Privacy Notice

Who we are

ACE Digital Systems, LLC, trading as ACE Prep Hub, is the data controller for the personal information described in this notice. We decide how and why your information is processed, and we are responsible for keeping it secure. Questions or requests can be submitted through Help & Support inside the app.

Personal data we collect and why

Account data (name, email address, phone number if you enable SMS sign-in, login credentials, exam cycle and cohort): to create and secure your account and provide the service you purchased. Legal basis: performance of our contract with you.

Study data (score reports you upload, practice answers, diagnostic results, readiness estimates, flashcards, notes, Rowan tutor conversations): to generate your domain heatmap, adaptive study plan, and coaching responses. Legal basis: performance of our contract.

Support data (tickets, feedback, testimonials you submit): to answer your requests and improve the product. Legal basis: contract performance and our legitimate interest in product quality.

Technical data (IP address, device and browser identifiers, timestamps, audit and access logs, usage telemetry): to keep accounts secure, detect fraud and abuse, and diagnose faults. Legal basis: legitimate interests in security and service reliability, and legal obligation where applicable.

Marketing data (waitlist email address, launch and cohort notification preferences): to tell you when access opens. Legal basis: your consent, withdrawable at any time.

How we share your data

Service providers acting on our instructions: cloud hosting and database infrastructure, transactional email delivery, AI model providers that generate tutoring and parsing output, and analytics or error monitoring tooling.

Stripe, Inc. and its affiliates, our payment processor and Merchant of Record, for the sale of our products, subscription management, payments, tax calculation and collection, invoicing, refunds, and related customer service. Stripe processes payment details directly; we never receive or store your full card number.

ElevenLabs, which converts the text of Rowan, the AI Tutor's replies into spoken audio when you use voice read-aloud. It receives the reply text being read, not your account details.

Cloudflare, Inc. (Turnstile), which protects our sign-in and contact forms against spam and bots. It receives your IP address and browser and device details to tell people from automated traffic.

Google LLC (Google Fonts), which serves the typefaces used on our pages. Your browser requests fonts directly from Google, which receives your IP address and browser details.

Professional advisers (legal, accounting) where reasonably required, and public authorities where we are legally obliged to disclose.

We do not sell your personal information and we do not share it for cross-context behavioral advertising.

Retention

Account and study data are retained while your account is active, and support records are kept for as long as needed to answer your requests. We don't currently enforce automated deletion timeframes for account, study, or support data. You can request removal of your data at any time by contacting Support, and we will act on that request manually. Transaction and tax records are retained for the period required by law (generally 7 years). If an order is refunded, we retain the associated diagnostic reports, score history, and refund record in a frozen read-only archive on the legal basis of our legitimate interest in preventing repeat abuse of free diagnostic reports and in maintaining accurate financial records. We also keep limited records, such as hashed invite receipts and request logs, to prevent fraud and abuse of one-time offers. When a deletion request is fulfilled, that frozen read-only archive for a refunded order is retained and is not removed by the request.

Your rights

You may request access to your personal information, correction of inaccuracies, deletion of your account and study history, restriction of or objection to processing, portability of the data you provided, and withdrawal of any consent you gave. Submit requests through Help & Support; we respond within 30 days (45 days for California requests). If you are in the UK or EEA you may also complain to your local supervisory authority.

International transfers

Our infrastructure and some service providers operate in the United States. Where personal data is transferred out of the UK or EEA, we rely on appropriate safeguards such as the UK/EU Standard Contractual Clauses or an applicable adequacy decision.

Security

We apply appropriate technical and organizational measures, including encryption in transit and at rest, row-level database access controls scoped to your own user account, least-privilege administrative roles, audit logging of privileged actions, and rate limiting with bot protection on authentication endpoints.

Cookies and local storage

We use strictly necessary cookies and browser storage to keep you signed in, remember accessibility preferences (font scale, voice and tone), and protect forms against automated abuse. We do not use advertising cookies. Analytics is limited to aggregate, de-identified product usage. You can clear or block cookies in your browser, though sign-in will not work without the essential ones.

Children

ACE Prep Hub is intended for adult CFP® candidates and is not directed at children under 16. We do not knowingly collect their personal information.

Purchase guarantees

Full terms are published on our Refund Policy and Terms of Use pages.