Privacy policy

This policy describes personal information associated with your use of Vulpus Pharma. It covers accounts, study activity, support interactions and, when purchases are available, information needed for those purchases. External sites you choose to visit apply their own policies.

For questions about your personal information, see Your privacy contact.

• Account: first and last name, email, country, region if provided, candidate profile, preparation pathway and language. Your password is handled by the authentication service; it must not be sent to support.
• Study: courses viewed, review status, answers, flagged questions, attempts, scores, notes and resume positions, depending on the tools used.
• Quotes, contracts and payments: name and billing address, including country, province or territory and postal code where required, email, plan, amounts, currency, dates, statuses and necessary references. Contract copies and acceptance evidence are retained. Tax checks and commercial limits use the contract references and amounts they need; they do not require your exercise answers. When payment is offered, the billing country and province or territory may be compared with the announced sales scope. Card details are entered with Stripe, not in a support message.
• Requests: contact details, the reference of the affected resource and content voluntarily sent to support or in a report. Do not copy patient records or identifiable health information.
• Operation: language and display settings, session data, access controls and technical information needed by enabled services. Data categories and retention periods are described below.
• Choices: accepted versions, language and evidence of choices actually collected. Browsing alone is not optional consent.

Emails necessary for an account or purchase are distinct from promotional messages. Promotional messages require consent or another applicable legal basis, identify the sender and provide an easy, free unsubscribe mechanism processed within the statutory period. Account information identifies you, manages access and supports responses to requests. Study data supports resuming work and displaying progress. Purchase information is used to process orders, grant access, resolve errors and meet accounting obligations. Security information helps prevent and investigate unauthorized access and incidents.

Collection must be limited to what these purposes require. An optional use, particularly promotion, requires appropriate choices and information before implementation. Refusing or withdrawing optional consent must not remove unrelated paid access.

Current features save preferences, progress and attempts locally. This does not mean that a copy is synchronized to a server. Information may be accessible to someone using the same browser profile; avoid shared devices and sign out after use.

Signing out does not remove all saved study activity. Saved study activity is separated by account in the interface; guest data and older unassigned saves are not automatically transferred into an account. This separation does not encrypt the data in the browser profile: someone with access to that profile may still access it through browser tools. This data may remain in the browser until you, the browser or a reset tool removes it. Closing a tab or ending a subscription does not necessarily erase it. Vulpus settings provide certain local resets; browser settings let you clear site data. This may prevent resuming exercises and does not automatically delete account data held by providers.

When payment becomes available, the browser will keep a record of the attempt associated with your account: account and request identifiers, the selected plan and action, any promotion code and, when returned, the status, quote and payment link. This record allows you to resume the same request after an interruption and helps avoid duplicates. It contains no card number or card security code and is not confirmation of payment. It remains in the browser after sign-out; deleting it or replacing it through an authorized new attempt ends this local resume capability. Vulpus does not encrypt this data in local storage.

Saved study activity uses browser storage. An availability check may create and immediately remove a short-lived technical cookie. Cookies may be sent to the same site’s server with requests. A local identifier supports marking certain content to discourage unauthorized sharing; it does not detect screenshots. Session technologies and local storage may be needed for sign-in, security, preferences or saving your work. Blocking this storage may make some features unavailable.

Promotional emails, targeted advertising, audience measurement and external error monitoring are not enabled for the service described here. This policy alone cannot activate an optional tool: its purposes, providers, retention periods and choices must be disclosed, with prior consent where required and a way to withdraw it. Providers’ technical security processing remains separate.

Information is available only to authorized people who need it for support, administration, security or accounting. The following services are currently used for the private preview:

• Cloudflare — page hosting and network protection; connection and security data processed through an international network.
• Supabase — authentication, account data, access rights and protected content. The main project is in Canada; some operations, support and delivery can involve other countries.
• Stripe — payments and refunds through its hosted checkout. Vulpus keeps the references and statuses it needs, without receiving full card numbers or security codes. Current tests use fictitious payment details.
• Resend — delivery of technical emails, including account access and recovery; message and delivery data are processed in the United States.
• Zoho Mail — business support and privacy mailbox on the Canadian regional service; some operations, support and subprocessors may involve other countries.

