Last updated: October 27, 2026
Privacy Policy
This Privacy Policy explains what information PassNETA LLC ("PassNETA," "we," "us") collects when you use passneta.co (the "Service"), how we use it, and the choices you have. It is part of our Terms of Service.
1. Information we collect
Account information. Your email address, name or username, password (stored hashed by our authentication provider), and, if you sign in with Google, the basic profile details Google shares.
Profile information. Your target NETA level and exam date, and, only if you choose to provide them, your company, job title, years of experience, whether your employer is paying for your prep, and your self-reported exam result.
Study activity. Each question you answer (which choice, whether it was correct, and how long you spent on it), roadmap progress, exam simulation results, and bookmarks. We measure active study time only while the app is open, visible, and in use — time spent idle or in a background tab is not counted. We also record the general type of device (phone, tablet, or computer) and a small set of product events, such as viewing the pricing page or opening an explanation.
Payment information. Payments are processed by Stripe. We receive your plan, payment status, and amount paid; we never see or store your full card number. If you start a free trial, we keep Stripe's card fingerprint (a code that identifies a card without revealing its number) and a one-way hash of your email address so each person gets only one free trial.
2. How we use it
To provide the Service; to personalize your study experience (for example, highlighting your weakest topics); to improve our questions, explanations, and readiness estimates; to process billing; to respond to support requests; to keep the Service secure; and, as described below, to tell individuals and their employers about team and company plans.
3. Team and company plan outreach
We may contact you about team or company plans based on how you use the Service and the domain of your email address. We only send this kind of outreach if you have opted in (Settings → Work & Company → "PassNETA may contact me about team or company plans"), or if you or your company contacted us about a team plan. You can withdraw consent at any time by unchecking that box or replying to any such message.
If you join a company plan, your employer's administrator may see your participation and progress (for example, study time, topics covered, and readiness), but not your individual answers unless you agree. We will tell you what is shared before you join.
4. How we share information
We do not sell your personal information for money. We share it with service providers that process it on our behalf: Supabase (database and authentication), Vercel (hosting), Stripe (payments), and Resend (account emails). If you accept advertising cookies, we also use the Meta Pixel (Meta Platforms, Inc.), the Google Ads tag (Google LLC), the LinkedIn Insight Tag (LinkedIn Corporation) and OpenAI's ads measurement pixel (OpenAI, for ads shown in ChatGPT) to measure our ads — see section 5. Under some state laws (for example California's), this can count as "sharing" personal information for cross-context behavioral advertising; you can opt out at any time (section 7). We use Anthropic's AI models to write question content and explanations; your personal information and answers are not sent to them. We may also disclose information when required by law or to protect the rights and safety of our users or the Service.
5. Cookies and local storage
We use cookies to keep you signed in, to remember your time zone and cookie choices, and to remember which ad or campaign link first brought you to PassNETA (campaign tags such as utm_source, and — only if you accept advertising cookies — the ad click ID). That "how you found us" record is saved with your account when you sign up, kept by us, and not shared. We also use your browser's local storage to remember preferences such as light or dark mode and your current study session.
Advertising cookies (Meta Pixel, Google Ads tag, LinkedIn Insight Tag and OpenAI ads pixel). Only if you click "Accept" on our cookie banner, our public pages (home, pricing, sign-up) load the Meta Pixel, the Google Ads tag and OpenAI's ads measurement pixel, and send LinkedIn's Insight Tag as a single image request (LinkedIn's tracking script is never loaded). They tell Meta, Google, LinkedIn and OpenAI that you visited those pages and, later, that you created an account or bought a plan (with the plan and price). Meta, Google and LinkedIn may link this to your Meta, Google or LinkedIn account; Google, LinkedIn and OpenAI use a click reference from their ad links (kept in a cookie) to tell which ad you came from. They use this to measure and improve our ads. We never send your answers, study data, email address, or the pages inside the app. If you decline, or your browser sends a Global Privacy Control signal, none of them loads; withdrawing consent later deletes their ad cookies. You can also control how these companies use your activity for ads in your Meta ad preferences, Google My Ad Center and LinkedIn advertising settings.
6. Retention
We keep your account and study history while your account is active so your progress and study plan stay accurate. When you delete your account (Settings → Delete account), your profile, answers, study activity, and exam results are deleted. Billing records may be kept by Stripe and by us as required for tax and accounting. The free-trial card fingerprint and email hash are kept after account deletion so a deleted account can't start a new trial; they don't contain your card number or a readable email address.
7. Your choices and rights
You can change your advertising-cookie choice at any time with "Your privacy choices" at the bottom of any page (or below), and we honor Global Privacy Control as an opt-out of sharing.
You can view and update your profile in Settings, withdraw sales-contact consent at any time, and delete your account. You may also request a copy of your data or ask us to correct or delete it by emailing support@passneta.co. We respond within 30 days. Depending on where you live, you may have additional rights under state law; we will not discriminate against you for exercising them.
8. Children
The Service is intended for working professionals and is not directed to children under 16. We do not knowingly collect information from children.
9. Security
Data is encrypted in transit, access to your data is restricted to your own account by database security rules, and administrative access is limited. No system is perfectly secure, but we work to protect your information.
10. Changes and contact
We may update this policy. We will post the new version here with a new "Last updated" date and, for material changes, notify you by email or in the app. Questions: support@passneta.co, or PassNETA LLC, c/o Northwest Registered Agent LLC, 4539 N 22nd St Ste N, Phoenix, AZ 85016, USA.