Privacy Policy
Effective date: August 18, 2026. Short, specific, and honest about exactly what is stored.
1. Who we are
VerbatimPrep is operated by JeLe Ventures LLC, a Florida limited liability company. This policy covers verbatimprep.com and the VerbatimPrep training application.
Questions, requests, or complaints: jeff@verbatimprep.com.
2. The short version
We collect the minimum needed to run a training account: your email address, a password we store only in scrambled form, your name if you choose to give one, and the practice work you do here.
We do not sell your information. We do not run advertising trackers. We do not follow you around the internet. There is exactly one cookie and it does nothing but keep you logged in.
3. What we collect
| What | Why we have it | Where it comes from |
|---|---|---|
| Email address | Your account identity, logging in, password resets, billing and renewal notices | You, at signup |
| Password | Logging you in. Stored only as a bcrypt hash. We cannot read it, and we cannot tell you what it is | You, at signup |
| Display name (optional) | Greeting you by name on the dashboard | You, if you give one |
| Practice session data: which passage, the transcript you submitted, accuracy score, error counts and error types, elapsed time, whether it was an exam simulation, and timestamps | Scoring your work, drawing your progress charts, keeping your history | Generated when you practice |
| Notes you type on a session | Shown back to you in your history. This is a free-text box, so whatever you type is what we store | You |
| Session cookie | Keeping you logged in between pages | Set by us in your browser |
| Your browser's user-agent string | Recorded with each login session so you can tell your devices apart and so we can spot a session that looks wrong | Your browser |
| IP address of failed login attempts | Blocking password guessing. Cleared when you successfully log in | Your internet connection |
| Stripe customer identifier | Connecting your account to your subscription. It is an identifier, not a card number | Stripe, if you subscribe |
| Emails you send us | Answering you | You |
What we do not collect: phone numbers, mailing addresses, dates of birth, government identification, payment card numbers, precise location, biometric data, or your contacts.
What we do not use: analytics pixels, advertising tags, session replay tools, social media widgets, or any third-party tracker. As of the effective date above, there are none on this site.
4. Payments
Payments are handled by Stripe. When you subscribe, you enter your card details with Stripe, not with us. We never see or store your full card number.
What comes back to us is a customer identifier, which plan you are on, when it expires, and whether a payment succeeded. Stripe's own privacy policy governs how Stripe handles your payment information.
5. Cookies
One cookie: vp_session.
It holds a random string with no meaning outside our database. It is not a tracking identifier, and it does not contain your email, your name, or anything about you. It is marked HttpOnly, so scripts in your browser cannot read it, and Secure in production, so it only travels over an encrypted connection. It expires after 30 days of inactivity, and logging out deletes it.
We use no advertising cookies, no analytics cookies, and no third-party cookies.
6. Who we share information with
We do not sell, rent, or trade your personal information. We never have and we have no plans to.
We share only with the providers who run the service for us, under contract, and only what each one needs to do its job:
| Provider | What it does | What it sees |
|---|---|---|
| Stripe | Payment processing | Your payment details and billing email |
| Railway | Cloud hosting and the database | Everything stored, as the hosting provider |
| Our email delivery provider | Sending password resets, billing notices, and renewal reminders | Your email address and the message |
| Cloudflare | Domain and network routing | Traffic metadata, including IP addresses in transit |
Beyond those, we may disclose information only when:
- the law requires it, such as a subpoena, court order, or other lawful demand,
- we need to protect our legal rights or someone's safety, or
- the business is sold or merged, in which case the buyer is bound by this policy or gives you notice and a chance to delete your account first.
Your transcripts are never shared with other users, never sold, and never given to advertisers. We may compute anonymous, aggregated statistics from practice data, such as which error type is most common at 180 WPM. Aggregated means no names, no email addresses, and nothing that identifies you.
7. How long we keep things
- Your account and practice history: as long as your account is open. Your progress dashboard is the product, and it needs the history.
