Privacy Policy
Last updated: July 29, 2026
1. Introduction
BehaviorPREP ("we," "us," or "our") operates my.behaviorprep.com (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Platform. By using the Platform, you consent to the practices described in this Policy.
We are committed to protecting your privacy and handling your data in a transparent, responsible manner consistent with applicable law, including the California Consumer Privacy Act (CCPA) and, where applicable, the General Data Protection Regulation (GDPR).
2. Information We Collect
Information you provide directly:
- Account registration data (name, email address, password)
- Professional credentials (BACB ID, certification type, certification dates)
- Profile information (organization, role, CEU window dates)
- Payment information (processed securely by Stripe; we do not store card numbers)
- Communications with our support team
Information collected automatically:
- Examination responses, scores, and timing data
- Course completion and progress data
- Device information (browser type, operating system, IP address)
- Usage data (pages visited, features used, session duration)
- Cookies and similar tracking technologies (see Section 7)
3. How We Use Your Information
We use your information to:
- Provide, operate, and improve the Platform and its features
- Generate diagnostic reports and personalized study recommendations
- Process payments and manage your subscription
- Issue CEU certificates and maintain completion records
- Send transactional emails (receipts, certificate delivery, account notices)
- Send educational and promotional communications (you may opt out at any time)
- Analyze aggregate usage patterns to improve our content and platform design
- Comply with legal obligations and enforce our Terms of Service
We do not sell your personal information to third parties. We do not use your examination responses or diagnostic data for any purpose other than providing your report and improving our question quality.
4. Legal Basis for Processing (GDPR)
For users in the European Economic Area, we process your personal data on the following legal bases:
- Contract performance: to provide the services you have requested
- Legitimate interests: to improve our Platform and prevent fraud
- Consent: for marketing communications (withdrawable at any time)
- Legal obligation: to comply with applicable laws
5. Sharing Your Information
We may share your information with:
- Service providers: Stripe (payment processing), email delivery providers, cloud hosting providers — all bound by data processing agreements
- Analytics providers: aggregated, de-identified usage data only
- Legal authorities: when required by law, court order, or to protect our rights
- Business transfers: in the event of a merger, acquisition, or sale of assets, with notice to you
We do not share your examination responses, diagnostic reports, or individual performance data with any third party, including employers or educational institutions, without your explicit consent.
6. Data Retention
We retain your account data for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain it for legal or compliance purposes (such as payment records, which are retained for 7 years).
CEU completion records are retained for a minimum of 5 years to support certification verification requests.
7. Cookies and Tracking
We use cookies and similar technologies to maintain your session, remember your preferences, and analyze Platform usage. Types of cookies we use:
- Essential cookies: required for authentication and core Platform functionality
- Analytics cookies: help us understand how users interact with the Platform (aggregated, anonymized)
- Preference cookies: remember your settings and display preferences
You can control cookies through your browser settings. Disabling essential cookies will impair Platform functionality. We do not use third-party advertising cookies.
8. Data Security
We implement industry-standard security measures including encrypted data transmission (TLS), encrypted data storage, access controls, and regular security reviews. Payment data is handled exclusively by Stripe and is never stored on our servers.
No method of transmission or storage is 100% secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you
- Correction: request correction of inaccurate or incomplete data
- Deletion: request deletion of your personal data (subject to legal retention requirements)
- Portability: request your data in a structured, machine-readable format
- Opt-out: unsubscribe from marketing communications at any time via the link in any email
- Restriction: request that we limit processing of your data in certain circumstances
To exercise any of these rights, contact us at support@behaviorprep.com. We will respond within 30 days. We may need to verify your identity before processing your request.
10. Children's Privacy
The Platform is intended for users 18 years of age and older. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will delete it promptly. If you believe a child has provided us with their information, contact us at support@behaviorprep.com.
11. California Privacy Rights (CCPA)
California residents have the right to know what personal information we collect, to request deletion of their personal information, and to opt out of the sale of personal information. We do not sell personal information. To submit a CCPA request, contact us at support@behaviorprep.com or through your account settings.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and, where appropriate, by email. The "Last updated" date at the top of this page reflects the most recent revision.
13. Contact Us
For privacy-related questions, requests, or concerns, contact us at:
BehaviorPREP
Email: support@behaviorprep.com
Website: my.behaviorprep.com