Privacy Policy
How we collect, use, and protect your information.
Last updated: July 5, 2026
Introduction
Vigilant IQ, LLC ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our services.
Information We Collect
We may collect the following types of information:
- Account Information: Name, email address, and credentials when you create an account. If you access Vigilant IQ through an educational program, we also collect your role and program affiliation.
- Usage Data: Information about how you interact with our platform, including study progress, performance metrics, question responses, and platform activity to improve our services.
- Payment Information: Billing details processed securely through our payment providers. We do not store your full payment card details.
- Communications: Messages you send to us through our contact forms or support channels.
We do not request or knowingly collect protected health information, social security numbers, financial account numbers, or government identification numbers. Please do not enter this information anywhere on the platform.
How We Use Your Information
We use your information to:
- Provide and improve our educational services
- Track your learning progress and generate performance reports
- Process payments and manage your purchases
- Send important updates about your account or our services
- Respond to your inquiries and provide customer support
- Issue CME certificates and maintain educational records
- Maintain the security and integrity of our platform
We Do Not Sell Your Data
We do not sell or rent your personal information to anyone. We do not use your personal information for targeted advertising, and we do not disclose it to third parties for their marketing purposes.
De-identified and Aggregated Data
We may create and use de-identified or aggregated data derived from platform usage, such as question-level statistics, overall performance trends, and content analytics. We use this data to improve question quality, develop new content, benchmark performance, and support research and reporting about our platform. De-identified data has personal information removed so it cannot reasonably be used to identify you. If we ever share de-identified data with a third party, we prohibit them from attempting to re-identify it.
Information Sharing
If you are part of an educational program or cohort through Vigilant IQ, your program administrator may have access to certain performance data, such as mock exam scores and quiz progress for NCCAA exam preparation. This helps administrators track group progress and provide support. CME course progress is not shared with program administrators.
We may also share information with the service providers listed under Third-Party Services below, as required by law or legal process, or with your consent.
Students in Institutional Programs (FERPA)
If your access is provided through a partnership between Vigilant IQ and your educational program, some of your data may be considered part of your education records under the Family Educational Rights and Privacy Act (FERPA). In that case, we act as a "school official" for your institution: we use your data only to provide and support the platform for your program's educational purposes, we remain under your institution's control with respect to that data, and our handling of it is governed by our written agreement with your institution in addition to this policy. If you have questions about your FERPA rights, contact your program; we will direct any FERPA requests we receive to your institution so they can verify your identity and manage the request.
Data Security
We maintain safeguards designed to protect your personal information, including encryption of data in transit, access controls and role-based permissions, secure hosting infrastructure provided by trusted cloud providers, regular backups, and security monitoring. No system is completely secure, but we work to protect your data using measures appropriate to the information we handle.
Data Retention and Deletion
We retain your personal data for as long as necessary to provide our services and comply with legal obligations. CME records and certificates are retained as required by accreditation standards.
You may reset your learning progress at any time through your account settings, which allows you to start fresh. However, historical records are retained for compliance and analytical purposes. If you wish to request deletion of your account and associated data, please contact us. We will complete verified deletion requests within 30 days, except where retention is required by law, accreditation standards, or legitimate business needs such as fraud prevention and dispute resolution.
If your access is provided through an educational program, your institution may also request return or deletion of program data under our agreement with them.
Your Rights
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data (subject to legal requirements)
- Opt out of marketing communications
Cookies
We use cookies and similar technologies to enhance your experience, analyze usage patterns, and remember your preferences. You can manage cookie settings in your browser.
Third-Party Services
We use the following service providers that may process your information as part of operating the platform:
- Railway: Application hosting and database infrastructure.
- Cloudflare R2: Encrypted backup storage.
- Stripe: Our payment processor handles all payment transactions securely. View Stripe's privacy policy.
- Resend: Delivery of account, program invitation, and service emails.
- Google Workspace: Business email and customer support communications.
- Plausible Analytics: We use Plausible for privacy-focused analytics on our marketing website. Plausible does not use cookies and does not track you across websites. View Plausible's privacy policy.
- Sentry: We use Sentry for error tracking and performance monitoring to improve platform stability. View Sentry's privacy policy.
Each provider is bound by confidentiality and data protection obligations appropriate to the data it processes. Institutions may request a current list of our service providers by contacting us.
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. For institutional programs, our data protection commitments to your institution are set by written agreement and are not reduced by updates to this policy.
Contact Us
If you have questions about this privacy policy or our data practices, please contact us at our contact page.