Privacy Policy

Introduction

Questiva Consultants operates an online learning platform for QuickBooks® Online textbooks, free tools, and instructor resources. This policy explains what information we collect when you use our site and how we use it. It applies to visitors, learners, teachers, and anyone who creates a Questiva account.

Information we collect

• Account information: email address, name, optional phone number, optional company and job title.
• Payment information, processed by our payment processor, currently Authorize.net. We never store full card numbers; we keep order records (amount, items, status, timestamps).
• Learning activity, tools you use, courses you start, assessments you take, progress on textbooks, Points awarded.
• Group membership, if you join a teacher’s group, your name and progress are visible to that teacher.
• An account your instructor created for you, an instructor who has bought seats for their class can create an account in your name and give you a temporary password to sign in with. That password works once: you are asked to choose your own before you can do anything else, and from that point your instructor cannot sign in as you.
• Technical data: your IP address, for security and rate limiting. Our own page-view log also records each page you open: its address, the page you came from, any campaign tags, a random visitor ID, your IP address with its last part removed, and a scrambled fingerprint of your browser type. We keep it 395 days, and it stops when you turn analytics off (see Cookies and analytics).
• Email opens and clicks: emails with an unsubscribe link carry a tracking image and tracked links, so we can see whether a message was opened and which links were clicked. We use this to measure our email and to decide who keeps getting it. Login codes, receipts and shipping notices are not tracked.
• Where you first came from: if your first visit came from a link that names its campaign, or from one of our ads, we keep that campaign and the ad’s click ID (Google’s, Meta’s or LinkedIn’s) with your account when you sign up, so we can tell which campaigns bring people. It is deleted with your account.
• Which partner sent you: if you buy after following a link from one of our partners, we keep which partner it was so we can pay them a commission. They see the sale and its amount, not your name or email. It is deleted with your account.

How we use information

• To provide and improve the service.
• To send transactional email (login codes, receipts, course updates).
• To send marketing email about the book, with an unsubscribe link in every message. In the EU, the UK, Switzerland and Canada we send it only if you tick the box when you create your account. Everywhere else, creating an account from the sign-up screen, which says so under the button, signs you up for it. You can also turn it on or off in your account settings.
• To answer your questions in the AI tutor and support chat. Your question, the relevant passage from the book, and a summary of your progress are sent to our AI provider to generate a reply, see Sharing below.
• To fulfil and ship orders, and to calculate sales tax and shipping.
• To enforce our Terms and prevent abuse.
• To comply with legal obligations.

Sharing

We do not sell or share your personal information for advertising, and we do not use your data to train third-party AI models. We share data only with the service providers below, only as needed for them to perform their function, and we may disclose information if required by law.

• Authorize.net, payment processing. Card details are entered in their hosted form and never reach our servers.
• Mailgun: delivery of transactional and marketing email.
• Anthropic: powers our AI tutor and support chat. When you ask a question, your message and the relevant textbook passage are sent to Anthropic to generate an answer, along with a summary of your progress in the book so the answer fits where you are. It also writes the smart grader’s AI help when you ask about a check you missed twice: that check, the figures from your uploaded report, and the book’s steps for it are sent, never your name or email. The Context Lab exercise sends what you type in it to Anthropic for a reply; we do not keep those messages.
• Voyage AI, converts textbook passages and your search queries into the numeric form that makes book search and the tutor work.
• FedEx, shipping rates and address verification. If you order a printed book we send your delivery address to check it is deliverable.
• AccuTrack: our print fulfillment partner. They receive the name, delivery address, email, and contents of physical orders so they can ship them.
• Amazon Web Services and Cloudflare, hosting, storage, and protection against attacks and abuse.
• Sentry: error monitoring. Technical error reports can include an account identifier.
• Slack: internal staff alerts, such as a new contact-form message or a support question the chat could not answer.

The current list, with what each provider receives and where, is on our sub-processor page.

If we add or change a provider that handles personal information, we will update this list.

Cookies and analytics

We use a small number of cookies that are necessary to run the site, keeping you signed in, remembering your reading position, and protecting forms against abuse. These cannot be turned off without breaking the site, and they are not used for advertising.

