Privacy Policy

Classward, LLC | Effective Date: May 21st, 2026

This Privacy Policy describes the privacy practices of Classward, LLC, an Oregon limited liability company ("Classward," "we," "us," or "our") in connection with the websites, mobile applications, software, content, and online services we operate, including those marketed under the brand names EMTprep, EMT-CE, PharmRenew, PharmTechReview, PhlebCE, PhlebReview, CPRreview, MArenew, CMAreview, and EKGce, together with any other Classward brand or property now existing or hereafter created (collectively, the "Services"). It explains what personal information we collect, why we collect it, how we use and share it, how long we keep it, the choices you have, and the rights you may exercise under applicable privacy laws.

This Privacy Policy is incorporated into the Classward Terms and Conditions Agreement. By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy and the Terms and Conditions.

1. Personal Information We Collect

We collect personal information from and about you in the following categories:

1.1 Information You Provide to Us:

Account information: name, email address, password (stored in hashed form), and (where applicable) telephone number, postal address, date of birth, and professional credentials such as NREMT identification number or license number.
Profile information: information you choose to add to your student profile, such as employer, agency affiliation, license type and/or level, state, date of birth and CE history.
Payment information: when you purchase a Membership, we and/or our payment processor (Stripe, Apple, or Google) collect billing name, billing address, and payment method information. We do not store full credit-card numbers on our servers; payment-method data is tokenized and held by our payment processor.
Communications: the content of emails, support tickets, and other communications you send to us.
User Content: any content you submit to the Services, such as questions, comments, AI Feature inputs, and profile information.

1.2 Information Collected Automatically

Device and technical data: IP address, device identifiers, browser type and version, operating system, language preferences, time zone, and similar technical information.
Usage data: pages and content viewed, study activity, practice questions answered, course modules started and completed, time spent on the Services, login timestamps, certificates issued, and clickstream data.
Mobile application data: device identifiers, performance metrics, crash logs, push-notification tokens, and (where you grant permission) other device data.
Cookies and similar technologies: we use cookies, web beacons, pixels, local storage, and similar technologies to operate, secure, analyze, and improve the Services. Some cookies are essential for the Services to function; others help us understand how the Services are used.

1.3 Information from Third Parties

Payment processors: Stripe, Apple, and Google may share with us limited information about your payment, including transaction status, last four digits of the card, billing address (where used for AVS), and (in the event of a chargeback) information provided by your card issuer.
Accreditation bodies: CAPCE, the NABP, CDPH and other accrediting bodies, may share information with us about your reporting status or credit records to the extent necessary for us to deliver and report on accredited courses.
Authentication providers: if you sign in using a third-party authentication provider, we may receive information from that provider as you authorize.

1.4 AI Feature Data

Inputs: prompts, questions, study activity, and other inputs you submit to AI Features.
Outputs: AI-generated explanations, recommendations, and outputs delivered to you.
Interaction data: how you engage with AI Features, including ratings, follow-up questions, and feedback.

AI Feature data is not sold to third parties for advertising. AI Feature inputs and outputs may be processed by us and our trusted AI service providers solely to deliver, secure, evaluate, and improve the Services.

1.5 Sensitive Personal Information

Some information we collect, or that you may choose to provide, may be considered "sensitive" under applicable laws (for example, the California Consumer Privacy Act as amended by the California Privacy Rights Act, the "CCPA"). This may include: account login credentials, payment information, geolocation derived from IP, and (in some cases) information about professional licensure or credentialing. We do not use or disclose sensitive personal information for purposes other than those expressly permitted by the CCPA without offering you the right to limit such use (see Section 7).

2. Sources of the Information We Collect

We collect personal information from: (a) you directly, when you create an account, purchase a Membership, complete coursework, contact support, or otherwise interact with the Services; (b) your devices, when you use the Services; (c) our service providers (for example, payment processors and analytics providers); and (d) third-party accreditation bodies, such as CAPCE, NABP or CDPH.

3. How We Use Personal Information

We use personal information for the following business and commercial purposes:

Providing the Services: to register your account; deliver test-prep, CE, refresher, and other Services; report CE completions to CAPCE/NABP/CDPH; issue certificates; process payments and refunds; manage subscriptions; and provide customer support.
Personalization: to deliver personalized study recommendations, progress tracking, AI-generated explanations, and similar features.
Improvement and analytics: to analyze usage patterns, evaluate the effectiveness of our content, develop new features, and improve the Services and AI Features.
Security and fraud prevention: to detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms and Conditions.
Legal and regulatory compliance: to comply with applicable laws, regulations, court orders, subpoenas, and lawful requests by public authorities, including for purposes of CAPCE/NABP/CDPH reporting and for tax and financial-records compliance.
Dispute resolution: to investigate and respond to billing inquiries, refund requests, chargebacks, and disputes, including disclosure to banks, card networks, and payment processors as described in Section 21 of the Terms and Conditions.
Communications: to send transactional messages (receipts, renewal reminders, cancellation confirmations, support replies, security and policy notices), and, subject to your preferences, marketing or promotional messages from which you may opt out at any time.
Corporate transactions: in connection with a merger, acquisition, financing, reorganization, or sale of assets.

