Privacy Policy

ExelQbank is an online MCCQE1 exam-preparation service operated by Excel QBank (“Excel QBank”, “we”, “us”), based in British Columbia, Canada. This policy explains what personal information we collect, how we use and protect it, and the choices you have. We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable British Columbia privacy law.

We collect only what we need to provide the service:

• Account information — your name and email address when you register.
• Study data — the questions you answer, your responses, scores, and session history, used to power your dashboard and analytics.
• Billing information — a Stripe customer identifier and subscription status. Your full card number is entered directly with Stripe and is never stored on or transmitted through our servers.
• Technical data — a strictly-necessary authentication cookie that keeps you signed in. We do not use advertising or analytics trackers.

We use your information to create and secure your account, provide the Qbank and your progress analytics, process subscription payments and trials, send service and transactional emails (for example a trial-ending reminder or a payment-issue notice), respond to support requests, and meet legal and accounting obligations. We rely on your consent and on the performance of our contract with you as the basis for this processing. We do not sell your personal information.

We share personal information only with the processors that operate the service on our behalf:

• Supabase — authentication and database hosting.
• Stripe — payment processing and subscription management.
• Resend — transactional email delivery.

These providers may store or process data on servers located in the United States or other countries. When your information is held outside Canada it is subject to the laws of the jurisdiction where it is stored, including lawful access by courts and government authorities there. Each provider maintains its own privacy and security commitments.

We use a single strictly-necessary cookie to keep you authenticated during a session. It is not used for advertising, profiling, or cross-site tracking, and it expires after a short period. Because it is essential to the service, it cannot be disabled while you are signed in.

We keep your account and study data for as long as your account is active. If you delete your account, we remove your profile, study history, and subscription records from our systems, and cancel any active subscription. We may retain limited billing and transaction records for as long as required by tax and accounting law.

You can access, correct, export, or delete your personal information at any time. From your account settings you can update your profile, download your study data, and permanently delete your account. You may also contact us to exercise any privacy right, and you have the right to complain to the Office of the Privacy Commissioner of Canada.

We protect your information with encryption in transit, access controls, and least-privilege server credentials. No method of transmission or storage is perfectly secure, but we take reasonable steps to guard against unauthorized access, loss, or disclosure. If a breach affecting your personal information creates a real risk of significant harm, we will notify you and the Privacy Commissioner as required by law.

The service is intended for medical graduates and is not directed at children under 16. We do not knowingly collect personal information from children.

We may update this policy from time to time. Material changes will be reflected by the “last updated” date above and, where appropriate, communicated by email.

For any privacy question or request, contact our privacy contact at support@exelqbank.com.