Privacy Policy

1. Information We Collect

Information you provide

• Account and profile details: first and last name, email address, password, and, for certification, your bar number, licensing jurisdiction, and firm name.
• Responses you submit in the comprehension assessment and course evaluation.
• Messages you send us for support or other requests.

Payment information

Payments are processed by Stripe, Inc. Stripe collects and processes your payment card details directly; LEX ARCA receives a transaction confirmation, a Stripe customer or session identifier, and your billing email, but not your full card number.

Information collected automatically

• Course participation data: chapters started and completed, seconds of video watched, timestamps, quiz submissions and scores, and evaluation submissions.
• Attendance-verification events: each time you respond to a mid-lecture engagement check, we record the chapter, the playback timestamp, the date and time, your IP address, and your browser user-agent string. This is used to document active participation for MCLE compliance.
• Standard server and device log data generated when you access the Service.

Cookies and local storage

We use cookies and browser storage that are necessary to keep you signed in (provided through Supabase authentication) and to remember basic player preferences. We do not use third-party advertising cookies.

2. How We Use Information

• To provide the course and maintain your account and enrollment.
• To verify active attendance and completion in accordance with distance-learning MCLE standards.
• To generate, issue, and support verification of your Certificate of Completion.
• To process payments, refunds, and subscription billing through Stripe.
• To respond to your requests and provide support.
• To maintain the security and integrity of the Service and detect misuse.
• To comply with legal obligations and respond to state bar compliance audits.
• To improve course content and platform functionality.

3. How We Share Information

We do not sell your personal information. We share it only as follows:

• Service providers that operate the platform on our behalf: Supabase (authentication, database, and hosting), Stripe (payment processing), and our video content-delivery host. These providers may process your information only to provide services to us.
• State bars and regulatory bodies, when you submit your certificate for credit or when a licensing authority requests audit verification of your completion.
• Legal and safety purposes: to comply with law, enforce our Terms, or protect the rights, property, or safety of LEX ARCA, our users, or others.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.
• With your direction or consent.

4. Certificate Verification

Each certificate includes a verification code and cryptographic hash derived from your name, jurisdiction, and completion date. Anyone to whom you provide a certificate or code (such as your state bar) may use it to confirm the certificate’s authenticity. Do not share your certificate with parties you do not intend to have this information.

5. Data Retention

We retain attendance logs, engagement-check confirmations, assessment results, and certificate records for at least four (4) years to support MCLE compliance audits. Account and profile information is retained while your account is active and for a reasonable period afterward. Payment records are retained as required by tax and accounting law. When information is no longer needed, we delete or de-identify it.

6. Security

We use administrative, technical, and organizational safeguards designed to protect your information, including encryption in transit, access controls, and row-level database security. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Choices & Rights

• You can review and update your account and profile information at any time in the attorney portal.
• You may request access to, correction of, or deletion of your personal information by contacting us. Note that we may be required to retain certain completion and compliance records for the retention period described above even after an account is closed.
• Depending on your state of residence (for example, California), you may have additional rights to know, delete, correct, or limit the use of your personal information, and to be free from discrimination for exercising those rights. We honor verifiable requests as required by applicable law.
• You may opt out of non-essential email by using the unsubscribe link or contacting us; we will still send transactional messages about your account and certificate.

8. Additional Information

U.S. data storage. The Service is operated in the United States, and your information is processed and stored there.

Children. The Service is intended for legal professionals and is not directed to anyone under 18. We do not knowingly collect information from children.

Changes. We may update this Policy from time to time. Material changes will be posted here with a revised “Last Updated” date.

9. Contact

For privacy questions or to exercise your rights: legalvault@lex-arca.com.