Privacy Policy

Best Practice (youbestpractice.com)
Operated by YOUBESTPRACTICE LLC, a Washington limited liability company ("we," "us," "our")
Version: Privacy v1.6 (2026-10-30)
Effective date: October 30, 2026
Dates and times: every period and deadline in this policy runs on Pacific Time (Washington time, America/Los_Angeles).

The short version

• We collect what we need to run your account, your practice and your courses, plus what Washington's Department of Licensing requires a real estate school to keep.
• We and partners such as Google, Meta and TikTok use cookies and similar tools for analytics, measurement and advertising, including ads for Best Practice on other sites. Your choices are under "Cookies, analytics and advertising."
• School records are kept for five years because the law requires it. You can get a copy of your record at any time.
• What you ask our AI study assistant is kept for 12 months, then stripped of anything that identifies you.

What we collect

1. Your account. Name, email address, and password (stored only as a secure hash). An authenticator app is optional.
2. Your agreement to our terms. When you check "I agree to the Terms of Service," we record which version you agreed to, when, and your IP address.
3. The free 50-question practice test. You can take it without an account; your progress stays in your own browser. If you enter your email to unlock the topic breakdown and explanations, we keep that email and your results. Study-tip emails are a separate opt-in.
4. Exam-prep activity. The exam you're preparing for, your answers, scores and time per question, diagnostic results, practice history, readiness estimates, and any question you report as a problem.
5. Clock-hour course enrollment. Washington's rules for real estate schools (chapter 308-124H WAC) require us to collect and keep: your full legal name, mailing address and phone number; your Washington real estate license number, if you're licensed; your registration, start and completion dates; your identity attestation (typed signature, time, IP address and device); the answers to your personal validation questions (stored only in hashed form); seat-time and inactivity records; lesson progress; quiz attempts and scores; messages with your instructor; your course evaluation; your written certification that you completed the course; and the certificate we issue.
6. The AI study assistant. The questions you ask, the answers it gives, and the sources it used.
7. Payments. Stripe processes every payment. We receive a confirmation, the product, the amount and limited billing details. Your full card number never reaches our servers.
8. Technical information. IP address, browser and device type, the pages you use on the site, and bot-protection signals (Cloudflare Turnstile) that keep automated scrapers away from the question bank. We and our analytics and advertising partners also collect information through cookies, pixels, tags, SDKs and server-side events, as described under "Cookies, analytics and advertising."

We record the IP address your device uses when you visit, to understand how visitors find us and to spot fraudulent clicks. We keep it for 90 days.

Do Not Track. There is no common standard for browser "Do Not Track" signals, so the site doesn't respond to them. Our analytics and advertising partners may collect information about your activity on Best Practice over time and across other websites (see "Cookies, analytics and advertising").

How we use it

• To run your account and deliver what you bought.
• To meet the Department of Licensing's distance-education rules: verifying identity, measuring seat time, recording completion, issuing certificates and keeping the required records.
• To tailor your practice: the diagnostic, your study prescriptions and your readiness estimate.
• To answer your questions, through your instructor or the AI study assistant.
• To improve our materials and our own study tools, using anonymized information only (see "AI study-assistant logs" below).
• To send transactional email: receipts, results, and account and course notices. Study tips and news go out only with your separate opt-in, and every one of those emails has an unsubscribe link.
• To measure and improve the site, to test changes to it, and to advertise Best Practice, including on other websites and apps (see "Cookies, analytics and advertising").
• To protect the platform and the question bank from copying, abuse and fraud.
• To keep a record of your agreement to our terms, and to handle disputes and legal requests.

We never ask what was on your licensing exam, and we don't use anything you tell us to reconstruct live exam questions.

Cookies, analytics and advertising

We and partners such as Google (including Google Analytics and Google Ads), Meta, TikTok and similar analytics, testing and advertising services use cookies, pixels, tags, software development kits (SDKs) and server-side events on our site, in our emails and in our apps. Through them, we and these partners collect information such as the pages you visit, what you click, your device and browser, your IP address, identifiers for your browser or device, and actions you take, such as starting the free test or buying a course. We and these partners use it:

• to measure and analyze how the site is used, and to test changes to it (A/B testing);
• to record and replay visits so we can see where the site is confusing or broken, with what you type into form fields masked;
• to measure how well our advertising works; and
• to show you ads for Best Practice on other websites and apps, including ads to people who have visited our site (retargeting) and to people who are similar to our visitors or students (similar audiences). To build these audiences, we may give an advertising partner a scrambled (hashed) form of your email address.

These partners may collect information about your activity over time and across different websites and apps, and may combine it with information they already have, under their own privacy policies.

Metricool (website analytics) measures visits, traffic sources and pages viewed. It loads only after you accept analytics cookies, the same as Google Analytics, Meta and TikTok.

