LevelPrep is operated by Ishvaron Strategy PTY LTD (ABN pending), an Australian company. We provide CFA exam preparation materials and mock examinations via levelprep.org. For privacy-related enquiries, contact us at ishvaronstrategy@gmail.com.
We collect information you provide directly: your name, email address, phone number, and CFA exam target date when you create an account. We collect payment information processed by Stripe — we never store your card details directly. We collect usage data including which questions you attempt, your answers, mock exam scores, and session activity. We collect technical data such as your IP address, browser type, and device information for security and analytics purposes.
We use your information to provide and improve our services, process payments, send you account-related communications (email verification, password reset), track your exam preparation progress, and detect and prevent fraudulent activity. We do not sell your personal information to third parties. We do not use your information for advertising purposes.
Your data is stored in Supabase (Tokyo region) and is encrypted at rest using AES-256. All data is transmitted over HTTPS. We implement industry-standard security measures including row-level security policies on our database. Payment processing is handled by Stripe, which is PCI DSS compliant. We retain your data for as long as your account is active. When you delete your account, your data is marked as deleted and retained for 365 days, after which it is permanently removed from our systems. This retention period allows for account recovery in case of accidental deletion and supports our legal and audit obligations.
We use essential cookies to maintain your login session. These are required for the platform to function. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this will prevent you from logging in.
We use the following third-party services: Stripe for payment processing (privacy policy at stripe.com/privacy), Supabase for database and authentication (privacy policy at supabase.com/privacy), and Vercel for hosting (privacy policy at vercel.com/legal/privacy-policy). Each of these services has their own privacy policy governing how they handle data.
Under the Australian Privacy Act 1988, you have the right to access the personal information we hold about you, request correction of inaccurate information, request deletion of your account and associated data, and lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the Privacy Act. To exercise any of these rights, contact us at ishvaronstrategy@gmail.com.
If you are located outside Australia, please be aware that your information will be transferred to and processed in Australia and Japan (where our database servers are located). By using LevelPrep, you consent to this transfer. We take reasonable steps to ensure your data is handled securely regardless of where it is processed.
LevelPrep is intended for adults preparing for professional examinations. We do not knowingly collect personal information from anyone under 18 years of age. If you believe we have inadvertently collected such information, please contact us immediately.
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the platform. Your continued use of LevelPrep after changes are posted constitutes your acceptance of the updated policy.
For any privacy-related questions or requests, please contact Ishvaron Strategy PTY LTD at ishvaronstrategy@gmail.com.