Privacy Policy

1. Information We Collect

Personal Information You Provide

When you create an account, subscribe, complete onboarding, or contact us, you may provide personal information such as your name, email address, target exam date, weekly study hours, CFA exam level, study preferences, support messages, and other information you choose to provide.

Study and Performance Data

As you use the Service, we collect information related to your study activity, including diagnostic test results, practice question responses, accuracy scores, readiness scores, topic mastery, study plan progress, completion data, AI tutor conversation content, session timestamps, and session duration.

Payment Information

Payment processing is handled by Stripe, Inc. We do not store your full credit card number, bank account details, or other complete payment credentials on our servers. We may receive payment status, subscription status, billing contact details, transaction identifiers, and limited payment metadata from Stripe so we can manage your subscription.

Automatically Collected Information

We may collect technical and usage information such as device type, browser type, IP address, pages visited, referral source, feature usage, session events, approximate location derived from IP address, and usage patterns through analytics and logging tools.

Information You Should Not Submit

You should not submit sensitive personal information, financial account information, government identification numbers, confidential employer information, official CFA Institute curriculum materials, or copyrighted third-party prep provider materials into the AI tutor or other areas of the Service unless you have the legal right to do so.

2. How We Use Your Information

We use personal information to provide, maintain, personalize, secure, and improve the Service; create and adapt personalized study plans; power the AI tutor using relevant study context; track readiness scores and topic mastery; process subscriptions and billing through Stripe; provide customer support; send important service, account, billing, security, and policy communications; analyze usage patterns and product performance; prevent misuse, fraud, and security incidents; enforce our Terms and Conditions; comply with legal obligations; and develop new features and product improvements.

3. Third-Party Services and Processors

We use third-party service providers to operate the Service. These providers may process personal information on our behalf and are subject to their own privacy policies and contractual obligations.

• Supabase — Database hosting, account authentication, and storage of account, study, and product data.
• Anthropic / Claude API — AI tutoring responses. When you interact with the Charter Tutor, your questions and relevant study context may be sent to Anthropic to generate responses.
• Stripe — Payment processing and subscription management. Stripe handles payment credentials and financial transaction processing.
• PostHog — Product analytics and usage insights to help us understand how users interact with the Service and improve the product experience.

4. AI Tutor and Conversation Data

The AI tutor is designed to support CFA Level I study. AI tutor conversations may be processed by third-party artificial intelligence providers to generate responses and may be stored by Charter to provide study history, improve product quality, troubleshoot issues, and enhance safety and reliability. You should avoid sharing sensitive personal information or confidential third-party information in AI tutor conversations.

5. Consent and Your Choices

We collect, use, and disclose personal information with your consent, except where otherwise permitted or required by law. Your consent may be express or implied depending on the circumstances and the sensitivity of the information. You may withdraw consent by contacting us, subject to legal or contractual restrictions. If you withdraw consent for information required to provide the Service, we may no longer be able to provide some or all features.

6. Data Retention

We retain personal information and study data for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, enforce agreements, prevent misuse, and maintain business records. If you request account deletion, we will delete or anonymize personal information within 30 days, except where retention is required or permitted by law. Aggregated or anonymized data that does not identify you may be retained indefinitely for analytics, research, and product improvement.

7. Your Rights

Subject to applicable law, including Canadian privacy law such as the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your account and personal data
• Withdraw consent for certain processing
• Ask questions about our privacy practices
• Lodge a complaint with the Office of the Privacy Commissioner of Canada or an applicable provincial regulator

To exercise your rights, contact us using the details below.

8. Data Security

We use reasonable technical, organizational, and administrative safeguards designed to protect personal information, including encryption in transit, secure authentication, access controls, and restricted access based on business need. However, no method of transmission or electronic storage is completely secure. We cannot guarantee absolute security.

9. Security Incidents

If we become aware of a security incident involving personal information, we will assess the incident and notify affected users, regulators, or other parties where required by applicable law.

10. Cookies and Tracking Technologies

The Service uses essential cookies and similar technologies for authentication, account security, session management, and core functionality. We may also use analytics cookies or similar technologies through tools such as PostHog to understand usage patterns and improve the product experience. You can control cookie preferences through your browser settings, but disabling essential cookies may affect Service functionality.

11. Children and Minimum Age

The Service is intended for users who are at least 18 years old. We do not knowingly collect personal information from children or individuals under 18. If we become aware that we have collected personal information from a user under 18, we will take reasonable steps to delete it promptly.

12. International Data Transfers

Your personal information may be processed and stored outside Canada, including in the United States or other jurisdictions where our third-party service providers operate. While outside Canada, your information may be subject to the laws of those jurisdictions, including lawful access by courts, law enforcement, national security, or government authorities. We use contractual and other safeguards designed to protect personal information handled by service providers.

13. Business Transfers

If Charter or Nexseen Media Inc. is involved in a merger, acquisition, financing, corporate reorganization, sale of assets, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law and appropriate safeguards.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy on the Service, updating the Effective Date, or using another reasonable method. Your continued use of the Service after changes take effect means you accept the updated Privacy Policy.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at: