Privacy Policy

Last updated: October 31, 2026

1. About this policy

LBO Reps (“LBO Reps”, “we”, “us”, “our”) runs financialmodelingcourse.io (the “Service”), where students practice LBO and financial modeling. This policy explains what personal information we collect, why we collect it, who we share it with, and the choices and rights you have. It forms part of our Terms of Service, and words defined there mean the same here.

By creating an account or using the Service, you agree to this policy. If you don't agree, please don't use the Service.

2. Information we collect

Information you give us

• Account details: your email address, and a password if you sign up with email. Passwords are stored only as a secure hash by our authentication provider. We never see them.
• Google sign-in: if you choose “Continue with Google”, Google shares your name and email address with us. We don't receive your Google password.
• Profile and onboarding answers: the display name you choose, how you heard about us, what you want to learn, and your goals.
• Messages to us: anything you send to our support address.

Information created as you use the Service

• Activity data: lessons and problems completed, answers, points, streaks, and leaderboard standing.
• Plan details: which plan you're on, its status, and when it renews or ends.

Payment information

Payments are handled entirely by Stripe. Stripe collects your card or other payment details on its own checkout page. We never see or store your full card number. We receive limited details from Stripe, such as a customer ID, which plan you bought, and whether the payment succeeded.

Technical information

Like most websites, our hosting and database providers automatically record basic technical information when you visit, such as your IP address, browser type, device type, and the date and time of requests. This is used to run the Service securely and fix problems.

3. Cookies and local storage

We use your browser's local storage, and similar technologies, to keep you signed in and to remember your progress and preferences. These are necessary for the Service to work. We don't use advertising cookies, cross-site tracking, or third-party analytics. You can clear or block local storage in your browser settings, but you'll be signed out and some features may stop working.

4. How we use your information

• To create and run your account, save your progress, and show your scores.
• To process purchases and unlock Premium features you've paid for.
• To send essential account emails, such as sign-up confirmation, password resets, and important changes to the Service or these policies.
• To answer your questions and provide support.
• To show the leaderboard, which displays only your display name, points, and streak, never your email address.
• To understand which lessons and features are useful, using our own records of how the Service is used, so we can improve it.
• To keep the Service secure, prevent fraud and abuse, and enforce our Terms.
• To comply with legal obligations.

We only send marketing emails, such as new course announcements or offers, if you've agreed to receive them, and every such email lets you opt out.

If you're in the European Economic Area or the UK, our legal bases are: performing our contract with you (running your account and Premium access), our legitimate interests (security, support, and improving the Service), your consent (marketing emails), and legal obligations.

5. Who we share information with

We don't sell your personal information, and we don't share it for advertising. We share it only when needed to run the Service, when the law requires it, or with your permission.

Service providers

These companies process data on our behalf, only for the purposes described here:

• Supabase: accounts, sign-in, and our database
• Stripe: payments, subscriptions, and the billing portal
• Resend: sending account emails
• Cloudflare: website hosting, security, and email forwarding
• Google: “Continue with Google” sign-in, and our support inbox

Legal and safety reasons

We may access or disclose information if we believe in good faith that it's required by law, such as a subpoena or court order, or necessary to protect the rights, property, or safety of LBO Reps, our users, or others, or to prevent fraud or abuse.

Business transfers

If LBO Reps is sold, merged, or transfers its assets, your information may be transferred to the new owner, who will remain bound by this policy for the information already collected.

Anonymous data

We may use or share aggregated or de-identified information that can't reasonably be used to identify you, for example “60% of students finish Lesson 1 within a week”.

6. How long we keep information

We keep your information for as long as your account is open. When you delete your account, we delete your profile, progress, onboarding answers, and plan records from our database. Stripe keeps records of past payments for as long as tax and financial laws require. Our service providers may hold backups and logs for a short period before they're overwritten. We may keep aggregated or de-identified data, which no longer identifies you.

7. Your choices and rights

• Delete your account: use “Delete account” in your account settings at any time. This takes effect immediately and can't be undone. Deleting your account doesn't cancel a paid subscription; cancel that first through the billing portal (see our Terms).
• Access, correct, or export: email us to get a copy of your information, correct it, or receive it in a portable format.
• Marketing: opt out of marketing emails at any time using the link in the email or by contacting us.
• Billing: manage or cancel your plan and update your payment method in the billing portal linked from your account.

Depending on where you live, you may have additional rights.

EEA and UK residents

You may have the right to access, correct, delete, restrict, or object to our processing of your personal data, to data portability, and to withdraw consent at any time. You can also complain to your local data protection authority.

California residents

Under California law (including the CCPA, as amended by the CPRA), you have the right to know what personal information we collect, use, and disclose; to access and delete it; to correct inaccurate information; and to opt out of its sale or sharing. We don't sell or share personal information as those terms are defined in California law. We won't treat you differently for exercising these rights.

To make any request, email [email protected] from the address on your account. We may need to confirm your identity before acting, and we'll respond within the time the law requires. Some rights have limits, for example where we must keep records for legal reasons, and we'll explain if that applies.

8. Where your data is stored

LBO Reps is based in the United States, and our service providers mainly store data in the United States. If you use the Service from outside the US, your information will be transferred to and processed in the US, where data protection laws may differ from those in your country. Where required, we rely on our providers' standard contractual safeguards for these transfers.

9. Security

We protect your information with reasonable measures: data is encrypted in transit (HTTPS), passwords are hashed, and our database only lets each student read and change their own records. No online service is perfectly secure, so we can't guarantee absolute security. If we learn of a breach that affects your personal information, we'll notify you as required by law.

10. Children

LBO Reps is designed for college students and adults. It isn't directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us and we'll delete it. Users between 13 and 18 should have a parent or guardian's permission, as described in our Terms.

11. Third-party sites and services

The Service links to sites and services we don't control, such as Stripe's checkout and billing portal, and Google's sign-in page. Information you give them is governed by their own privacy policies, and we aren't responsible for their practices. Please review their policies.

12. Changes to this policy

We may update this policy as the Service or the law changes. We'll update the date at the top. If we make a significant change, we'll tell you by email or with a notice on the Service at least 7 days before it takes effect. Continuing to use the Service after that means you accept the updated policy.

13. Contact us

For questions or privacy requests, email [email protected].