Privacy Policy
Last updated: November 2026
1. Who we are and what this policy covers
CPRehearsal (cprehearsal.com) is operated by CPRehearsal LLC. CPRehearsal is an educational tool that lets veterans rehearse a VA Compensation and Pension (C&P) exam with an AI examiner. It does not provide medical care, medical advice, legal advice, or claims representation, and it is not affiliated with or endorsed by the U.S. Department of Veterans Affairs. This policy explains what information we collect when you use the site, how we use it, who we share it with, and the choices you have. If you sign in with Google, we receive your name and email address from Google.
2. Information we collect
Account information. Your email address and password when you create an account. If you sign in with Google, we receive your name, email address, and profile picture from Google and use them only to create and secure your account. Rehearsal content. The condition or conditions you choose to rehearse, everything you type during a rehearsal, and the reports we generate from those rehearsals. Because you may describe symptoms, medical history, treatment, or military service, we treat rehearsal content as health-related information and protect it as described in this policy. Purchase information. Your plan, purchase date, amount, and an order reference. Payments are processed by Stripe. We never see or store your full card number. Technical and usage information. IP address, browser and device type, pages visited, referring site, and the actions you take on the site, collected through cookies and similar technologies described in sections 7 and 8.
3. How we use your information
To create and secure your account, run rehearsals and generate reports, process your purchase and give you access to the plan you bought, send account-related emails such as email confirmation and receipts, answer your questions, keep the service reliable and secure, and understand how visitors find the site and whether our advertising works. We do not use your rehearsal content to advertise to you, and we do not send it to any advertising or analytics provider.
4. We do not sell your information
We never sell or rent your personal information.
5. Service providers we use
We share information only with the providers that run the service, and only as needed for that purpose: Supabase: database, authentication, and file storage, with data encrypted at rest. Stripe: payment processing. Resend: transactional email such as confirmation emails and receipts. Anthropic: the AI model that plays the examiner and writes your report. Your rehearsal content is sent to Anthropic only to generate examiner responses and reports. Google: Sign in with Google, Google Tag Manager, Google Analytics, and Google Ads. Lovable and Cloudflare: website hosting, security, and DNS. Each provider is bound by its own terms and privacy policy and may process data in the United States.
6. HIPAA does not apply to CPRehearsal
CPRehearsal is not a healthcare provider, health plan, or business associate under the Health Insurance Portability and Accountability Act (HIPAA), and HIPAA does not govern the information you share here. We protect your information under the practices described in this policy and under applicable federal and state consumer privacy laws. Do not enter information you are not comfortable storing with an online service, such as your Social Security number or VA file number. A rehearsal works just as well without them.
7. Analytics and advertising
CPRehearsal uses essential cookies for sign-in and sessions. We also use Google Tag Manager, Google Analytics and Google Ads cookies to measure visits and how our ads perform. When you buy, a hashed (scrambled) version of your email address may be sent to Google to measure ad conversions. We never send your rehearsal answers or reports to advertisers. You can turn off personalized Google ads at adssettings.google.com.
8. Cookies
Essential cookies keep you signed in and keep the site secure; the site cannot work without them. Analytics and advertising cookies, described in section 7, are optional and can be blocked in your browser.
9. How long we keep your information
We keep your account, rehearsal transcripts, and reports while your account exists so you can return to them. You can delete them at any time by deleting your account (section 10). Purchase records are kept for as long as tax and accounting laws require. Technical logs are kept for a limited period for security and troubleshooting.
10. Your choices and rights
You can ask us at any time to send you a copy of your information, correct it, or delete your account and all rehearsal content and reports tied to it. Email dprotaziuk@veteranmedicalopinions.com from the address on your account. We respond within 7 business days. Deleting your account removes your transcripts and reports from our systems; purchase records required by law are kept by Stripe and in our accounting records. If you disagree with how we handle a request, reply to our response and we will review it again.
11. Consumer health data notice (Washington, Nevada, Connecticut, and other states with consumer health data laws)
The condition you choose and the content of your rehearsals and reports are consumer health data. We collect it directly from you, only when you choose to enter it, and we use it only to run your rehearsals, generate your reports, and support you. We share it only with the service providers listed in section 5 that are necessary to provide those functions, and we do not sell it or share it for advertising. You can withdraw consent and delete this data at any time using the contact in section 10. Residents of these states have the right to confirm whether we hold their consumer health data, to access it, to delete it, to withdraw consent, and to appeal our decision on a request by replying to our response.
12. Security
We use encryption in transit (HTTPS) and at rest, and we limit access to your information to what is needed to operate the service. No online service can guarantee complete security. If a security incident affects your information, we will notify you as required by law.
13. Children
CPRehearsal is for adults 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.
14. Changes to this policy
We will post any changes here and update the date at the top. If a change materially affects how we handle rehearsal content, we will notify you by email before it takes effect.
15. Contact
CPRehearsal LLC dprotaziuk@veteranmedicalopinions.com