- Login sessions: they expire after 30 days of inactivity, and logging out ends them immediately.
- Failed login records: deleted the moment you successfully log in. If an email address is never used to log in successfully, its failed-attempt records may remain in our database. We are working to purge those automatically.
- After you ask us to delete your account: removed from live systems within 30 days, and from routine backups as those backups age out.
- Records we have to keep: payment and tax records are kept as long as the law requires, regardless of account deletion.
8. Your choices, and how to use them
You do not need a reason, and we do not charge for any of this.
- See your data. Your progress dashboard shows your full practice history. For a complete copy of everything we hold, email jeff@verbatimprep.com.
- Correct your data. Change your display name or email address in your account settings, or email us and we will do it.
- Delete your account and your data. Email jeff@verbatimprep.com from your account address with the subject "Delete my account." We confirm, and we delete within 30 days. Deletion is permanent. Your practice history, scores, and transcripts are gone and cannot be restored. If you want a copy, ask for it before you ask for deletion.
- Stop marketing email. Every marketing email has an unsubscribe link. We honor it within 10 business days. You will still get transactional email about your account, your password, and your billing while you have an account, because that is not marketing.
We verify these requests by requiring them to come from the email address on the account. If you cannot access that address, email us and we will find another way to confirm it is you.
9. Do Not Track signals
Some browsers can send a "Do Not Track" signal. There is still no common industry standard for what a website must do when it gets one.
We do not track you across other websites at all, so there is nothing for the signal to switch off, and we do not change what we do when we receive one. The same is true of Global Privacy Control signals. If we ever start doing anything that a Do Not Track signal would be relevant to, we will update this section and tell account holders first.
10. Third-party tracking across websites
No. We do not permit third parties to collect personal information about your activity on verbatimprep.com over time and across other websites.
There are no advertising networks, no social media widgets, no analytics beacons, and no data brokers embedded in this site. If that ever changes, this section changes with it and we will notify account holders before it takes effect.
11. Marketing email
If you sign up for our list, our marketing emails will identify who sent them, tell you clearly how to unsubscribe, carry our physical postal address, and honor your unsubscribe promptly. We do not buy email lists and we do not send unsolicited commercial email.
Email about your account, your password, your billing, and your renewals is transactional and continues for as long as you have an account.
12. Children
VerbatimPrep is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13.
If you believe a child under 13 has given us information, email jeff@verbatimprep.com and we will delete it and close the account.
If you are 13 to 17, a parent or legal guardian must hold the account and agree to our Terms of Service on your behalf.
13. Security
- Passwords are stored as bcrypt hashes at cost factor 12, never as readable text. If our database were stolen, your password would not be in it.
- Session tokens are stored only as SHA-256 hashes. The usable token exists only in your browser cookie.
- All traffic runs over HTTPS.
- Five failed login attempts locks the account for 15 minutes.
No system is perfectly secure, and we are not going to claim otherwise. If you reuse passwords across sites, please stop, here and everywhere.
14. If there is a data breach
If personal information is exposed in a breach, we will notify the people affected, and any regulator we are required to notify, as required by section 501.171, Florida Statutes, and by any other law that applies where you live. We will tell you what happened, what information was involved, and what to do about it.
15. Where your data lives
Our servers are in the United States.
If you use VerbatimPrep from outside the United States, your information is transferred to and processed in the United States, where privacy laws are different from the ones where you live, and where authorities may have access rights your own country does not give. Use the site only if that is acceptable to you.
Wherever you are, you can ask us for a copy of your data, ask us to correct it, and ask us to delete it, using section 8. We apply those rights to everyone, not only to people in places that require them.
16. Changes to this policy
If we make a material change to this policy, we will email account holders at the address on file at least 14 days before it takes effect, and we will update the effective date at the top of this page.
Non-material changes, such as fixing a typo or naming a new hosting provider, take effect when they are posted, and the effective date changes so you can tell which version you are reading.
17. Contact
JeLe Ventures LLC
jeff@verbatimprep.com