optional "Sign in with Google" and, only with your consent, ad conversion measurement, from the United States and other countries.

This means your personal information may be held in, or accessed from, the United States and other countries outside Australia, and we may access it from outside Australia to run the Service. Each provider is bound by contractual data-protection terms, and we take reasonable steps under APP 8 to make sure overseas recipients handle your information consistently with the APPs. We may also disclose information where the law requires it.

We keep your personal information while your account is open. If you ask us to delete your account, we delete or de-identify your personal information, except payment records, which we keep for five years for tax and accounting purposes, and anything we must keep by law. Marketing opt-outs are kept so we do not email you again.

We use encryption in transit, hashed passwords and access controls, and we limit who can see personal information. No system is perfectly secure, but we take reasonable steps to protect your information from misuse, loss and unauthorised access. If a data breach is likely to cause you serious harm, we will tell you and, where required, the Office of the Australian Information Commissioner.

You can ask for a copy of the personal information we hold about you, ask us to correct it if it is wrong, or ask us to delete your account. Email us from the address on your account so we can confirm it is you. We respond within 30 days and do not charge for a request. If we refuse a request, we will tell you why in writing.

If you think we have mishandled your personal information, please email support@adviserexamprep.com first. We will reply within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

Adviser Exam Prep is for adults preparing for a professional exam and is not directed at anyone under 18. We do not knowingly collect personal information from children; if you believe a child has given us information, contact us and we will delete it.

We may update this policy and will show the new date at the top of this page. This policy is read with our Terms of Service, and the governing-law clause in those Terms applies to it. That clause does not reduce your rights under the Privacy Act 1988 (Cth) or any other mandatory Australian law.

Privacy questions, requests or complaints: email support@adviserexamprep.com or use our feedback form.