Privacy Policy

To track your CPE compliance, Cepwell collects:

• Account data: your email address and (optionally) your name.
• License data: the state(s) you hold a CPA license in, your license number, issue date, and details needed to compute your reporting cycle (e.g. birth year or last name where a board requires them).
• CPE records: the courses you log or import — title, sponsor, date, hours, category, delivery method — and any certificate files you upload.

Your data is used solely to provide the service: to evaluate your CPE against your state board’s requirements, show your compliance status, warn you of deadlines, and let you export an audit-ready record. We do not sell your data, and we do not use it for advertising.

Your license number is encrypted at the application layer before it is stored. Data is held in a multi-tenant database with row-level security enabled and default-deny on every table, so each user’s rows are accessible only to that user. Certificate files are kept in a private store and served only via short-lived signed links. See our Security page for more.

We rely on a small number of infrastructure providers who process data on our behalf:

• Supabase — database, authentication, and file storage.
• Vercel — application hosting.

These providers process data only to operate the service and under their own data-protection terms.

We retain your records for as long as your account is active so your compliance history stays complete and exportable. User records are soft-deleted rather than immediately destroyed so an accidental deletion can be recovered; you may request full deletion of your account and data.

You can access, correct, export, and delete your data. Manage your profile in Account settings, export your CPE records from the credits ledger, or contact us for access and deletion requests.

Questions about privacy? Reach us through the Help & support page. (A dedicated privacy contact will be published with the reviewed policy.)