4. How We Share Personal Information

We do not sell your personal information for monetary consideration. We do not share your personal information for cross-context behavioral advertising as those terms are defined under the CCPA. We disclose personal information only as described below:

Service providers. We share personal information with vendors that perform services on our behalf, including hosting providers (e.g., AWS), payment processors (Stripe, Apple, Google), email and communications providers, analytics providers, customer-support tools, AI service providers, and identity-verification or fraud-prevention services. These providers are contractually required to protect personal information and to use it only for the purposes for which we share it.
Accreditation bodies. For CAPCE-accredited, APCE-accredited and CDPH-accredited courses, we report completion data to CAPCE, NABP CPE Monitor and the CDPH in accordance with the respective entities’ reporting requirements. The information reported may include the user's name, license identification number (if provided), date of birth (if provided), course identifiers, and completion dates
Banks, card issuers, payment processors, and card networks. In the event of a chargeback or payment dispute, we may disclose information about your account, your acceptance of our Terms and Conditions, your activity logs, course completions, and payment history as evidence of authorized purchase and delivery of Services, as further described in Section 21.4 of the Terms and Conditions.
Legal and safety disclosures. We may disclose personal information when we have a good-faith belief that disclosure is necessary to (a) comply with applicable laws, regulations, court orders, subpoenas, or lawful government requests; (b) enforce our Terms and Conditions, this Privacy Policy, or any other agreement; (c) detect, investigate, prevent, or respond to fraud, abuse, security incidents, or technical issues; or (d) protect the rights, property, or safety of Classward, our users, or others.
Corporate transactions. We may disclose personal information in connection with a merger, acquisition, financing, reorganization, or sale of all or a portion of our business or assets, subject to confidentiality obligations and applicable law.
With your consent. We may share information for any other purpose with your consent.

5. How Long We Keep Personal Information

We keep personal information for as long as needed to provide the Services and for the additional periods set forth below, unless a longer or shorter retention period is required or permitted by applicable law:

Account and membership records: for the duration of your Membership and for up to seven (7) years thereafter, for legal, tax, accounting, audit, and dispute-defense purposes.
Payment records: for seven (7) years to comply with financial, tax, and card-network record-keeping requirements.
Course completion and accreditation records: for the period required by CAPCE/NABP/CDPH or other accrediting bodies, plus seven (7) years, to support audit, recredentialing, and regulatory inquiries.
Study activity and AI Feature interactions: for the duration of your Membership and for up to twenty-four (24) months thereafter, unless deletion is requested earlier.
Email preferences and marketing-suppression records: until you opt out, withdraw consent, or request deletion (and thereafter only as needed to honor your opt-out).
Security, fraud, and dispute records: for as long as reasonably necessary to investigate, defend, or resolve a security incident, fraud claim, or dispute, including any limitations period plus a reasonable buffer.
Aggregated and de-identified data: indefinitely. We may use de-identified or aggregated data for research, analytics, and product improvement; such data does not identify you.

6. Security

We employ administrative, technical, and physical safeguards designed to protect personal information against accidental or unlawful loss, destruction, alteration, unauthorized disclosure, or access. Sensitive information transmitted online (such as payment information) is protected using SSL/TLS encryption. Internal access to personal information is limited to personnel who need it to perform their jobs. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for promptly notifying us at support@classward.com of any suspected unauthorized use of your account.

7. Your Privacy Rights

7.1 Rights of All Users

Regardless of where you reside, you may at any time:

Access your information by logging into your account or by contacting support@classward.com.
Correct or update inaccurate information by editing your profile or by contacting support@classward.com.
Request deletion of your account and associated personal information, subject to legal, tax, regulatory, and dispute-defense retention requirements (such as CAPCE-reported records, which generally cannot be deleted while reporting obligations remain in effect).
Opt out of marketing emails by clicking the "unsubscribe" link in any marketing email or by contacting support@classward.com. Even after opting out, we may continue to send you transactional and account-related communications (receipts, renewal reminders, cancellation confirmations, security alerts, and policy notices).

