Privacy Policy

DriversEdPro, owned and operated by Corebytes LLC

This Privacy Policy describes how Corebytes LLC ("we," "our," or "us"), the owner and operator of DriversEdPro ("the Platform," "Service," or "Software"), collects, uses, maintains, and discloses information collected from users ("you," "your," or "User") of our driver education software platform. DriversEdPro is a software platform that provides driver education tools and services to driving schools and their students. By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

1. Introduction

We built DriversEdPro to help schools manage instruction, coursework, scheduling, and related workflows. Protecting personal information is part of that responsibility. This policy explains what we collect, why we collect it, who we share it with, how we secure it, and the choices you have. It works together with our Terms of Service and Cookie Policy. If you do not agree with this policy, you should not use the Service.

Corebytes LLC operates the Platform primarily for schools and users in the United States. Our practices are designed to align with applicable U.S. federal and state privacy, security, education, and consumer-protection requirements. Section headings that reference foreign laws (for example, the GDPR) apply only to individuals in those jurisdictions when we have a legal obligation; they do not limit the U.S.-focused terms in our Terms of Service.

1.1 United States legal framework (informational)

The following statutes and regulatory frameworks are representative of the U.S. legal environment that shapes our policies. This list is not exhaustive and does not create private rights of action or third-party beneficiary status.

• Federal Trade Commission Act — unfair or deceptive acts or practices affecting commerce, 15 U.S.C. § 45(a), and related FTC guidance on data security and advertising.
• Children's Online Privacy Protection Act (COPPA) — collection of personal information from children under 13 online, 15 U.S.C. §§ 6501–6506 and 16 C.F.R. Part 312.
• Electronic Communications Privacy Act (ECPA) — including provisions on stored communications, 18 U.S.C. §§ 2701–2712.
• CAN-SPAM Act — commercial email, 15 U.S.C. §§ 7701–7713.
• Family Educational Rights and Privacy Act (FERPA) — 20 U.S.C. § 1232g; 34 C.F.R. Part 99 — applies to certain educational agencies and institutions that receive U.S. Department of Education funds. Some schools using the Platform may also be subject to state pupil-records or driver-school recordkeeping rules. Where a school is an independent controller, it is responsible for its own notices and lawful bases; we process personal information as described in this policy and in our agreements with the school.
• Driver's Privacy Protection Act (DPPA) — 18 U.S.C. § 2721 et seq. — restricts certain uses of personal information obtained from state motor vehicle records; schools and users remain responsible for lawful collection and use of license-related data.
• California Consumer Privacy Act / California Privacy Rights Act — California Civil Code §§ 1798.100 et seq., for California residents where applicable.
• State data-breach notification laws — all U.S. states, the District of Columbia, and certain territories require notice of unauthorized acquisition of personal information in defined circumstances; we maintain procedures to comply when we are the notifier.

1.2 Misuse, fraud, and cooperation with authorities

We may preserve logs, cooperate with law enforcement and regulators when legally required or permitted, and pursue civil remedies (including under the Computer Fraud and Abuse Act, 18 U.S.C. § 1030, and intellectual property statutes) when misuse of the Platform harms users, schools, or Corebytes LLC. Payment fraud, abusive chargebacks, and false disputes may result in account termination and monetary charges as described in our Terms of Service.

2. Information we collect

2.1 Personal information

We may collect the following types of personal information, depending on how you use the Platform and what your school enables:

2.2 Information we do not collect on our own systems

• We do not store full payment card numbers on DriversEdPro servers.
• We do not store bank account credentials for card payments.
• We do not collect Social Security numbers unless a school or regulator specifically requires that flow for compliance you have agreed to separately.
• We do not collect biometric identifiers as a standalone category.
• We do not collect health information except where you or your school voluntarily provide information relevant to driver education or safety, consistent with applicable law.

2.3 Location services, geolocation, and approximate place data

Some features rely on knowing where a device is, or where a school is on a map. This section explains those flows in plain language.

Browser or device geolocation. When a feature asks to use your location, your browser or device shows a permission prompt. If you approve, the operating system or browser may share latitude and longitude with our application so we can provide the feature you asked for. Examples include optional live location during approved instructional or safety workflows that your school turns on, contextual tools that benefit from a coarse location, or map views that center on a point you choose. You can revoke location permission at any time in your browser or device settings. If you deny permission, the feature may not work as designed, but the rest of the Platform usually will.

