Privacy Policy

DMV Private Prep collects only the minimum information necessary to provide our services. When you create an account, we collect your name and email address. If you purchase a subscription, payment processing is handled entirely by Stripe — we never see or store your full credit card number.

We do not collect demographic information about your child beyond what is voluntarily provided during the school matching process. Any preferences you share (such as location, school type, or religious affiliation) are used solely to personalize your school recommendations.

When you upload a transcript or report card, the file is transmitted securely over HTTPS to our processing server. Our AI model extracts the relevant academic information (such as GPA, course rigor, and grades) in real time to generate your personalized school list and admission odds.

The uploaded file is never written to disk, never stored in a database, and never retained after processing is complete. Once your results are generated, the original file data is immediately discarded from memory. There is no way for us — or anyone else — to retrieve your child's transcript after the session ends.

The admission odds and school recommendations we generate are based on aggregated, publicly available school data (such as published acceptance rates, enrollment statistics, and academic profiles). Your child's individual transcript data is never incorporated into our models or datasets.

We implement industry-standard security measures to protect your account information. All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security). User accounts are protected with hashed passwords, and we support secure authentication through Google OAuth.

Our infrastructure is hosted on reputable cloud providers with SOC 2 compliance. We regularly review our security practices and limit access to user data to authorized personnel only.

We use a limited number of third-party services to operate our platform:

• Stripefor payment processing. Stripe's privacy policy governs how your payment information is handled.
• Supabase for user authentication and account management. Only your email and hashed password are stored.
• OpenAI / AI Providers for transcript analysis and Private School Advisor features. We send only the extracted text necessary for processing — never the original uploaded file. Our AI provider agreements prohibit the use of our data for model training.

We do not sell, rent, or share your personal information with advertisers, data brokers, or any other third parties. We do not participate in data marketplaces or advertising networks.

We use essential cookies to maintain your login session and remember your preferences. These are strictly necessary for the platform to function and cannot be disabled.

We may use privacy-respecting analytics (such as Plausible or similar) to understand how families use our platform so we can improve the experience. These tools do not use cookies, do not track you across websites, and do not collect personally identifiable information.

We do not use tracking pixels, retargeting cookies, or any form of cross-site tracking.

DMV Private Prep is designed to be used by parents and guardians on behalf of their children. We do not knowingly collect personal information directly from children under the age of 13.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately and we will take steps to remove that information from our systems.

We may update this privacy policy from time to time to reflect changes in our practices or for legal and regulatory reasons. If we make material changes, we will notify you by email or by posting a prominent notice on our platform prior to the change becoming effective.

If you have any questions about this privacy policy, your personal data, or our privacy practices, please contact us at:

Email: hello@dmvprivateprep.com

We aim to respond to all privacy-related inquiries within 48 hours.