Privacy notice
Effective September 8, 2026. DATAMED CONSULTING LLC operates Board Review. This notice describes the information used to provide our medical education service.
Information we use
We process your account name, email, authentication information, study sessions, answers, progress, subscription status, and support requests. Hosting providers also process technical request information needed to operate and secure the site. Do not submit patient information, card details, passwords, or confidential examination content through support.
Why we use it
We use this information to sign you in, save and grade practice, show your progress, provide paid access, investigate errors, prevent abuse, and handle support. We also measure use of key study and purchase features to improve the service. Support forms use a hashed network identifier for rate limiting; it is not displayed to support staff.
Service providers
Supabase provides authentication and database services. Our current authentication infrastructure is shared with MasterCCS, another service operated by us; Google may display Master CCS during consent. PM&R study records and subscription access are handled separately. Vercel hosts the website. Stripe processes payment details and subscriptions; Board Review does not receive your full card number. When you choose Google sign-in, Google shares the account information described on its consent screen. Providers may process information outside your country.
Cookies and analytics
Necessary cookies keep you signed in. Browser storage saves study display preferences and your analytics choice. If you allow optional analytics, we count daily use of the sample, signup, study, and checkout features. We store daily hashed browser and network identifiers, without question text, answers, email addresses, or payment details. Records older than 90 days are removed when new analytics are recorded. Optional Google Analytics loads only if it is configured and you choose to allow it. You can change that choice using Analytics preferences in the footer. We do not sell your personal information or use your question answers for advertising.
Retention and account requests
We retain account and study records while needed to provide the service, and billing or security records where needed for accounting, disputes, or legal obligations. Use the support form to request access, correction, export, or deletion. We verify ownership before acting. Because sign-in is shared, we will clarify whether a request concerns Board Review data or your shared login before deleting an account. Backups may retain information until their normal retention period ends.
Your choices and contact
You can use email sign-in instead of Google and decline optional analytics. The service is intended for adult medical learners. Use support for privacy questions or concerns. We will update this notice when our data practices change.