Accuracy and retention.GPS and network location vary by device, environment, and carrier. We treat location associated with instructional features as operational data for the school that purchased the service. Retention follows the school's instructional needs, our agreements with the school, and legal recordkeeping obligations. We do not sell location history.

Address and map pins.Schools may enter structured mailing or facility addresses and optional map pin fields so administrators can align maps with a parking lot, office, or classroom entrance. Address search may call public geocoding services (for example OpenStreetMap Nominatim) to suggest coordinates. Those requests are governed by the third party's terms and privacy policy.

IP-based estimates. Like most web services, we may derive coarse region or city from IP addresses for security, fraud prevention, diagnostics, and aggregate analytics. That is not the same as continuous GPS tracking.

3. How we use your information

3.1 Primary uses

3.2 Communications

• Course-related notifications (email, in-app, and SMS where you opt in)
• Important platform updates
• Customer support responses
• Educational resources your school chooses to send
• Administrative announcements

3.3 SMS text messages and phone numbers

When you enroll or update your profile, you may provide a mobile phone number. If you separately consent to SMS during enrollment or in-product opt-in flows, we and your enrolled driving school may send automated text messages to that number through our messaging infrastructure (currently Twilio), using U.S. toll-free or other numbers assigned to DriversEdPro or your school's configured sender.

Types of SMS you may receive(depending on your school's use of the Platform):

• Lesson reminders and booking confirmations for behind-the-wheel training
• Cancellation or schedule-change alerts for drives and classes
• Notices that a drive was completed or that action is needed in the student portal
• Payment, balance, attendance, or document reminders your school sends through our tools
• Occasional service messages about your account or enrollment

We do not sell your phone number to unrelated marketers. Schools send messages only in connection with their programs. Message frequency depends on your activity and school settings. Message and data rates may apply.

How to opt out. Reply STOP to any automated text we send to end messages from that sender line. Reply HELP for help. You may also contact your driving school. Opting out of SMS does not delete your account or remove email or in-app notices your school may still send through other channels.

We may retain message delivery logs (for example, date, sender, and delivery status) as described in our retention practices to support schools, troubleshooting, and legal compliance.

4. Information sharing and disclosure

4.1 We do not sell your personal information

Corebytes LLC does not sell, trade, or rent your personal information to third parties for independent commercial marketing lists.

4.2 Authorized disclosures

5. Payment processing with Intuit QuickBooks

Schools and students may pay fees through flows that Intuit QuickBooks Payments operates. Card and bank payment details are collected by Intuit, not stored on DriversEdPro application databases as full card numbers. We may receive limited transaction metadata needed for receipts, reconciliation, and support, such as confirmation of success, amounts, timestamps, and last-four digits where Intuit exposes them for display.

• Payment card and bank data are transmitted directly to Intuit under its security program.
• We do not maintain a vault of full card numbers on our servers.
• Intuit maintains its own compliance program for payments.
• Refunds and disputes follow Intuit and your school's published policies.
• For payment-specific privacy questions, also review Intuit's privacy materials.

5.1 Taxes, amounts, and transaction metadata

Schools configure prices, line items, and tax behavior in connected billing tools. Corebytes LLC does not warrant the accuracy of any tax rate, tax label, exemption, or amount shown at checkout or on receipts. We are not liable for incorrect, excessive, or unlawful taxes charged by a school, processor, or government, nor for penalties or interest arising from tax reporting. We may receive limited transaction metadata (for example, timestamps, amounts, last-four card digits, and status flags) for support and audit; that metadata is not a substitute for your own tax records.

6. Data storage and security

6.1 Security measures

• Encryption of data in transit and at rest where appropriate for the architecture
• Secure server environments from reputable cloud providers
• Regular security reviews and dependency maintenance
• Access controls and authentication
• Employee and contractor confidentiality expectations
• Incident response procedures

6.2 Data retention

• Active account data is retained during enrollment and normal school operations
• Completed course records may be maintained per state or school requirements
• Inactive accounts may be archived or deleted according to contract and law
• Marketing preferences are stored until you withdraw consent where marketing applies
• Legal hold data is retained as required

6.3 International data transfers

If you are located outside the United States, your information may be transferred to and processed in the United States, where our primary service providers operate.