Cloudflare, which delivers this site, counts page loads and how fast each page loads (Cloudflare Web Analytics). It sets no cookie, does not use your IP address or browser details to identify you, does not follow you across sites, and does not count visitors in the European Union. Because it identifies no one, it runs without asking.

Our own page-view log (see Technical data) runs on our servers, not a third party’s. It stops when you turn analytics off in Cookie settings or on your account, or when your browser sends Global Privacy Control.

Google Analytics tells us more about how pages and tools are used. It sets its own cookies (named _ga) to recognise a returning browser. Where it runs depends on where you are:

• In the European Economic Area, the UK and Switzerland, Google Analytics does not load at all unless you accept it in the banner shown on your first visit.
• Everywhere else, it runs by default, and you can turn it off.
• For a student in an instructor’s class, or inside a school’s learning system, it never loads at all.

Wherever you are, you can change your mind at any time from Cookie settings, which is also at the foot of every page. Turning it off stops Google Analytics and our own page-view log, removes Google’s cookies, and does not limit any feature. Signed in, you can also turn analytics off for your account in My account → Profile & password. We do not use Google's advertising features, advertising cookies, third-party ad networks, or cross-site tracking.

Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as turning analytics off, and Google Analytics does not run unless you allow it in Cookie settings. We do not respond to the older “Do Not Track” signal, which has no agreed meaning.

Your rights

You can download a copy of your data or delete your account yourself from My account → Profile & password. You can opt out of marketing email using the unsubscribe link in any marketing message, or from the same settings page. Transactional email (login codes, receipts, shipping notices) is not marketing and continues while your account is open.

You may also ask us to correct information that is wrong, or ask what we hold, by emailing [email protected]. We will not treat you differently for exercising any of these rights.

California privacy rights

If you live in California you have the right to know what personal information we collect and why, to request a copy of it, to ask us to correct or delete it, and to not be discriminated against for asking. The categories we collect and our purposes are listed above; the self-service tools described under Your rights are how you exercise those requests, and they are open to everyone, not just California residents.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of on that front.

Student records and schools

When a college, school, or instructor uses Questiva with a class, the enrolled learner’s name, email, progress, and assessment results are visible to the instructor who owns that group, and to administrators at the institution that bought the access. We treat that information as belonging to the institution, not to us: we use it only to provide the service they purchased, we do not sell it, and we do not use it for advertising or to build a profile for any purpose other than the learner’s own progress.

If you open Questiva from your school’s learning system (such as Canvas or Moodle), we send your scores and completion back to it, so your instructor sees them in its gradebook.

An instructor who has bought seats for their class can also create an account on a student’s behalf and hold the initial password, so that a student who cannot reach their email can still sign in. That password is single-use: the student is required to choose their own before the account can be used for anything, and the instructor has no way to sign in as them afterwards. We record which instructor created each account, and the student is told who did.

Where an institution is subject to the Family Educational Rights and Privacy Act (FERPA), we act as a “school official” with a legitimate educational interest and follow the institution’s direction on retention and deletion. An institution can request export or deletion of its learners’ records by emailing [email protected]. We offer a written data protection agreement for institutional purchasers on request.

Data retention

We keep your account data while your account is open. When you delete your account we erase your profile and personal details. We keep order records, including the billing and shipping addresses on them, for as long as accounting and tax rules require.

Some records are deleted after a set time, whether or not you close your account:

• the page-view log, after 395 days;
• report files you upload to the smart grader, after 180 days (the grade stays), and the attempt itself after 365 days;
• support chat, after 365 days when you were signed in, or 90 days as a guest.

Deleted records can remain in our encrypted backups for up to 90 days, until those backups expire.

Security

Connections to Questiva are encrypted with TLS. Passwords (when used) are stored as salted bcrypt hashes. We monitor for unusual login activity and rate-limit authentication endpoints. No system is perfectly secure; please use a unique password.

Age

Questiva is built for college, vocational, and professional learners. It is not directed to children, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, email [email protected] and we will delete it. Instructors running a class that includes learners under 13 must contact us before enrolling them, so we can put the right agreement in place first.

Changes to this policy

We may update this policy as the product evolves. Material changes will be announced by email to active account holders before they take effect.

Contact

Questions about this policy or your data? Email [email protected].