Privacy Policy
Effective date: September 13, 2026 · Version 2026-09-13
This policy explains how Anesthesia Zone, LLC handles personal information for EMExaminer at emexaminer.com, including Emergency Medicine learning services, accounts, billing, and support.
1. Who we are and what this policy covers
Anesthesia Zone, LLC operates MedExam Network as a brand and is responsible as controller for the processing described in this policy, except where a provider acts independently for its own purposes. Our mailing address is 131 Continental Dr, Suite 305, Newark, DE 19713, United States. Contact us at [email protected].
EMExaminer is part of MedExam Network and is operated by the same company. This policy covers website visitors, learner accounts, study activity, purchases, and support for this specialty. Central payment and support administration may also involve MedExam Network. Separate specialty databases do not mean separate legal companies, and authorized personnel may access information for their duties. A request concerning another specialty should identify that specialty so we can locate the relevant records.
Our Terms of Service address use of the specialty website and central services. This privacy notice is not a request for consent to all processing it describes.
2. Information we collect
Information you provide: your name, email address, specialty or organization, messages, attachments, and information needed to answer an inquiry or investigate a payment. Correspondence may be handled in our website backend and Gmail after routing through Cloudflare.
Account information: email address, name, password credentials stored in protected form, verification status, security settings, and account events. When you choose Google sign-in, we receive your Google identifier, name, email, and verification information. We record the Terms version you accept, the time, acceptance source, specialty brand/domain shown, and the product when acceptance relates to a purchase.
Learning information: selected products and pathways, practice-session settings, questions attempted, written answers, scores, grading results, bookmarks, completion status, study time, and progress statistics. We use these records to provide and maintain your learning experience and support.
Billing information: customer and order identifiers, purchased service, billing contact and address, transaction amount and currency, subscription status, payment status, and payment-method details made available by Stripe, such as card brand and last four digits. Stripe processes payment credentials; we do not need your full card number or security code for support. We may receive billing events from Stripe and the relevant specialty platform.
Technical information: IP address, browser and device characteristics, requested pages, referring pages, timestamps, approximate location inferred from technical data, security events, and diagnostic details. Cookies, local storage, pixels, and similar technologies may also record identifiers, preferences, navigation, clicks, and advertising interactions, subject to the choices described below.
Where enabled with the required permissions, Clarity provides behavioral metrics, heatmaps, and session replay of website interactions. Session replay may cover public and authenticated app interactions. Sensitive fields, written answers, account identifiers, and payment information must be masked or excluded from replay. These are reconstructions of browser interactions, not recordings from your microphone or camera. Please do not enter patient-identifiable information, passwords, full payment credentials, or confidential clinical or examination material in support messages or other free-text fields.
We receive information directly from you, automatically from your browser, and from payment, infrastructure, analytics, and advertising providers. Specialty logos or other assets displayed on the directory can be requested from specialty domains before you click a link, exposing ordinary request information to those systems and their providers.
3. Why we use information
We use information to operate the website, respond to requests, administer purchases and subscriptions, investigate billing issues, prevent fraud and abuse, troubleshoot errors, maintain security, understand website use, and measure and improve advertising where permitted.
Where data-protection law requires a legal basis, we rely on performance of a contract or steps you request before a contract for relevant purchase and support activities; legal obligations for required accounting, regulatory, and compliance records; and legitimate interests for proportionate website administration, security, fraud prevention, and handling general inquiries, subject to your rights and interests.
We rely on consent where required for optional tracking, advertising, or other activities. We do not substitute a legitimate-interest claim for consent that cookie or other applicable law requires. You may withdraw consent without affecting the lawfulness of processing before withdrawal.
Support correspondence is used for operational support, not automatically enrolled in cross-brand email marketing. We do not use the specialty website's analytics to make decisions with legal or similarly significant effects about you solely by automated means. Advertising providers may use identifiers and activity to measure campaigns or personalize advertising under their applicable terms and your choices.
AI grading and operational logs
To evaluate a written answer, we may send the question, reference answer, and your response to paid OpenAI or Google Gemini API services. We do not need to include your name or email in the grading prompt, but anything you type in the answer may be transmitted. Do not include patient information or other sensitive personal details.
Requests may pass through Cloudflare AI Gateway. Where used with payload logging, Cloudflare can store prompts, model responses, and operational metadata such as provider, timestamp, status, token usage, and duration. We use these logs for service operation, troubleshooting, security, and support, with purpose-based retention. Providers may also retain information for safety, abuse prevention, or legal requirements under their applicable terms. Paid processing does not mean zero retention.
We use paid API services under their applicable data-processing terms; provider handling depends on the service and account settings. We do not authorize use of identifiable learner answers for model training, public examples, or cross-brand marketing. We may use aggregate learning statistics to understand service usage. Practice grading has an educational purpose and does not determine licensing, admission, employment, or other legal eligibility.
Learn more in OpenAI's business data information, the Gemini API terms, and Cloudflare AI Gateway logging information.
4. Providers and sharing
We use the following services for the purposes described below. Optional tools operate only where enabled and subject to applicable consent requirements. Providers may process information on our instructions and, for some activities such as payment compliance or advertising, for their own purposes described in their notices.
Hetzner: application hosting on servers in Germany and Finland. Hetzner privacy information.
Cloudflare: website delivery, network and security services, and email sending and routing. Cloudflare Privacy Policy.
