Privacy Policy

1. Overview

STRATA (the "Service") is an online educational platform and question bank operated by Vault Software LLC ("Vault," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you access or use STRATA.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.

This Privacy Policy is incorporated into and forms part of our Terms of Service.

2. Information We Collect

2.1 Account and Profile Information

When you create an account, we may collect:

• Name
• Email address
• Password (stored in hashed form; we cannot see your plain-text password)
• Role or exam track (e.g., CAA, SRNA, resident, other)
• Program or institutional affiliation, if applicable

2.2 Subscription and Payment Information

If you purchase a subscription, payments are processed by a third-party payment processor (such as Stripe). We do not store full payment card numbers.

We may receive and store:

• Subscription status (active, canceled, expired)
• Subscription plan details and access period
• Limited billing metadata (e.g., card type, last four digits) as provided by the payment processor

2.3 Usage and Learning Data

To provide quizzes, analytics, and personalized learning features, we may collect:

• Questions viewed, answered, or marked for review
• Quiz sessions, scores, timing, and progress
• Categories and topics practiced
• Aggregate performance metrics used for analytics

2.4 Device and Log Information

We may automatically collect certain technical information, including:

• IP address
• Browser type
• Device type
• Access times and usage patterns

2.5 Cookies and Similar Technologies

We use cookies and similar technologies to:

• Maintain secure login sessions
• Remember user preferences
• Improve performance and usability
• Understand how the Service is used

You may adjust cookie settings through your browser, but some features of the Service may not function properly without cookies.

3. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Service
• Create and manage user accounts
• Deliver quizzes, exams, analytics, and learning recommendations
• Process subscriptions and manage billing
• Communicate with users about accounts, updates, and service-related notices
• Monitor usage, improve content, and enhance performance
• Detect, prevent, and address security or technical issues

4. How We Share Your Information

4.1 Service Providers

We may share information with trusted third-party service providers that assist us in operating the Service, including:

• Cloud hosting and database providers
• Payment processors and billing platforms
• Analytics and monitoring services
• Email and communication providers

These providers are authorized to use information only as necessary to perform services on our behalf.

4.2 Programs and Institutions (If Applicable)

If your access to STRATA is provided through a program, school, or institution, we may share analytics and progress information consistent with the Service's features and institutional agreements, including:

• Aggregated cohort performance trends
• Category-level strengths and weaknesses
• Study activity and engagement metrics

Where individualized learner data is shared with an institution (such as named student performance), such sharing is conducted in accordance with applicable educational privacy laws (including FERPA where applicable), institutional policies, and contractual agreements.

4.3 Legal Requirements and Protection

We may disclose information if we reasonably believe such disclosure is necessary to:

• Comply with applicable law or valid legal requests
• Protect and defend our rights or property
• Investigate or prevent misuse, fraud, or security issues
• Protect the safety of users or the public

5. Data Retention and Security

5.1 Data Retention

We retain personal information only as long as reasonably necessary to:

• Provide the Service
• Maintain analytics and learning history
• Comply with legal obligations
• Resolve disputes and enforce agreements

Learning data (such as question history and performance metrics) may be retained to support ongoing analytics and benchmarking unless deletion is requested and permitted by law.

5.2 Security

We use reasonable technical and organizational safeguards to protect information, including encrypted connections (HTTPS) and secure cloud infrastructure. However, no system is completely secure, and we cannot guarantee absolute security.

6. Your Choices and Rights

Depending on your jurisdiction and applicable law, you may have rights regarding your personal information, including:

• Accessing personal data we hold about you
• Requesting correction of inaccurate information
• Requesting deletion of certain personal data (subject to legal or contractual obligations)
• Objecting to or restricting certain processing activities
• Requesting data portability where applicable

You may:

• Update account information through your profile (where available)
• Cancel subscriptions in accordance with our Terms of Service
• Contact us using the information below to exercise your rights

7. No Protected Health Information (HIPAA)

STRATA is not intended to store or process protected health information (PHI). Users must not upload patient-identifiable or clinical data to the Service. Vault Software LLC is not a HIPAA-covered entity.

8. Children's Privacy

The Service is intended for adult learners and trainees. We do not knowingly collect personal information from children under 13 (or under the minimum age required in your jurisdiction). If we become aware that such information has been collected, we will take steps to delete it.

9. International Users

STRATA may be accessed from outside the United States. By using the Service, you understand that your information may be processed and stored in the United States or other jurisdictions where Vault or its service providers operate, which may have different data protection laws than your location.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When changes are made, we will update the "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact:

Vault Software LLC

Operating STRATA

Email: support@studystrata.com