BCBA Study Hub

Privacy Policy

Last updated: October 8, 2026

1. Introduction

Arteura ("we," "us," or "our") operates BCBAprep, a BCBA exam preparation service available at arteura.com/bcba (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service. By using BCBAprep, you consent to the practices described in this policy.

2. Information We Collect

Information you provide

  • Account information: When you create an account, we collect your name, email address, and password (stored in hashed form).
  • Payment information: When you purchase a subscription, payment is processed by Stripe. We do not store your full credit card number. Stripe may provide us with the last four digits of your card and your billing address for record-keeping purposes.
  • Study data: We collect data about your usage of the Service, including exam scores, flashcard progress, questions answered, and time spent studying. This data is used to provide your personal dashboard and track your progress.
  • Communications: If you contact us by email or through our support channels, we collect the content of your messages and any information you provide.
  • Email capture: When you submit your email address to receive free practice questions or other resources, we store your email address and send you a welcome email followed by periodic study tips and product updates. You can unsubscribe from these emails at any time using the link included in every message.

Information collected automatically

  • Usage data: We collect information about how you interact with the Service, including pages viewed, features used, and session duration.
  • Device information: We collect information about the device you use to access the Service, including device type, operating system, browser type, and screen resolution.
  • IP address: We collect your IP address for security purposes, fraud prevention, and to approximate your geographic location for analytics.
  • Analytics data: We use Google Analytics 4 to collect information about how visitors use our website, including pages visited, time on site, and browser and device information. Google Analytics sets a client ID cookie to distinguish unique visitors. We may associate analytics data with your account for the purpose of conversion measurement. For more information on how Google processes this data, see Google's Privacy Policy.
  • Marketing attribution: When you arrive at our site from an advertisement or marketing link, we capture UTM parameters and Google click identifiers (such as gclid) from the URL. These identifiers are stored with your account and may be shared with Google Analytics 4 for the purpose of measuring advertising conversions.
  • Cookies: We use the following types of cookies: essential cookies required for authentication and session management; Google Analytics cookies (such as _ga) set only after you provide consent; and an attribution cookie that stores UTM parameters and Google click identifiers for up to 90 days. All non-essential cookies are blocked by default until you accept them through our cookie consent banner. Declining non-essential cookies does not affect the functionality of the Service.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process your subscription payments
  • Track your study progress and provide personalized recommendations
  • Send you account-related communications (password resets, subscription confirmations, billing receipts)
  • Send you promotional emails about new features or content (you can unsubscribe at any time)
  • Analyze usage patterns to improve our content and user experience
  • Measure the effectiveness of our advertising through analytics and conversion tracking
  • Prevent fraud, abuse, and unauthorized access
  • Comply with legal obligations

4. Information Sharing

We do not sell your personal information to third parties. We may share your information in the following circumstances:

  • Service providers: We share information with third-party service providers who help us operate the Service, including Stripe (payment processing), Vercel (hosting), Resend (email delivery), and Google Analytics (website analytics and conversion measurement). These providers are contractually obligated to protect your information and use it only for the purposes we specify.
  • Legal requirements: We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Business transfers: If Arteura is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Security

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, misuse, or alteration. These measures include encryption of data in transit (TLS/SSL), hashed password storage, and access controls for our internal systems. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account information and study data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention or financial record-keeping).

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate personal information
  • Deletion: Request deletion of your personal information
  • Portability: Request a copy of your data in a portable format
  • Opt-out: Unsubscribe from promotional emails at any time using the link in any email

To exercise any of these rights, contact us at support@arteura.com. We will respond to your request within 30 days.

8. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected information from a child under 16, we will delete that information promptly. If you believe a child under 16 has provided us with personal information, please contact us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy or our data practices, please contact us at support@arteura.com.

Content is protected