Google: Gmail for correspondence and Google Analytics 4 (GA4) for website usage analytics. Google Privacy Policy and information about sites using Google services.
Stripe: payment processing, subscription administration, transaction records, and fraud prevention for the MedExam Network account under Anesthesia Zone, LLC. Stripe Privacy Policy.
Sentry: error monitoring and diagnostics to investigate faults and improve reliability. Sentry Privacy Policy.
OpenAI Ads and the OpenAI advertising pixel: advertising attribution and conversion measurement using relevant website events and identifiers. This use does not mean we receive your ChatGPT conversations. OpenAI Privacy Policy.
LinkedIn Insight Tag and Meta Pixel: advertising measurement, attribution, and audience-related advertising features where enabled and permitted. LinkedIn Privacy Policy and Meta Privacy Policy.
Microsoft Advertising and Universal Event Tracking (UET): advertising attribution, conversions, and audience measurement. Microsoft Clarity: behavioral metrics, heatmaps, and session replay to understand interactions and improve the website and advertising. These services use cookies and similar technologies and may collect or receive personal information for Microsoft Advertising. Microsoft Privacy Statement.
Bing Webmaster Tools: search visibility, indexing, and search-performance reporting. This is distinct from Microsoft Advertising's UET visitor tracking. Microsoft Privacy Statement.
Authorized personnel may access information to perform their duties. We may share relevant information with the specialty platform involved in your inquiry or purchase, professional advisers, and authorities where legally required or reasonably necessary to establish or defend legal claims, protect rights, or investigate fraud. Information may also be transferred in a merger, acquisition, or business reorganization, subject to applicable safeguards and notice requirements.
Some advertising disclosures may constitute “sharing,” “sale,” or targeted advertising under particular privacy laws, even where no money is exchanged for the information. Where those laws apply, you may exercise the corresponding opt-out rights as explained below.
6. International processing
Our company is based in the United States, and our application servers are hosted by Hetzner in Germany and Finland. Authorized personnel in Egypt access customer information to operate the business and provide support. Information is also processed through the providers listed above, whose systems, personnel, or subprocessors may be located in other countries. European server hosting does not mean all processing or access occurs within Europe.
Data-protection laws differ between countries. Where applicable law requires a safeguard for an international transfer, the relevant transfer must be supported by an appropriate lawful mechanism, such as an applicable adequacy decision or approved contractual safeguards together with any necessary additional measures. The mechanism depends on the recipient and processing involved. Contact us for information about safeguards relevant to your data; this policy does not itself create a transfer mechanism or ask you to waive legal protections.
7. Retention and security
We retain information for as long as reasonably necessary for the purpose for which it was collected and for applicable legal obligations. Learning records are retained as needed to provide study history, progress, and support, subject to applicable deletion rights and legal exceptions. Acceptance records are retained as needed to demonstrate agreements and resolve disputes. Support retention depends on resolving the inquiry and relevant follow-up or disputes; billing retention depends on accounting, tax, fraud-prevention, and transaction obligations; technical and security retention depends on troubleshooting, threat investigation, and operational needs.
Relevant factors include the information's sensitivity, the relationship or transaction involved, legal limitation periods, outstanding disputes, and provider or backup retention. We do not promise a single fixed deletion period for all records. When information is no longer needed, it should be deleted or anonymized under the applicable processes. Backup copies may remain until the relevant backup cycle expires, with use limited to appropriate recovery and legal purposes.
We use reasonable technical and organizational measures designed to protect information and limit access to authorized purposes. No website, storage system, or email service is completely secure. Avoid sending sensitive medical information or payment credentials by email. A deletion request may be subject to identity verification and lawful retention exceptions.
8. Your privacy rights
Depending on where you live and the law that applies, you may request access to your information, correction, deletion, restriction of processing, or a portable copy; object to processing based on legitimate interests; withdraw consent; and opt out of applicable sale, sharing, or targeted advertising. These rights have legal conditions and exceptions and are not identical in every jurisdiction.
Send requests to [email protected], identifying the request and any relevant specialty or transaction. We may ask for information reasonably necessary to verify your identity or an authorized agent's authority. We will respond within the time required by applicable law and explain any lawful refusal or extension. You may ask us to review a refusal and exercise any applicable statutory appeal rights.
We will not unlawfully discriminate against you for exercising privacy rights. You may complain to the competent data-protection or consumer authority. Where applicable, this includes an authority in your country of residence, workplace, or the place of an alleged infringement. You do not need to contact us before exercising a statutory complaint right.
9. Children and sensitive information
MedExam Network is intended for adults aged 18 or older. We do not knowingly seek personal information from children. If you believe a child has provided information, contact us so we can investigate and take appropriate action, including deletion where required.
The specialty website is not a patient-record service. Do not send identifiable patient data or use it to obtain care. If sensitive information reaches us unexpectedly, we will handle it only as appropriate to address the issue and meet our legal obligations.
10. Updates and contact
We may update this policy as our services or legal obligations change. The effective date identifies the current version. We will provide additional notice of material changes and obtain fresh consent where required. An update does not retroactively authorize a new use of information that requires consent.
For privacy questions, requests, or complaints: [email protected].
Anesthesia Zone, LLC, trading as MedExam Network
131 Continental Dr, Suite 305, Newark, DE 19713, United States