Privacy and Personal Data Protection Policy

M2Base LLC, operator of M2Examen and the Examen Élite brand (collectively, “M2Examen,” “we,” “us,” or the “Platform”), recognizes the importance of privacy and is committed to handling personal information lawfully, transparently, reasonably, and proportionately. This Policy explains what information we collect, where it comes from, how we use it, with whom it may be shared, how long it is retained, and what choices each user may exercise.

This Policy applies to the website, student accounts, catalog, courses, quizzes, practice or guarantee exams, support services, communications, and other functions associated with M2Examen. By creating an account, making a purchase, or using the Platform, the user acknowledges having access to this Policy. When the law requires specific consent, it will be requested separately and in a verifiable manner.

1. Data controller and scope

M2Base LLC determines the primary purposes for processing personal information obtained through M2Examen. For privacy questions or requests, users may write to contact@m2exams.com. This Policy does not replace additional notices that may appear when using a particular feature and does not govern the independent practices of external websites linked from the Platform.

2. Essential definitions

For this Policy, “personal information” means information linked or reasonably linkable to an identified or identifiable person. “Processing” includes collecting, recording, organizing, storing, accessing, using, transmitting, protecting, correcting, deleting, or performing any similar operation. Aggregated or reasonably deidentified information that cannot be associated with a person without disproportionate effort is not considered personal information to the extent permitted by law.

3. Categories of information we may collect

• Identification, account, and contact: first name, last name, email address, user identifier, state, country, preferences, and other information needed to create or administer an account.
• Authentication and security: passwords stored using cryptographic protection, sign-in attempts, credential changes, audit events, alerts, and signals used to protect the account.
• Academic activity: assigned or purchased courses, lessons visited or completed, progress, answers, grades, attempts, assessment duration, practice history, policy acceptance, and eligibility for academic or commercial features.
• Purchases and commercial relationship: product, price, discounts, coupons, currency, date, order status, refunds, extensions, payment processor identifiers, and information reasonably necessary for accounting and fraud prevention.
• Technical and usage information: IP address, browser, operating system, device type, requested pages, date and time, session identifiers, errors, performance, and security logs.
• Communications and support: messages, requests, comments, files, and any information the user chooses to provide when requesting assistance.
• Guarantee claims: official score report and documentation needed to verify compliance with the guarantee. We recommend redacting identification numbers and other unnecessary data.
• Sponsored or organizational access: associated company, employer, school, group, or sponsor, access code, assignment status, and, when disclosed in advance, limited participation or progress reports.

As an ordinary condition of study, we do not request full Social Security numbers, biometric information, medical records, or complete card information. If a user voluntarily includes sensitive information in a communication or document, we will process only what is necessary to resolve the request and may ask for a redacted copy.

4. Sources of information

We may obtain information directly from the user; automatically when the Platform is used; from a payment processor when it confirms a transaction; from an organization that legitimately sponsors or administers access; or from providers that help us prevent fraud, maintain security, and provide the service. We do not purchase personal data sets to sell profiles or enrich accounts for targeted advertising.

5. Purposes of processing

We process personal information only when there is a reasonable business or legal purpose related to the Platform. These purposes include:

• Creating, authenticating, administering, and recovering accounts.
• Completing purchases, granting access, and carrying out the contractual relationship with the student.
• Saving progress, answers, and results; applying navigation rules; and displaying histories, statistics, and academic recommendations.
• Processing payments, coupons, billing, extensions, cancellations, refunds, and reconciliations.
• Responding to inquiries, providing support, and verifying requests related to the Guarantee Exam.
• Detecting shared accounts, fraud, improper chargebacks, unauthorized copying, assessment manipulation, abuse, or technical attacks.
• Sending operational communications about the account, access, payments, security, important changes, or requested services.
• Measuring stability, accessibility, and performance, correcting defects, and improving the experience using aggregated or deidentified information whenever possible.
• Complying with accounting, tax, contractual, regulatory, judicial, and record-retention obligations.
• Establishing, exercising, or defending rights and protecting users, M2Base LLC, and third parties from harm or unlawful activity.

M2Examen may apply automated rules to ordinary functions such as saving progress, calculating results, enabling a lesson, limiting attempts, or detecting security signals. We do not use those rules to make automated decisions producing legal effects unrelated to providing the service without appropriate intervention or review.

6. Payments and Stripe

Payments may be processed by Stripe. Complete card information is entered into the processor’s secure components and is not stored by M2Base LLC. We may receive and retain limited transaction information, such as a customer or order identifier, card brand, last four digits, status, date, amount, and antifraud signals. Stripe’s processing as an independent provider is also governed by its own terms and privacy notices.

