Privacy Policy

Last updated: September 3, 2026

This Privacy Policy explains what CDL Compliant ("we," "us") collects when you use our platform and websites (the "Service"), how we use it, and the choices you have. It should be read together with our Terms of Service.

1. Information We Collect

Account and profile information — name, email, phone number, and, for students, information your school records such as date of birth, enrollment details, and program assignment.

Training records — course and topic progress, practice test and exam attempts and scores, behind-the-wheel hours and skill sign-offs, schedules, notes your school keeps, and documents you or your school upload (for example a permit or medical card).

Payment information — payments are processed by Stripe. We receive confirmation of payment and limited billing details; we never see or store full card numbers.

Usage information — basic technical data such as sign-in times, pages visited within the Service and on our public site, browser type, and approximate region, used to understand, secure, and improve the Service. We use cookies and similar browser storage only to keep you signed in and to operate the Service, not for third-party advertising.

2. How We Use Information

We use information to operate the Service: authenticate you, show your school the training records it manages, track training progress, process payments, provide support, keep the Service secure, and comply with legal obligations. Training records exist so your school can run its program and meet its record-keeping obligations, including reporting completions to the FMCSA Training Provider Registry.

3. How Information Is Shared

With your school — if you are a student, your school's staff can see your profile, progress, records, and documents. Your school controls its students' records.

With service providers — we use trusted providers to run the Service, including Supabase (database, authentication, and file storage), Stripe (payments), and Vercel (hosting). They process data only to provide their services to us.

With regulators, when applicable — training completions may be reported to the FMCSA Training Provider Registry by or on behalf of your school, as required for ELDT.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We may disclose information if required by law or to protect the Service and its users.

4. Retention

We keep account and training records for as long as the account is active and as needed for the school's regulatory record-keeping (ELDT records can carry multi-year retention expectations). Schools may request export of their records; see the Terms of Service.

5. Security

Data is encrypted in transit, access is restricted by role-based rules at the database level, and uploaded documents are stored in private storage accessible only to you and your school. No system is perfectly secure, so please keep your password private and change it if you suspect misuse.

6. Your Choices and Rights

You can update your profile in the portal settings and change your password at any time. You may request access to, correction of, or deletion of your personal information by emailing support@cdlcompliant.com. Note that if your school is required to retain training records, deletion of those records may be directed through your school. California residents may exercise applicable rights under the CCPA/CPRA through the same email; we will not discriminate against you for doing so.

7. Children

The Service is intended for adults in commercial driver training and is not directed to children under 16. We do not knowingly collect information from children under 16.

8. Changes and Contact

If we make material changes to this policy we will post the updated version here and update the date above. Questions: support@cdlcompliant.com.