Privacy Policy

We collect the following categories of information:

• Account information: name, email address, password, and career goal preferences you provide when registering.
• Usage data: course progress, quiz results, exam attempts, certificates earned, and interactions with career tools (Resume Builder, Mock Interview, Case Study Lab, SAR Narrative Writer, Community).
• User-submitted content: resumes, interview answers, community posts and comments, and other content you voluntarily submit.
• Payment information: billing details processed by our third-party payment processor. We do not store full payment card numbers on our servers.
• Device and technical data: IP address, browser type, device identifiers, and log data collected automatically.
• Cookies and tracking data: as described in Section 3 below.

We use the information we collect to:

• Provide, operate, and maintain the Service, including course delivery, progress tracking, and certification.
• Process subscription payments and manage your account.
• Personalize your learning experience and career recommendations.
• Communicate with you about your account, updates, and support requests.
• Send marketing communications where permitted, always with an option to opt out.
• Detect, prevent, and address fraud, security issues, and technical problems.
• Comply with legal obligations and enforce our Terms of Service.

We use cookies, local storage, and similar tracking technologies to operate the Service, remember your preferences, keep you signed in, and understand how the Service is used. Some cookies are essential to the Service's operation; others are used for analytics.

Where required by law (including under the ePrivacy rules applicable to EU/UK users), we will request your consent before placing non-essential cookies. You can control cookies through your browser settings, though disabling certain cookies may affect Service functionality.

We design our privacy practices to comply with applicable laws, including:

• U.S. Federal Law: the Children's Online Privacy Protection Act (COPPA) — our Service is not directed at children under 13, and we do not knowingly collect personal information from children under 13; and the CAN-SPAM Act, which governs our commercial email communications, including honoring unsubscribe requests promptly.
• California: the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).
• Virginia: the Virginia Consumer Data Protection Act (VCDPA).
• Colorado: the Colorado Privacy Act (CPA).
• Connecticut: the Connecticut Data Privacy Act (CTDPA).
• Texas: the Texas Data Privacy and Security Act (TDPSA).
• Other U.S. states: we monitor and comply with additional state consumer privacy laws as they take effect (including in Utah, Oregon, Montana, and other states with comprehensive privacy statutes).
• European Union / United Kingdom: the General Data Protection Regulation (GDPR) and UK GDPR, where we act as a data controller for personal data of users located in the EU/UK.
• Canada: the Personal Information Protection and Electronic Documents Act (PIPEDA).
• Other jurisdictions: we take reasonable steps to comply with applicable international data protection laws relevant to our users.

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete personal information.
• Delete your personal information, subject to certain legal exceptions.
• Opt out of the sale or sharing of personal information and of targeted advertising (as applicable under CCPA/CPRA and similar state laws).
• Restrict or object to certain processing of your data (GDPR/UK GDPR).
• Data portability — receive a copy of your data in a portable format.
• Withdraw consent at any time where processing is based on consent.
• Non-discrimination — we will not deny you services or charge different prices for exercising your privacy rights.

To exercise any of these rights, contact us using the information in Section 9. We will verify your identity before fulfilling your request and will respond within the timeframe required by applicable law. Authorized agents may submit requests on your behalf where permitted.

We do not sell your personal information. We may share information with:

• Service providers who perform functions on our behalf, such as payment processing, hosting, analytics, and email delivery, under contractual confidentiality and data protection obligations.
• Legal and safety authorities when required to comply with law, respond to legal process, or protect the rights, property, or safety of AML Paths, our users, or others.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.
• With your consent — for any other purpose disclosed to you at the time of collection.

We retain personal information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we securely delete or anonymize it.

We implement administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, or destruction, including encryption in transit, access controls, and regular security reviews. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries. Where required, we rely on appropriate safeguards — such as Standard Contractual Clauses for EU/UK transfers — to ensure your information receives an adequate level of protection.

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or want to file a complaint, please contact us at:

AML Paths, LLC
Email: privacy@amlpaths.com

You can also reach us through our Contact Us form.

EU/UK users may also have the right to lodge a complaint with their local data protection authority. California residents may contact the California Attorney General's office regarding CCPA/CPRA rights.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy on this page with a revised "Last updated" date, and where required by law, we will provide additional notice or obtain your consent.