7. Providers, organizations, and other disclosures

We do not sell personal information, operate as a data broker, or use academic activity for targeted advertising based on user behavior across unaffiliated sites. We may disclose limited information to the following categories of recipients, always for a legitimate purpose:

• Service providers: hosting, cloud, database, security, backup, transactional email, technical support, operational analytics, and payment processing, under appropriate instructions and contractual safeguards.
• Sponsoring organizations: when access has been purchased or assigned by an employer, school, or other organization, we may share data reasonably necessary to administer licenses and, if disclosed, verify participation, progress, or completion. We will not provide detailed exam answers absent legitimate need, authorization, or legal requirement.
• Professional advisers: attorneys, accountants, auditors, insurers, and consultants subject to confidentiality duties.
• Authorities or protected parties: when required by a valid law, order, or process; to investigate fraud; enforce our terms; or protect the rights, property, safety, and integrity of people or systems.
• Corporate transactions: in a merger, financing, acquisition, reorganization, or asset transfer, with reasonable measures to preserve confidentiality and provide notice of material changes when appropriate.

We require providers to limit access to what is necessary and reasonably evaluate their role. However, each external service may have its own legal obligations regarding the information it processes.

8. Cookies and necessary technologies

We use cookies and technical identifiers needed to begin and maintain a session, remember preferences, protect forms, balance operations, and prevent unauthorized access. We currently do not use cross-site behavioral advertising cookies. Users may configure their browsers to block or delete cookies, but strictly necessary cookies are required to sign in, complete assessments, and preserve certain functions.

9. Retention and deletion

We retain each category only for the time reasonably necessary for the stated purpose or a legal obligation. Duration may vary depending on the relationship with the user and the nature of the record:

• Account information and academic history may be retained while the account remains active and for a reasonable period afterward to restore access, document results, or address disputes.
• Orders, payments, refunds, and receipts are retained for applicable accounting, tax, and fraud-prevention periods.
• Relevant acceptance and audit records are retained at least for M2Examen’s established operational period and longer when necessary for security, compliance, or defense of rights.
• Communications and guarantee documents are retained while the request is handled and for a reasonable period to document the decision or meet obligations.

When information is no longer needed, we seek to delete, anonymize, or securely isolate it. Backup deletion may occur gradually according to technical cycles. A deletion request does not require us to erase data that must be retained for law, security, fraud prevention, accounting, disputes, or the exercise of rights.

10. Security measures

We apply reasonable administrative, technical, and organizational safeguards, which may include encryption in transit, role-based access controls, cryptographic password protection, audit logs, backups, monitoring, environment separation, dependency review, and response procedures. Users must also use strong passwords, keep them confidential, sign out of shared devices, and notify us immediately of suspected unauthorized access.

No transmission or storage system is completely infallible. Therefore, this Policy is not a guarantee of absolute security, but a commitment to maintain measures proportionate to the type of information, the context, and reasonably foreseeable risks.

11. Security incidents

If we identify an incident compromising personal information, we will investigate its nature and scope, seek to contain it, correct reasonably identified vulnerabilities, and document the response. When applicable law requires it, we will notify affected individuals and competent authorities within the required time and through the appropriate means.

12. Privacy rights and choices

Depending on the place of residence and applicable law, a user may have the right to:

• Confirm whether we process personal information and obtain access to it.
• Correct inaccurate personal information.
• Request deletion of information provided by or obtained about the user, subject to legal exceptions.
• Obtain a portable copy of certain information in a technically feasible format.
• Opt out of data sales, targeted advertising, or certain profiling when those activities exist and the law grants that right. M2Examen currently does not sell data or use cross-site targeted advertising.
• Withdraw consent when processing depends on it, without affecting the lawfulness of prior operations.
• Appeal the denial of a request and not receive discriminatory treatment for exercising a right.

13. How to submit a request

To exercise a right, write to contact@m2exams.com with the subject “Privacy Request.” Include your name, the email associated with the account, state of residence, the right you wish to exercise, and sufficient detail to locate the information. Do not send passwords, complete card numbers, or identity documents unless requested through an appropriate channel.

We may reasonably verify identity and authority before responding. If we cannot verify a request, we will explain the limitation when possible. An authorized agent may act for a consumer when the law permits and authority is established. We will respond within the period required by applicable law and provide instructions for appealing a decision. An appeal will be reviewed by a different person or through an appropriate second evaluation.

14. Notice for Texas residents

When the Texas Data Privacy and Security Act applies, Texas residents may exercise the rights of access, correction, deletion, portability, and opt-out provided by that law, as well as the corresponding appeal process. The Texas Attorney General is responsible for enforcement. Official information is available through the Texas Attorney General’s website.