Your choices. You can block or delete cookies in your browser settings. You can limit the ads you see in each platform's ad settings (for example, Google's My Ad Center, Meta's ad preferences and TikTok's ad settings) and with the opt-out tools those partners offer, such as the Google Analytics opt-out browser add-on. Blocking some cookies may affect how the site works. Every marketing email we send has an unsubscribe link.

Visitors in the European Economic Area, the United Kingdom and Switzerland. We ask for your consent before analytics and advertising cookies are used, and you can change your choice at any time by clearing this site's cookies in your browser, which brings the choice back.

AI study-assistant logs

We keep your study-assistant conversations for 12 months so we can check answer quality and find gaps in our materials. After 12 months we anonymize them: we remove your name, email, account link and anything else that identifies you. We may use anonymized logs to improve our materials and to train and improve our own study tools. The outside AI provider that runs the assistant doesn't use them to train its models (see below).

Who we share it with

We share personal information:

• With service providers that run the platform for us, under their own privacy and security terms, including Supabase (database and sign-in, United States), Vercel (hosting), Stripe (payments), Mux (course video streaming), Resend (email delivery), ImprovMX (forwarding of mail sent to our @youbestpractice.com addresses), Google (the Gmail mailbox where we read that mail), Cloudflare (bot protection) and Anthropic (the AI model behind the study assistant). Under Anthropic's commercial terms, it doesn't train its models on what our students send through our service.
• With analytics and advertising partners, such as Google, Meta, TikTok and similar services, for the analytics, measurement, testing and advertising purposes described under "Cookies, analytics and advertising."
• With the Washington State Department of Licensing, when the law requires it: course completions, records requests, audits and observations of the school.
• When the law otherwise requires it, such as a valid subpoena, or to protect someone's rights or safety.
• With a successor, if the business is sold or merged. The successor must honor this policy.

Where your information is kept

Best Practice is run from the United States for people preparing for U.S. licensing exams. Your student account and course data are stored in the United States: our database and sign-in (Supabase) are in the western United States, the code that runs the site runs on Vercel's servers in the United States, and our email provider (Resend) keeps its account data and email records in the United States. So the site loads quickly wherever you are, its pages may be delivered through a global content delivery network, which keeps copies of those pages on servers in other countries. If you use Best Practice from another country, your information comes to the United States, where privacy laws may differ from yours.

How long we keep it

• School records (the student record Washington requires: the school's name, address and phone; your name, address and phone; your dates of attendance and registration date; the clock-hour courses you completed and your exam results; and your course evaluation), plus every edition of the school's required publication: 5 years (WAC 308-124H-935), then deleted or anonymized.
• Your login and account: active for 5 years after your most recent purchase or course completion, whichever is later, so you can reach your records and certificates. After that, we delete or anonymize the account, except school records still inside their 5 years.
• Exam-prep activity: for as long as your account is kept, as above.
• Free-test email and results (if you never made an account): 5 years after you entered your email, or sooner if you ask us to delete them.
• AI study-assistant logs: 12 months, then anonymized.
• Agreement records (version, time, IP address): as long as your account is kept, and afterward for as long as we need them to resolve a dispute.
• Payment records: as long as tax law requires.
• Analytics and advertising information: kept by us and by our partners for as long as each needs it for the purposes above, under the partner's own retention settings.

Your choices

• Get a copy of your record at any time from your account, free. During the 5-year retention period you can also request a duplicate certificate online, free.
• Correct your information in your account, or ask us to.
• Close your account by emailing us. We delete what we can; school records the law requires us to keep stay for the required period.
• Unsubscribe from any non-transactional email with one click.
• Limit analytics and ads through your browser settings and each platform's ad settings (see "Cookies, analytics and advertising").
• Ask what we hold about you by emailing us.

We answer privacy requests within 30 days. To protect your account, we answer requests from the email address on your account, or we'll ask you to confirm who you are before we share or delete anything.

Security

Encrypted connections; access controls that let each student see only their own records; staff access by role, with an authenticator app required; and regular backups with a tested restore. No system is perfectly secure. If a breach affects your personal information, we'll notify you as Washington law requires (chapter 19.255 RCW).

Children

Real estate licensing is for adults. Best Practice isn't directed to anyone under 18, and we don't knowingly collect information from children.

Changes to this policy

We'll post changes here with a new effective date and email account holders about any material change before it takes effect.

Contact

YOUBESTPRACTICE LLC
PO Box 1386, South Bend, WA 98586
support@youbestpractice.com
Privacy disputes and legal notices: compliance@youbestpractice.com

Version: Privacy v1.6 (2026-10-30). Effective date: October 30, 2026.

Approval reference: decision #157 (approved by Shannon, 2026-10-30).