7.2 California Residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"), grants you the following rights, subject to certain exceptions:

Right to know. You may request that we disclose the categories and specific pieces of personal information we have collected about you in the preceding twelve (12) months, the categories of sources, the business or commercial purposes for collecting or sharing such information, and the categories of third parties to whom we have disclosed personal information.
Right to delete. You may request deletion of personal information we have collected from you, subject to enumerated exceptions (such as completing a transaction, complying with legal obligations, exercising legal claims, or detecting security incidents).
Right to correct. You may request that we correct inaccurate personal information we maintain about you.
Right to opt out of sale or sharing. As stated above, we do not sell your personal information for monetary consideration and do not share personal information for cross-context behavioral advertising. Accordingly, there is no "sale" or "sharing" within the meaning of the CCPA from which to opt out.
Right to limit use of sensitive personal information. You may direct us to limit our use of sensitive personal information to those purposes specified in CCPA Cal. Civ. Code § 1798.121(a). As stated above, we do not currently use sensitive personal information for purposes other than those expressly permitted, but you may submit a request as a precaution.
Right to non-discrimination. We will not discriminate against you for exercising any of these rights, although certain Services may not be available without certain personal information necessary to operate them.

To exercise these rights, contact us at support@classward.com or by mail at the address in Section 11. We will verify your identity before fulfilling certain requests, which may require you to provide information sufficient to confirm your identity. You may designate an authorized agent to make a request on your behalf, in which case we may require evidence of authorization. We will respond to verified requests within the timeframes required by applicable law.

7.3 Residents of the European Economic Area, United Kingdom, and Switzerland (GDPR / UK GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation, the United Kingdom GDPR, or the Swiss Federal Act on Data Protection, as applicable, grants you the following rights, subject to certain exceptions:

Right of access to personal data we process about you.
Right to rectification of inaccurate or incomplete personal data.
Right to erasure ("right to be forgotten") in certain circumstances.
Right to restriction of processing in certain circumstances.
Right to data portability for personal data you have provided to us, where processing is based on consent or contract and is carried out by automated means.
Right to object to processing based on legitimate interests, including for direct marketing purposes.
Right to withdraw consent for processing based on consent, without affecting the lawfulness of prior processing.
Right to lodge a complaint with a supervisory authority in your country of residence, place of work, or place of the alleged infringement.

Legal bases for processing: we process personal data on the bases of: (a) your consent (which you may withdraw); (b) the necessity of processing to perform a contract with you (such as providing the Services you have purchased); (c) compliance with our legal obligations; and (d) our legitimate interests in operating, securing, and improving the Services, where those interests are not overridden by your data-protection rights.

International transfers: Classward is established in the United States, and personal data we process is transferred to and stored in the United States. Where required by applicable law, we implement appropriate safeguards for such transfers, such as the European Commission's Standard Contractual Clauses or equivalent measures. You may request a copy of the safeguards in place by contacting support@classward.com.

7.4 Other U.S. State Residents

Residents of certain other U.S. states (including Virginia, Colorado, Connecticut, Utah, Oregon, Texas, and others as state laws come into effect) may have rights similar to those described above, including rights to access, correct, delete, and port personal information, and to opt out of certain processing. To exercise these rights, contact support@classward.com or use the contact information in Section 11.

8. Children's Privacy

The Services are intended for adults pursuing professional certifications and continuing education. We do not knowingly collect personal information from children under the age of thirteen (13). If we learn that we have collected personal information from a child under thirteen (13), we will delete that information promptly. Parents or legal guardians who believe that we have collected information from a child under thirteen (13) should contact support@classward.com. For users between thirteen (13) and seventeen (17) using the Services with parental or guardian consent, the parent or guardian may exercise the rights described in Section 7 on the user's behalf.

9. Cookies and Similar Technologies

We use cookies and similar technologies to operate the Services, remember your preferences, analyze usage, and improve your experience. Categories include:

Strictly necessary cookies (required for the Services to function, including authentication and security).
Performance and analytics cookies (to understand how the Services are used and to improve them).
Functionality cookies (to remember your preferences).

Most browsers allow you to manage cookies through your browser settings, including blocking some or all cookies. Disabling strictly necessary cookies may affect your ability to use parts of the Services. We do not currently respond to "Do Not Track" browser signals, as no consistent industry standard for such signals has been established. We honor Global Privacy Control (GPC) signals where required by applicable law.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email to active account holders at least thirty (30) days before they take effect, in accordance with Section 2 of the Terms and Conditions, and will be posted on the Services with an updated effective date. Non-material changes (such as clarifications and updates to contact information) take effect upon posting. Your continued use of the Services after the effective date of any change constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions, comments, requests, or complaints regarding this Privacy Policy or our privacy practices, please contact us:

Privacy Officer: support@classward.com

General Customer Support: support@classward.com

Mailing Address: Classward, LLC, Attn: Privacy Officer, 33848 SE Eastgate Cir, Corvallis, OR 97333, United States