Privacy Policy

1. Information we collect

We collect only what we need to run the course and mail your certificate:

• Account information — your name and email address, provided through Google sign-in.
• Certificate mailing details — full legal name and mailing address (street, city, state, ZIP) you enter when requesting your DL 400C certificate.
• Course activity — lessons completed, quiz and practice-test answers and scores, simulations completed, points/levels, and last-activity timestamps.
• Payment information — processed by our payment providers. We store only a payment reference (a Stripe customer ID or a Coinbase charge ID), never your full card number or wallet keys.
• Technical data — basic, privacy-friendly analytics (page views, device/browser type, approximate region) and security logs.

2. How we use it

• To deliver the course, save your progress, and issue and mail your certificate.
• To process your one-time payment and prevent fraud.
• To send essential account email (welcome, completion, and optional progress reminders).
• To maintain, secure, and improve the service.

We do not sell your personal information, and we do not show third-party advertising.

3. Service providers we share data with

We share limited data only with vendors that help us operate, each under their own privacy terms:

• Google — sign-in / authentication.
• Stripe and Coinbase Commerce — payment processing.
• Resend — transactional email delivery.
• Vercel — hosting and privacy-friendly analytics.

4. Children's privacy (COPPA)

Our course is intended for California teens preparing for an instruction permit, and a parent or guardian is expected to set up payment. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you are under 18, please use OnDeckDriving with a parent or guardian's involvement.

A parent or guardian may review their child's information, request that we delete it, or refuse further collection by emailing help@ondeckdriving.com. If we learn we have collected data from a child under 13 without the required consent, we will delete it.

5. Your California privacy rights (CCPA/CPRA)

California residents may request access to the personal information we hold about them, request deletion, and correct inaccurate information. We will not discriminate against you for exercising these rights. Because we do not sell or share personal information for cross-context behavioral advertising, no "Do Not Sell" action is required — but you may still contact us with any request.

6. Data retention & deletion

We keep your account and course records while your account is active and as needed to prove course completion and meet legal/recordkeeping obligations. You can request deletion of your account and associated personal data at any time by emailing help@ondeckdriving.com; we will delete data we are not required to retain.

7. Security

We use industry-standard measures (encryption in transit, access controls, and reputable processors) to protect your information. No method of transmission or storage is 100% secure, but we work to protect your data and limit what we collect.

8. Changes to this policy

We may update this policy as the service evolves. We will revise the "Last updated" date above and, for material changes, provide additional notice where appropriate.