7. Your rights and choices

7.1 Access and control

• Access your personal information where the law provides
• Correct inaccurate information
• Request deletion, subject to legal and contractual exceptions
• Withdraw consent for optional processing where consent was the lawful basis
• Request a portable copy where applicable law requires
• Restrict certain processing where applicable law provides

7.2 Communication preferences

• Unsubscribe from marketing emails when we send marketing
• Adjust notification settings inside the product where available
• Opt out of non-essential communications when those choices exist

7.3 Account management

• Update profile information your role allows
• Change your password
• Review course progress
• Download completion certificates when your school enables that feature

8. Cookies and tracking technologies

We use cookies and similar technologies for session management, authentication, preferences, security, and performance measurement. You can control cookies in your browser. Disabling strictly necessary cookies may break login or session features. See our Cookie Policy for more detail.

9. Children's privacy

Our service is intended for individuals who are at least 13 years old or the minimum age required for driver education in their jurisdiction. For users under 18, schools or parents may need to provide consent or information consistent with local law.

10. Limitations of liability relevant to privacy

DriversEdPro provides software tools and educational technology. We are not responsible for the independent privacy practices of each driving school, instructor, or third-party integration the school enables. Schools remain responsible for notices they give their families and for lawful processing agreements they maintain.

We are also not responsible for:

• The quality of instruction provided by driving schools
• Individual driving school policies or practices
• Student performance or comprehension
• Driving test results or license issuance
• Accidents, incidents, or violations that may occur on the road
• The accuracy, completeness, or effectiveness of third-party educational content or links surfaced through the Platform
• Temporary service interruptions, data loss due to technical issues beyond our reasonable control, device incompatibility, or failures of third-party services such as hosting or payment networks
• Incorrect tax determinations, duplicate charges, chargebacks, or payment reversals initiated by users, banks, or processors, except as required by non-waivable law
• Retention or deletion decisions by your school that conflict with your expectations; exercise rights with the school where it acts as controller

11. State-specific privacy rights

11.1 California residents (CCPA and CPRA concepts)

• Right to know categories and specific pieces of personal information collected
• Right to delete, with exceptions
• Right to opt out of sale, which we do not conduct as described above
• Right to non-discrimination for exercising rights
• Right to correct inaccurate information where applicable

11.2 European residents (GDPR concepts)

• Lawful basis for processing, including contract, legitimate interests, legal obligation, and consent where used
• Data portability where applicable
• Right to object to certain processing
• Right to lodge a complaint with a supervisory authority

11.3 Other states

Other states continue to pass consumer privacy laws. If you believe you have rights we have not addressed here, contact us and we will work through your request in good faith according to applicable law.

12. Updates to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal or regulatory requirements, new features, and user feedback. We will post the updated policy, revise the effective date, and use reasonable notice methods such as email or in-product announcements for material changes.

13. Legal basis for processing

• Contractual necessity to provide the Service schools purchase
• Legitimate interests in securing, improving, and measuring the Platform
• Legal compliance with educational and regulatory requirements
• Consent for optional features and communications where we rely on consent

14. Third-party links

Our platform may contain links to external websites. This Privacy Policy does not apply to third-party sites. Review their policies before sharing information.

15. Data breach notification

If a breach affects your personal information, we will follow applicable breach notification laws, which may include notifying affected users, regulators, and partners, describing what happened, and recommending protective steps.

16. Business transitions

If we merge, are acquired, or sell assets, information may transfer to a successor that agrees to protect data consistent with this policy or provides notice and choice as the law requires.

17. Governing law

For Corebytes LLC's own contractual and policy disputes, the governing law and venue provisions in our Terms of Service apply to the maximum extent permitted. For privacy-specific claims, substantive issues may also be governed by the laws of the U.S. state in which you reside or, for schools, the state where the school operates, without regard to conflict-of-law principles that would produce an unreasonable result, except where a comprehensive state privacy statute designates otherwise.

Document version 1.2. Last updated April 17, 2026.