A main hosting location in Canada does not mean that all processing stays in Canada. Provider agreements, subprocessors and the assessment of transfers outside Quebec must be finalized before commercial opening. These services are not enabled for marketing, targeted advertising or sale of personal information.

Retention depends on the purpose of the information. The internal schedule provides the following ordinary periods, subject to legal requirements, a dispute, an incident or another documented reason for preservation:

• Account details, preferences, server-side study activity and progress: while the account is in use, then no more than thirty days after closure. Accounts inactive for twelve months are reviewed annually; notice and a recovery period precede a proposed closure.
• Support requests and reports: one hundred and eighty days after resolution; unresolved requests are reviewed.
• Contracts, consents, notices and related evidence: during the relationship, then thirty-six months after the last relevant event, or longer where financial or legal rules require. Relevant tax and accounting records generally follow a six-year period after the relevant year, with applicable exceptions.
• Rights-request records: thirty-six months after closure. Ordinary logs controlled by Vulpus: thirty days. Information needed for a decision or incident follows its specific rules.

These periods are implemented through review and targeted actions; they are not a promise of automatic or instant purging. Provider backups and logs also follow their own cycles. Deletion from the active service does not instantly remove every backup copy; copies needed for an obligation or recovery remain subject to access controls and review. Information no longer needed must be destroyed or anonymized under applicable rules, subject to justified exceptions.

Resume data and downloaded contracts on your device are under your control. Signing out does not necessarily erase local study data or downloaded files; we cannot guarantee remote deletion from an offline browser. A deletion request does not destroy a record that the law requires us to retain: retained categories and the reasons must be explained to you.

Depending on applicable law, you may request access to your information, correction and, where conditions are met, provision in a structured, commonly used technological format. You may also request account closure, information deletion or withdrawal of consent, taking account of retention obligations and features that cannot be provided without certain data.

Send your request to the privacy contact below, identifying your account email and the nature of your request. Proportionate identity verification may be necessary; do not spontaneously send identity documents or health data. Requests must receive a response within the applicable statutory period. For access or correction under Quebec private-sector privacy law, this is 30 days from receipt; any specific rules applicable to the request remain applicable.

A refusal must explain the reasons and available review rights. You may complain to the competent authority, including Quebec’s Commission d’accès à l’information, or the Office of the Privacy Commissioner of Canada where it has jurisdiction.

Security measures must be proportionate to the information and risks, including administrative access, authentication, communications, backups and providers. No system can guarantee zero risk. Do not reuse a compromised password and report suspicious access.

A privacy incident must be assessed, contained and documented. Affected individuals and authorities must be notified when statutory notification conditions are met.

A generated account code, without your name or email, appears in the header and accompanies protected resources to discourage redistribution. The operator can link this code to your account, so it is not anonymous data. Session control uses technical account and sign-in identifiers, activity timestamps and any revocation. This feature does not add geolocation or device fingerprinting.

A report sent from the site includes your message, its category, language and relevant resource references. It is linked to your account and receives a tracking reference. Authorized administrators can categorize it and track its resolution. The form does not automatically send complete question text or explanations. Do not include passwords, patient information or unnecessary personal data. The email link opens your mail application; you must then send the email yourself.

Do not use Vulpus as a patient record. Do not enter a patient name, health insurance number, identifiable real prescription or other identifiable health information in notes or messages. Exercises support professional preparation.

The current oral mode presents a script and practice controls; it does not record your voice or request microphone access. A future voice feature would require separate information and choices before activation. The service is intended for adult candidates in Canada and abroad, under the terms of use; it is not intended for minors.

The date and version appear at the top of this document. Significant changes to purposes, information categories, providers or choices must not be hidden in a silent update. Required notices and new consents must be provided before the relevant processing. Commitments actually in force and accepted versions must remain traceable.

To exercise rights, ask a question or report an incident involving your personal information:

Person responsible for the protection of personal information
contact@vulpus-pharma.com