Privacy Policy
Effective Date: February 1, 2026
Contact: team@osha.study
Key Highlights
What We Collect
- Personal info: Name, email, payment info (via secure processors), account credentials
- Usage data: IP address, browser, device info, pages visited, study progress
- Cookies and tracking technologies (see Cookies Policy)
How We Use It
- Provide and maintain the Service
- Process transactions and deliver study materials
- Send updates, support, and marketing communications
- Improve user experience and develop new features
- Enforce Terms and protect against fraud
How We Share It
WE DO NOT SELL YOUR DATA
- Service providers: Payment processors (Stripe, PayPal), email providers, Google Analytics, hosting
- Legal requirements: When required by law
- Business transfers: Mergers/acquisitions
Your Rights
- Access, update, or correct your information
- Request deletion of your data
- Opt out of marketing emails
- Request data portability (machine-readable copy)
- CCPA rights (California residents)
- GDPR rights (EEA residents)
Security
- SSL/TLS encryption for data in transit
- Industry-standard password hashing
- PCI-DSS compliant payment processing
- Regular security assessments
Other Important Points
- Not directed to children under 18
- International data transfers may occur
- We may update this policy (will notify you)
Contact: team@osha.study | Response time: Within 48 hours
Effective Date: February 1, 2026
OSHA.study operates the osha.study website and related services (collectively, the Service). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using the Service, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
1.1 Personal Information
We may collect personally identifiable information that you voluntarily provide to us when you register for an account, purchase study materials, subscribe to our newsletter, complete our diagnostic quiz, or contact us for support.
- Name
- Email address
- Payment information (processed securely through third-party payment processors)
- Account credentials
1.2 Usage Information
We automatically collect certain information when you visit, use, or navigate the Service: IP address, browser type and version, device information, pages visited, referring URLs, operating system, and study progress.
1.3 Cookies and Tracking Technologies
We use cookies, web beacons, and similar tracking technologies. See our Cookies Policy for details.
2. How We Use Your Information
- Service Delivery: Provide, operate, and maintain our Service; process transactions; track study progress; provide customer support
- Communication: Send administrative information, updates, security alerts, and marketing communications (with consent)
- Improvement and Analytics: Understand user interactions, improve content and UX, develop new features
- Legal and Security: Enforce Terms of Service, protect against fraud, comply with legal obligations
3. How We Share Your Information
We do NOT sell, trade, or rent your personal information to third parties.
- Service Providers: Payment processors (Stripe, PayPal), email providers, analytics (Google Analytics), hosting providers
- Legal Requirements: When required by law or to protect rights and safety
- Business Transfers: In case of merger, acquisition, or sale of assets
4. Data Retention
- Account information: While account is active + reasonable period
- Transaction records: For accounting and legal purposes
- Study progress: While account is active
- Marketing data: Until unsubscribe or deletion request
5. Your Rights and Choices
- Access and Correction: Access, update, or correct your personal information
- Deletion: Request deletion of your personal information
- Opt-Out: Unsubscribe from marketing emails; adjust account settings
- Data Portability: Request a copy of your data in machine-readable format
6. Security of Your Information
We implement appropriate security measures including:
- Encryption of data in transit (SSL/TLS)
- Secure password storage (industry-standard hashing)
- Regular security assessments
- Access controls and authentication
- PCI-DSS compliant payment processing
However, no method of Internet transmission is 100% secure. We cannot guarantee absolute security.
7. Children's Privacy
Our Service is not directed to individuals under 18. We do not knowingly collect information from children under 18. Contact team@osha.study if you believe your child has provided us information.
8. California Privacy Rights (CCPA)
- Right to know what personal information we collect, use, disclose, and sell
- Right to request deletion
- Right to opt-out of sale (note: we do NOT sell personal information)
- Right to non-discrimination
9. European Privacy Rights (GDPR)
- Right of access to your personal information
- Right to rectification of inaccurate information
- Right to erasure (right to be forgotten)
- Right to restriction of processing
- Right to data portability
- Right to object to processing
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you by posting the new policy and updating the Effective Date. For material changes, we will also send email notification.
11. Contact Us
Email: team@osha.study
Response Time: Within 48 hours