Privacy Policy
What we collect
When you sign up for FBLA One, we collect your email address, display name, and (optionally) your school or chapter affiliation. When you use the platform, we collect data you create: practice test logs, saved resources, competition registrations, and progress.
What we don't do
We do not sell your data. We do not share it with advertisers. We do not use it to train AI models. We do not transfer it outside the platform without your explicit consent.
Where it lives
Account data and your prep history are stored in Supabase (Postgres on AWS US-East), encrypted at rest. Email is sent via Resend. Hosting is on Vercel. Logs that include personal data are retained for 30 days.
Your rights
You can export or delete your data anytime from Settings. We honor GDPR and CCPA requests within 30 days. Email privacy@fbla.one with any request.
Children
FBLA is a high-school activity, so most users are 13-18. We comply with COPPA: users under 13 require verifiable parental consent before creating an account. School-managed deployments handle consent at the district level.
Changes
If we materially change this policy we'll email all account holders at least 30 days before the change takes effect. The "Last updated" date at the top of this page always reflects the current version.
Questions? Email privacy@fbla.one. We respond within 3 business days.