Privacy Policy

1. Who we are

ERPPrep operates an independent platform offering practice content for SAP certification exams. For the purposes of data-protection law, ERPPrep is the controller of the personal information described in this policy. Our payment provider is a separate controller of payment data, as described below.

2. Information we collect

We collect the following categories of information:

• Account information — the email address you sign up with and authentication data needed to secure your login.
• Practice activity — the drills and scenarios you attempt, your answers, scores, progress, and result history.
• Purchase records — which exam access you have bought and your access period. Card and billing details are handled by our merchant-of-record provider, not stored by ERPPrep.
• Technical & usage data — device, browser, approximate location derived from IP, pages viewed, and product-analytics events used to understand and improve the Service.
• Communications — messages you send us (for example, support or refund requests).

3. How we use your information

We use personal information to:

• Provide your practice experience, track progress, and manage premium access.
• Process and verify purchases and refund-eligibility requests.
• Secure the Service, prevent abuse, enforce usage limits, and debug errors.
• Communicate with you about your account, purchases, and support requests.
• Analyze usage to maintain and improve the product.

4. Legal bases for processing

Where data-protection law (such as the GDPR or UK GDPR) applies, we rely on these legal bases: performance of our contract with you (to provide the Service and manage purchases); our legitimate interests (to secure, analyze, and improve the Service); your consent (for example, for non-essential analytics where required); and compliance with legal obligations.

5. Cookies & similar technologies

We use strictly necessary cookies to keep you signed in and to secure the Service. Where required, we use analytics cookies only with your consent. You can control cookies through your browser settings; disabling necessary cookies may prevent you from signing in.

6. How we share information & service providers

We do not sell your personal data. We share information only with service providers (processors) who help us run the Service, under contracts that require them to protect it and use it only on our instructions:

• Hosting, database & authentication — to store your account and practice data securely.
• Merchant-of-record payment provider — to process payments and refunds; it handles your payment details under its own privacy policy.
• Product analytics — to understand feature usage and improve the Service.
• Error monitoring — to detect and diagnose technical problems.
• Transactional email — to send account and support messages.
• We may also disclose information where required by law, to protect our rights or users' safety, or in connection with a business transfer.

7. Data retention

We keep account and practice data for as long as your account is active and as needed to provide the Service. We retain purchase and tax records for as long as required by law. When data is no longer needed, we delete or anonymize it. You can request deletion at any time (see Your rights).

8. Data security

We use technical and organizational measures — including encrypted connections, access controls, and reputable hosted infrastructure — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. International transfers

Our service providers may process information in countries other than your own. Where we transfer personal information internationally, we rely on appropriate safeguards (such as standard contractual clauses) as required by applicable law.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. Residents of the EU/UK have rights under the GDPR; California residents have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. We do not sell personal information.

To exercise any right, contact us at privacy@erpprep.com. We will verify your request and respond within the time required by law. You also have the right to lodge a complaint with your local data-protection authority.

11. Children's privacy

The Service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

12. Third-party links

The Service may link to third-party sites (for example, our payment provider). We are not responsible for their privacy practices; please review their policies.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date above and, for material changes, provide additional notice where appropriate.

14. Contact

For privacy questions or to exercise your rights, contact us at privacy@erpprep.com.