Privacy Policy

1. Introduction

Welcome to DMVPrep Pro (“we,” “us,” or “our”), an online DMV permit test preparation service operated by International Travel Inc., a corporation registered in Lewes, Delaware, USA.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our website at dmv-prep.com (the “Service”). It also describes the rights you have over your data and how to exercise them.

By accessing or using the Service, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with our practices, please do not use the Service.

2. Information We Collect

2.1 Information you provide directly:

• Account information: name, email address, and password (encrypted) when you register
• Payment information: billing details processed securely by Stripe — we never see or store your full card number
• Communications: any messages, feedback, or support requests you send us
• Profile preferences: language, state of residence, and study goals if you choose to provide them

2.2 Information collected automatically:

• Usage data: pages visited, practice tests taken, scores, time spent, features used
• Device information: browser type and version, operating system, screen resolution, language
• Network data: IP address, approximate geographic location (city/state level only), referring URL
• Cookies and similar technologies: see Section 5 below for details

2.3 Information from third parties:

• If you sign in via Google or another OAuth provider, we receive your name, email, and profile picture from that service
• Stripe provides us with confirmation of successful payments and the last 4 digits of your card for receipts

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide, operate, and maintain the Service
• Create and manage your account
• Process payments and manage your subscription
• Personalize your study experience (track your progress, recommend lessons, calculate readiness scores)
• Send transactional emails (account confirmations, password resets, payment receipts, subscription notices)
• Send service updates and announcements (you can opt out at any time)
• Respond to your questions and support requests
• Analyze usage trends and improve our practice questions, lessons, and overall product
• Detect, prevent, and address fraud, abuse, security incidents, or violations of our Terms of Service
• Comply with legal obligations and respond to lawful requests from authorities

We do not sell your personal information to third parties under any circumstances.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on the following legal bases to process your data under the General Data Protection Regulation (GDPR):

• Contract: processing necessary to provide the Service you signed up for
• Legitimate interests: improving the Service, security, fraud prevention, and analytics
• Consent: for marketing communications and non-essential cookies (you can withdraw at any time)
• Legal obligation: when required by law to retain or disclose information

5. Cookies and Tracking Technologies

We use cookies and similar technologies (such as local storage and pixels) to:

• Keep you signed in to your account (essential)
• Remember your preferences and language choice (essential)
• Measure how visitors use the site so we can improve it (analytics)
• Understand which marketing campaigns bring users to us (advertising)

You can control or block cookies through your browser settings. However, disabling essential cookies will prevent you from signing in and using core features of the Service.

6. Third-Party Services and Sub-Processors

We share limited data with the following trusted third parties to operate the Service:

• Stripe — payment processing. Stripe receives your billing details directly from you through their secure forms. stripe.com/privacy
• Vercel — website hosting and content delivery. Vercel processes server logs including IP addresses. vercel.com/legal/privacy-policy
• Google Analytics 4 — usage analytics in aggregate form. policies.google.com/privacy
• Google Ads — advertising and conversion measurement (only if you arrived via an ad)
• NextAuth.js / OAuth providers — authentication when you sign in with Google or similar

We do not authorize these third parties to use your information for any purpose other than providing services to us.

7. Data Retention

We retain your personal information only as long as necessary to provide the Service and to comply with our legal obligations:

• Account data: retained while your account is active
• Payment records: retained for 7 years to comply with tax and accounting laws
• Usage analytics: retained in aggregated form indefinitely; individual-level data deleted after 26 months
• Deleted accounts: personal data deleted within 30 days of account deletion request, except where law requires longer retention

8. Data Security

We take the security of your personal data seriously and implement industry-standard safeguards:

• All data transmitted between you and the Service is encrypted using HTTPS/TLS
• Passwords are hashed using industry-standard algorithms (bcrypt)
• Payment information is handled exclusively by Stripe (PCI-DSS Level 1 certified) — we never store full card numbers
• Access to personal data is restricted to authorized personnel on a need-to-know basis
• Regular security audits and updates to our infrastructure

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. International Data Transfers

International Travel Inc. is based in the United States, and our servers are located in the United States and the European Union (depending on your location). If you access the Service from outside the United States, your data will be transferred to and processed in the United States. We rely on Standard Contractual Clauses approved by the European Commission to ensure adequate protection for transfers from the EEA, UK, and Switzerland.

10. Children's Privacy

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from anyone under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@dmv-prep.com and we will delete it promptly.

For users between the ages of 13 and 18, we recommend that a parent or guardian review this Privacy Policy and our Terms of Service before account creation.

11. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your personal data (also known as the “right to be forgotten”)
• Restriction: request that we limit how we process your data
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interests
• Withdraw consent: where processing is based on consent, withdraw it at any time
• Opt out of marketing: unsubscribe from marketing emails using the link in any message
• Lodge a complaint: file a complaint with your local data protection authority

To exercise any of these rights, contact us at support@dmv-prep.com. We will respond within 30 days.

12. California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights, including:

• Right to know what personal information we collect, use, and disclose
• Right to delete personal information we collected from you
• Right to correct inaccurate personal information
• Right to opt out of the “sale” or “sharing” of personal information (we do not sell or share your data in the meaning of these laws)
• Right to limit use of sensitive personal information
• Right to non-discrimination for exercising your rights

To exercise these rights, email support@dmv-prep.com with the subject line “California Privacy Request.”

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will:

• Update the “Last updated” date at the top of this page
• Notify registered users by email when changes are significant
• Post a notice on the Service homepage for at least 30 days

Your continued use of the Service after changes become effective constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, comments, or concerns about this Privacy Policy or our data practices, please contact us:

See also: Terms of Service · Refund Policy