CDL Greenlight
CDL GREENLIGHT

Privacy notice.

Effective 7 October 2026.

CDL Greenlight is responsible for the personal information described here. This notice explains what we collect when you visit the site, use the free practice or buy the course, why we collect it, who receives it and what you can do about it.

In short

Payments and course access

Stripe hosts checkout and processes payment details. We use your checkout email, Stripe customer and payment identifiers, payment status and refund or dispute status to verify paid access. We do not receive your full card number. Stripe handles its own payment processing under its privacy policy.

Secure access links

If you request an access link, we use the email you provide to look up a qualifying purchase. Access emails are sent through AgentMail to the recorded purchaser address. Signed access links expire after one hour. Buying the course does not subscribe you to marketing lists.

Readiness report by email

After the free practice you can ask for your result by email. We use the address you enter to send that report through AgentMail, our email provider, which keeps a record of the message. We also keep the address on our contact list at Resend, our second email provider, with the date, the page where you entered it and the notice shown there, and we may email you about the course. Every email carries an unsubscribe link, and one visit to it ends all further email. We do not send the address to our analytics or advertising providers.

Mock exam record

When you finish a mock exam in the paid course, we save with your Stripe payment record: which test it was, the date and time, the score, whether it counts as passed and a random number that identifies that sitting. We also keep per test how many mocks you took and passed, your best score and the date of your latest pass. The record holds about 120 mocks; when it is full, the oldest mocks that did not count as passed are removed and the totals stay. We use this record to show your progress on any device and to check a pass guarantee claim.

Cookies and progress

Essential, signed cookies protect forms and remember verified course access. Your lesson progress, answers and mock-test timing are stored locally in your browser; the result of each finished mock exam is also saved as described above. Progress does not sync between devices. You can reset it from the course or clear your browser storage. Clearing cookies may require an access link to reopen the course.

We also measure how the site is used, so we can improve the pages: a random browser-session identifier that expires after 30 minutes of inactivity, the pages and steps used, scroll position, screen size, country, campaign labels from the link you arrived by, and whether a purchase was completed. These events go from our server to PostHog, our analytics provider in the United States, which processes them under its privacy policy and keeps them for up to one year. Your browser only talks to this site; we do not send your IP address, email, name, payment details or any advertising identifier to the analytics provider, and no profile is built across visits. The session identifier is stored in a cookie named pt_an for 30 minutes after your last page view. Turning off measurement below, or a Global Privacy Control or Do Not Track signal, stops this measurement and deletes that cookie.

Campaign sources

When a link to the homepage or free practice includes campaign identifiers, we remember the first valid source, medium, campaign and creative identifiers in your signed browser session and attach them to the Stripe checkout record if you buy. These identifiers help us understand which campaigns brought customers. Clearing your browser session or changing devices can lose this attribution.

Advertising measurement and your choices

You can turn off the site-usage measurement below. Buying and course access will continue to work. We also respect Global Privacy Control and Do Not Track signals. We do not measure visitors known to be in the EEA, United Kingdom or Switzerland through this integration. Your saved choice applies to future checkouts in this browser session. Clearing session cookies can reset it. It does not recall events already submitted or sync to other devices.

You can turn off advertising measurement here.

Google Ads purchase measurement is not currently enabled. Buying and course access do not depend on advertising measurement.

Logs and providers

Our hosting provider, Railway, and security or performance services may process connection details, including IP addresses and request times, to operate and protect the service. Our hosting setup can include Cloudflare performance measurement. Payment records are retained by Stripe and access email records by our email provider. These providers may process data outside your country. Advertising measurement records stored with a purchase are retained with the payment record, subject to applicable retention requirements.

Why we use it

We use personal information to perform our contract with you (payment, access, the mock exam record, the pass guarantee and support), to meet legal duties (tax and accounting records), and for our legitimate interests in keeping the service secure, preventing fraud and understanding which pages and campaigns work, in the limited way described above.

How long we keep it

Payment and purchase records, including the mock exam record and any guarantee claim with the result you sent us, are kept for as long as your access exists and afterwards for as long as tax, accounting and limitation rules require, normally up to seven years. Emails you send us are kept for up to three years. The address for a readiness report is kept in our email provider's record of that message. Server logs are kept by our providers for a short period for security.

Where it is processed

Our providers process information in the United States and other countries, which may have data protection rules different from those of your country. Where the law requires it, transfers rest on the safeguards those providers offer, such as standard contractual clauses.

Your rights

You can request access to, correction of or deletion of personal information we control, including advertising measurement records, and you can object to or ask us to restrict a use. We may retain records needed for payments, fraud prevention or legal obligations. Deleting purchase information may affect access. Browser progress is controlled directly on your device.

If you live in California or another US state with a privacy law, you have the right to know what we hold about you, to have it corrected or deleted, and not to be treated differently for using these rights. We do not sell personal information and do not share it for cross-context behavioral advertising, and we do not use sensitive personal information beyond what is needed to provide the course. To use a right, write to us from your purchase email so that we can verify the request; we answer within 45 days. You may also complain to the data protection or consumer authority where you live.

Children

The course is for adults preparing for a commercial driver license. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, write to us and we will delete it.

Security

Connections to the site are encrypted, access links are signed and expire, and payment details are handled only by Stripe. No service can promise absolute security; if a breach affects your information we will tell you as the law requires.

Changes to this notice

When we change how we use personal information we update this notice and its effective date. For a material change that affects purchasers we send an email to the purchase address.

Contact

For privacy questions or requests, email support@cdlgreenlight.com.