Last updated: February 13, 2026
We collect information you provide directly:
If you subscribe to our newsletter, we collect your email address only. We use it to send you ICC exam tips, study strategies, and occasional product updates. We do not share your email address with third parties for their own marketing purposes.
You can unsubscribe at any time by clicking the “Unsubscribe” link included in every newsletter email, or by contacting us at support@buildingcodeacademy.org. Upon unsubscribing, your email address is deleted from our newsletter subscriber list immediately.
We do not sell your personal information. We share data only with the following service providers:
We use industry-standard security measures including encrypted connections (HTTPS), secure authentication, and access controls to protect your data.
We use two categories of cookies:
We do not use advertising, tracking, or third-party marketing cookies. All cookies are set with the Secure flag in production and SameSite=Lax to prevent cross-site request forgery.
You can exercise all of the following rights directly from your Account Settings page — no need to contact us:
California residents (CCPA): We do not sell your personal information. You have the right to know what data we collect, request a portable copy, and request deletion. You can do all of this from your Account Settings.
EU residents (GDPR): You have rights to access, rectification, erasure, data portability, and to object to processing. All of these can be exercised from your Account Settings. For any rights you cannot exercise through self-service, contact support@buildingcodeacademy.org.
We retain your account data for as long as your account is active. Upon account deletion, we remove your personal data within 30 days, except where required by law (e.g., payment records may be retained for up to 7 years for tax and audit purposes). Backups containing deleted data are purged within 90 days.
Our service providers (Stripe, Supabase, Vercel, Google) may process your data outside your home country, including in the United States. These providers maintain appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission to protect data transferred internationally. By using our Service, you acknowledge that your data may be transferred to and processed in the United States and other jurisdictions.
In the event of a data breach affecting your personal information, we will notify affected users within 72 hours of becoming aware of the breach, as required by applicable law (including GDPR Article 33 and relevant U.S. state breach notification laws). Notification will be sent to the email address associated with your account and will include the nature of the breach, the data affected, steps we are taking, and recommended actions you can take to protect yourself.
CCPA/CPRA: California residents have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell your personal information. You can exercise all rights from your Account Settings.
Shine the Light (CA Civil Code § 1798.83): California residents may request information about the disclosure of personal data to third parties for direct marketing purposes. We do not share personal data with third parties for their own direct marketing purposes.
We may update this Privacy Policy periodically. We will notify subscribers of material changes via email.
Questions about this Privacy Policy? Contact us at support@buildingcodeacademy.org.