Privacy Policy & Regulatory Disclosures
Effective Date: November 1, 2026 • Last Updated: November 7, 2026
🤖 Essential Disclosure: Artificial Intelligence (AI) Content Generation
All 886 practice questions, answer explanations, mock exam items, and diagnostic rationales on patentbarexam.app are generated and synthesized using Artificial Intelligence (AI) technology and cross-referenced against public domain USPTO materials (MPEP Ninth Edition, Rev. 01.2024 (Nov 2024), 35 U.S.C., and 37 C.F.R.). They are created for educational study drills and are not official USPTO exam items.
Government Non-Affiliation: patentbarexam.app is an independent educational platform operated privately. It is NOT affiliated with, sponsored by, endorsed by, or authorized by the United States Patent and Trademark Office (USPTO), the United States Department of Commerce, or Prometric.
1. Scope & Privacy-First Architecture
This Privacy Policy explains how patentbarexam.app ("we," "us," or "our") collects, uses, protects, and discloses personal information when you access our website, use our interactive question bank, or purchase study access.
We adhere to principles of data minimization. Visitors may explore our 50-question free practice pool, take timed mock exams, and read our 32 educational guides without providing payment details. When using the platform in guest mode, your quiz progress is stored entirely within your local web browser (localStorage) and is never transmitted to our remote servers.
2. Artificial Intelligence (AI) Generation Notice & Legal Disclaimer
In accordance with Federal Trade Commission (FTC) guidelines regarding artificial intelligence and truth-in-advertising standards:
- AI-Generated Questions: All practice questions, multiple-choice distractors, and answer rationales are programmatically generated and model-verified using advanced Artificial Intelligence models. They are modeled on the format of the USPTO Registration Examination but are not sourced from unreleased or confidential USPTO examinations.
- MPEP Rev. 01.2024 Citations: Each question cites the relevant section of the Manual of Patent Examining Procedure (MPEP Ninth Edition, Rev. 01.2024), 37 C.F.R., or 35 U.S.C. Candidates are strongly encouraged to click the verification links to inspect the underlying official government source on
uspto.gov. - No Legal Advice: patentbarexam.app is an educational study aid. Nothing on this website constitutes legal advice, patent prosecution advice, or the formation of an attorney-client relationship.
3. Information We Collect (Categories under US State & Federal Law)
Depending on your interactions with patentbarexam.app, we may collect the following categories of information as defined under the California Consumer Privacy Act (CCPA/CPRA) and other applicable US state privacy statutes:
A. Identifiers
When you create an account via Clerk, we collect your verified email address, unique cryptographic user ID, and IP address.
B. Commercial & Entitlement Records
When you purchase a Hero Pass or Master Bank, we record your subscription tier (hero or master), access expiration timestamp, and Stripe customer ID in our Cloudflare D1 database. We do not collect, process, or store full payment card numbers; all credit card transactions are handled directly by Stripe in compliance with PCI-DSS Level 1 security standards.
C. Internet & Learning Activity
Quiz attempts, answers, topic accuracy percentages, question bookmarks, and any question correction feedback/flags you voluntarily submit.
4. How We Use Personal Information
We process personal data solely for legitimate business purposes:
- To authenticate your session and sync your question progress across multiple devices.
- To enforce single-user license limits and unlock purchased tiers (Hero 350 Qs or Master 886 Qs).
- To process billing transactions and fulfill Stripe receipts and access renewals.
- To protect the integrity of our service against scraping, credential abuse, and DDoS attacks.
- To review user-submitted question flags and correct AI-generated explanations where necessary.
5. Prohibition on Sale or Sharing of Personal Information
6. Sub-Processors & Infrastructure Providers
We partner with vetted, industry-leading sub-processors under strict data protection terms:
- Clerk Inc. (USA): Manages user authentication, RS256 JWT tokens, and multi-factor security.
- Stripe Inc. (USA): Securely processes credit card and digital wallet transactions under PCI-DSS Level 1 compliance.
- Cloudflare Inc. (USA): Global CDN, edge compute, and Cloudflare D1 encrypted relational database storage.
- Plausible Analytics: Cookieless, privacy-first aggregate traffic measurement with no cross-site tracking.
7. Your United States State Privacy Rights
Residents of California (under CCPA/CPRA, Cal. Civ. Code § 1798.100 et seq.), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and Texas (TDPSA) have specific statutory rights regarding their personal data:
- Right to Know & Access: You may request disclosure of the specific pieces and categories of personal information we have collected about you.
- Right to Delete: You may request the permanent erasure of your personal data at any time via your self-service dashboard or by contacting us.
- Right to Correct: You have the right to request the correction of inaccurate personal records.
- Right to Non-Discrimination: We will never deny services, charge different prices, or provide a lower quality of service because you exercised any privacy rights.
- California "Shine the Light" Law (Cal. Civ. Code § 1798.83): We do not disclose personal information to third parties for their direct marketing purposes.
8. Children's Online Privacy Protection Act (COPPA) Compliance
Pursuant to COPPA (15 U.S.C. §§ 6501–6506), patentbarexam.app is directed strictly to adults (college graduates, STEM degree holders, and legal professionals preparing for federal patent practice licensing). We do not knowingly solicit, collect, or maintain personal information from individuals under the age of 13. If you believe a child under 13 has provided personal data, please contact our privacy compliance team immediately at [email protected] for prompt deletion.
9. Security Safeguards & Data Retention
We implement rigorous cryptographic and operational safeguards:
- End-to-end TLS 1.3 encryption for all data in transit.
- At-rest encryption for Cloudflare D1 database storage.
- Cryptographically signed RS256 session tokens and HMAC-SHA256 entitlement proofs.
- Cloudflare automated edge firewalls and rate-limiting buckets.
We retain your profile and entitlement data only for as long as your account remains active. When you initiate an account deletion, all database records across profiles, entitlements, and flags are permanently wiped within moments.
10. Self-Service Account Deletion & Compliance Inquiries
You have full self-service control over your data:
• Instant Self-Service Deletion: Log in to your Study Dashboard and click "Delete Account & Data" at the bottom of the page. This automatically wipes your Clerk account and all Cloudflare D1 records.
• Privacy Officer & Compliance Inquiries: For any formal privacy inquiries, state consumer rights requests, or regulatory communications: