PrepClubsPrepClubs

Privacy Policy

Effective date: April 19, 2026.

This Privacy Policy explains what data PrepClubs (operated by LigoSocial) collects, how we use it, who processes it on our behalf, and what rights you have. By using PrepClubs you agree to the practices described below.

1. Data we collect

  • Account data: email address, hashed password, sign-up date.
  • Practice data: test attempts, answers, scores, progress timestamps, time-per-question.
  • Billing data: Stripe customer ID, purchase records, plan key, access-window expiry. Full card details never touch our servers. Stripe handles them directly.
  • Communications: emails you send us and optional email preferences.
  • Technical data: IP address, browser user agent, and essential session cookies used only to keep you logged in and secure.

We do not run third-party web analytics (no Google Analytics, no Plausible, no Mixpanel) and we do not run third-party error monitoring (no Sentry, no Datadog RUM) on PrepClubs.

2. How we use your data

  • To provide the practice tests, score them, and show you your history.
  • To process one-time purchases and unlock the tests you paid for.
  • To send transactional emails such as receipts, password resets, and access-window expiry notices.
  • To send product updates or educational emails only when you opt in.
  • To detect abuse, scraping, or fraud, and to enforce our Terms of Service.

We do not sell personal data. We do not rent it. We do not share it with advertising networks.

3. Subprocessors

The following third-party services process limited personal data on our behalf to operate PrepClubs:

  • Stripe, Inc. Payment processing. Stores card data, billing address, and Stripe customer ID. See stripe.com/privacy.
  • Meisa (operated by LigoSocial). Transactional and opt-in email delivery. Stores email address, first name if provided, and message metadata.
  • Shared hosted database infrastructure. We run a managed MongoDB deployment on infrastructure shared across a small set of LigoSocial products. Your PrepClubs data lives in a dedicated prepclubs database isolated at the schema level and access-controlled per application.

Each subprocessor is bound by a data processing agreement and is only sent the minimum data required for the function listed.

4. Data retention

  • Account and practice data: retained while your account is active and for up to 24 months after last login, then deleted or anonymized.
  • Billing records: retained for 7 years to meet tax and accounting obligations.
  • Email logs: retained by Meisa for up to 12 months, then purged.
  • Support emails: retained for 24 months.

You can request earlier deletion at any time (see Your rights below).

5. Your rights

Depending on where you live, you have some or all of these rights under GDPR, UK GDPR, CCPA, and similar laws:

  • Access: request a copy of the personal data we hold about you.
  • Export: receive your account and practice data in a machine-readable format.
  • Correction: fix inaccurate data.
  • Deletion: ask us to erase your account and associated data, subject to legal retention obligations.
  • Opt out: unsubscribe from non-transactional email from the link in any email.
  • Complaint: lodge a complaint with your local data protection authority.

To exercise any of these rights, email [email protected]. We respond within 30 days.

6. Cookies

PrepClubs uses only essential cookies. These keep you signed in, maintain your test session, and protect against CSRF. We do not set advertising, tracking, or analytics cookies, so we do not show a consent banner. If we ever add optional cookies, we will add a banner and make consent opt-in.

7. International transfers

Our servers and subprocessors may be located outside your country of residence, including the United States and the European Union. Transfers rely on Standard Contractual Clauses where required.

8. Security

We use TLS in transit, hashed passwords, scoped database credentials, and principle-of-least-privilege access controls. No system is perfectly secure, but we take reasonable and industry-standard steps.

9. Children

PrepClubs is intended for users 16 and older. We do not knowingly collect data from children under 16. If you believe a child has signed up, email us and we will delete the account.

10. Changes

We may update this policy. When we make material changes, we update the effective date at the top and, where required, notify you by email. Continued use after an update constitutes acceptance.

11. Contact

Privacy questions: [email protected].

Mailing address:
LigoSocial, attn: PrepClubs Privacy
Email contact preferred for fastest response.