15. Minors

M2Examen is designed for individuals age 18 or older and is not directed to children under 13. We do not knowingly collect personal information from a child under 13. A parent or guardian who believes a minor provided information should contact us so we can investigate and delete it when appropriate. Users ages 13 through 17 may use the service only with the authorization and supervision of a legal representative and when the applicable offering permits it.

16. Processing and location of information

M2Base LLC and its providers may store or process information in the United States and other jurisdictions where their systems or equipment operate. In those cases, we seek to use reasonable providers and safeguards, recognizing that protection standards may vary among jurisdictions.

17. Third-party links and services

The Platform may contain links to government entities, academic resources, or other sites we do not control. Access to those resources is governed by their own policies. Including a link does not mean that M2Base LLC controls or assumes responsibility for the third party’s privacy practices.

18. Changes to this Policy

We may update this Policy to reflect legal, technological, commercial, or functional changes. We will publish the revised version with its effective date and, if a change is material, seek to provide prominent notice or request renewed acceptance before continued use of affected functions. Use after the effective date will be governed by the current version, without limiting any additional consent required by law.

Platform terms

By creating an account, purchasing, or using M2Examen, you accept these terms and the current policies displayed before a course begins.

Account and access

• Each account is personal, individual, and nontransferable. You must provide accurate information and protect your credentials.
• State courses are normally offered through a one-time payment and 45 days of access beginning when payment is confirmed. There is no automatic renewal.
• Expiration of access does not necessarily delete academic history. An extension or later purchase may restore access under the applicable offer.
• Coupons, business access, and promotions may have additional terms that are clearly communicated.

Educational purpose

M2Examen is an independent academic preparation platform. It is not a state agency, the Texas Department of Insurance, or the entity that administers the official exam. The Platform does not issue licenses, provide legal, tax, or insurance advice, or guarantee passage of the state exam. The only commercial guarantee is the one expressly described in the refund section.

Intellectual property and permitted conduct

The courses, questions, explanations, audio, designs, videos, documents, and M2Examen and Examen Élite marks belong to M2Base LLC or are used with authorization. A limited license is granted for personal study during the active access period.

You may not share accounts; copy, download, or redistribute question banks; record or resell classes; automate requests; evade controls; attempt to obtain hidden answers; interfere with the Platform; or use the content to create a competing product. We may suspend or terminate access for fraud, abuse, improper chargebacks, or material violation of these terms, subject to rights that the law does not permit us to limit.

Availability, changes, and liability

We may correct errors, update questions, and adjust features to reflect academic, technical, or regulatory changes. We will seek to keep the service available, but maintenance or interruptions may occur. To the maximum extent permitted by law, M2Base LLC is not responsible for state exam results, professional decisions, indirect losses, or use of the material outside its educational purpose. Nothing in these terms excludes rights or responsibilities that legally cannot be excluded.

Clear rules before purchasing

Digital course service begins when payment is confirmed and access is granted. Every refund is calculated from the amount actually paid after discounts, not the listed price.

Billing errors and initial cancellation

• A duplicate or clearly incorrect charge may be reported within 7 calendar days after purchase and, once verified, will be refunded in full.
• A voluntary cancellation may be requested within 7 calendar days if no more than 10% of the course has been completed and no chapter quiz, 50-question practice, final exam, or Guarantee Exam has been started.
• If M2Base LLC permanently cancels a product without providing a reasonable alternative, it will refund the corresponding portion of the unprovided service.

Guarantee conditions

1. The purchase must have been made directly from M2Base LLC and be paid, without a dispute, chargeback, or previous refund.
2. Before the state exam, the student must complete the required lessons and mini quizzes, the chapter quizzes, and earn 80% or more on one of the two permitted Guarantee Exam attempts.
3. The state exam must correspond to the same state and license type as the purchased course and must be taken within 30 calendar days after passing the Guarantee Exam.
4. The request must be sent to contact@m2exams.com within 7 calendar days after the state exam and include the account name, course, date, and a legible official score report.
5. The name on the report must match the account. We may verify authenticity and request reasonably necessary additional information while protecting the data received.
6. The guarantee is granted once per purchase and course. The student must choose between an extension and a refund; the benefits cannot be combined.
7. It does not apply to shared accounts, free access, fraud, altered documents, different exams, or material noncompliance with these terms.

Refund process

We will confirm receipt of the request and communicate the decision after verifying the information. Approved refunds are normally sent to the original payment method within 10 business days; the bank or processor may need additional time to post them. Related access is revoked when a refund is approved. This policy does not limit any mandatory right granted by applicable law.