Privacy Policy

1. Introduction

Radiology Reviews LLC ("we," "our," "us," or "the Company"), a Maryland limited liability company, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our educational platforms, including viregistryreview.com, angioce.com, and any related services, applications, or platforms (collectively, "the Service").

This Privacy Policy applies to all users of the Service, including individual purchasers, institutional cohort members, and educators. By using the Service, you consent to the data practices described in this Privacy Policy.

This Privacy Policy is incorporated by reference into our Terms of Service.

2. Information We Collect

2.1 Information You Provide Directly

2.2 Usage and Learning Data

To provide and improve our educational services, we collect:

• Quiz and practice question responses
• Test scores and post-test results for CE courses
• Study progress and lesson completion status
• Performance metrics, including category-based performance breakdowns (e.g., Patient Care, Image Production, Procedures)
• Percentages of completion across learning modules
• Bookmarked questions and study preferences
• Spaced repetition data (cards reviewed, intervals, retention metrics)
• Time spent studying and session duration
• Course completion records and timestamps
• CE certificates issued and download history

2.3 Device and Technical Information

To enforce account security and our 2-device limit policy, we collect:

• Device identifiers (hashed using SHA-256 for security)
• Browser type and version
• Operating system information
• IP address (used for session security and not stored long-term)
• General location information derived from IP (country/region level only)

2.4 Payment Information

Payment processing is handled exclusively by Stripe, Inc. We do not collect, store, or have direct access to your full credit card or banking details. From Stripe, we receive:

• Transaction confirmations
• Payment status (succeeded, failed, refunded)
• Last four digits of the card used (for customer service reference)
• Billing email address
• Transaction amounts and timestamps

Stripe's collection and use of your payment information is governed by Stripe's Privacy Policy.

2.5 Cookies and Local Storage

We use essential cookies and browser local storage to:

• Maintain your authenticated login session
• Remember your theme and display preferences (light/dark mode)
• Store temporary quiz and lesson state
• Track device limit enforcement

We do not use third-party advertising cookies, behavioral tracking cookies, or cross-site tracking technologies.

3. How We Use Your Information

We use the collected information to:

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We share information only in the limited circumstances described below:

4.1 Service Providers

We share information with third-party service providers who help us operate the Service:

• Stripe, Inc. — Payment processing
• Resend (or current transactional email provider) — Transactional email delivery (account confirmations, password resets, certificates)
• Replit — Platform hosting infrastructure
• Marketing email service provider — Distribution of newsletters and marketing communications (if you have opted in)

These service providers have access only to the information necessary to perform their services and are contractually obligated to protect your data.

4.2 CE Credit Reporting

When you complete an ASRT-approved CE course, we report your earned credits to the American Registry of Radiologic Technologists (ARRT) through the ASRT CE Sponsor Suite. This reporting includes:

• Your full legal name
• Your ARRT identification number
• Course title and ASRT reference number
• Credit hours earned
• Date of completion

This reporting is required for the credits to appear in your ARRT record and is a necessary function of operating as an ASRT-approved CE sponsor.

4.3 Institutional Educators

If you access the Service through an institutional cohort license, your educator or administrator at the purchasing institution will have access to your learning progress data within the Service, including:

• Course enrollment and completion status
• Test scores and performance metrics
• Time spent on coursework

This access is provided for educational oversight purposes consistent with the institution's role as the purchaser of the cohort license.

4.4 Legal Requirements

We may disclose your information when required by law, including in response to:

• Valid subpoenas, court orders, or legal process
• Government investigations
• Requests to enforce our Terms of Service or protect our legal rights
• Requests to protect the safety of users or the public

4.5 Business Transfers

If Radiology Reviews LLC is involved in a merger, acquisition, asset sale, or reorganization, your information may be transferred to the successor entity. We will provide notice to users before any such transfer affects your data.

4.6 Internal Operations

We use Google Drive for internal content management of Company-owned course materials. No user data is synced to or stored within Google Drive. This integration is limited exclusively to our internal content workflow.

5. Data Security

We implement industry-standard security measures to protect your information:

• Password Protection: Passwords are hashed using bcrypt with salt rounds; we never store passwords in plaintext
• Device Fingerprinting: Device identifiers are hashed using SHA-256
• Encrypted Transmission: All data transmission between your browser and our servers uses HTTPS/TLS encryption
• Session Management: Session tokens expire automatically and are securely managed
• Database Access Controls: Database access is restricted to authorized personnel and is monitored
• Payment Security: Card data is handled exclusively by Stripe under PCI-DSS standards; we never have direct access to full payment credentials

While we use reasonable safeguards to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security and encourage you to use a strong, unique password for your account.

In the event of a data breach affecting your personal information, we will notify affected users in accordance with applicable law.

6. Data Retention

We retain your information for as long as necessary to provide the Service and comply with our legal obligations:

• Active Accounts: Account information and learning progress are retained while your account remains active
• CE Credit Records: CE credit issuance records are retained for at least seven (7) years to comply with ASRT sponsor requirements and to support credit verification
• Payment Records: Transaction records are retained as required by tax and accounting regulations (typically seven years)
• Deleted Accounts: Upon a verified account deletion request, we will remove your personal data within thirty (30) days, except for CE credit records (retained for regulatory compliance), anonymized aggregate data used for analytics (may be retained indefinitely), and information required to be retained by law or to resolve disputes

7. Your Rights and Choices

8. International Users

The Service is operated from the United States. If you access the Service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, which may have data protection laws different from those of your country.

The Service is designed primarily for users in the United States preparing for ARRT credentialing. We do not actively market the Service internationally.

9. Children's Privacy

The Service is intended for adults pursuing professional medical imaging certifications. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected personal information from a child under 18, we will delete it promptly. If you believe we may have collected information from a child, please contact us at support@viregistryreview.com.

10. Third-Party Links

The Service may contain links to third-party websites (such as ASRT, ARRT, or external reference materials). This Privacy Policy does not apply to third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or applicable law. When we make material changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify registered users via email at least thirty (30) days before the changes take effect (for material changes)
• Post the updated policy on the Service

Your continued use of the Service after the effective date of any updated policy constitutes acceptance of the updated Privacy Policy. If you do not agree to the updated policy, you should discontinue use of the Service.

12. Contact Us

For questions, concerns, requests regarding your personal information, or to exercise any of your privacy rights:

We will respond to all verified privacy requests within the time period required by applicable law.