Privacy Policy

Effective date: October 11, 2026 · Last updated: October 11, 2026

This Privacy Policy explains how Instupituous, LLC, a California limited liability company doing business as Operant Learner — Instupituous, LLC (dba Operant Learner), "Operant Learner," "we," "us" — collects, uses, and shares personal information when you visit operantlearner.com or use the Operant Learner training platform (the "Services").

1. Information we collect

Information you give us

• Account information: your name, email address, role or job title, and the organization you train with. If you sign in with Google, we receive your name, email address, and Google account identifier. We use your Google name, email address, and account ID only to sign you in. We do not request access to your Google contacts, files, or email.
• Credential information: if you choose to provide it, your BACB certification number, so that it can appear on training documentation you request.
• Demo and contact requests: your name, email, organization, phone number, and message.
• Feedback and complaints: comments, ratings, course evaluations, and complaints you submit.
• Written course responses: written responses you submit in course activities (for example, competency practice responses), which are kept as part of your training record.
• Revenue-share payees: if you are a course instructor or reviewer who receives a revenue share, payee details and earnings records needed to pay you.
• Purchases: payments are handled by our payment processor, Stripe. We receive a record of the purchase and of your acceptance of our Terms; we do not receive or store your full card number.

Information collected when you use the Services

• Training activity: course progress, quiz and knowledge-check answers and scores, time spent, slide and video position, activity and idle events during a course, and certificates issued.
• Technical information: IP address (used, for example, to limit repeated form submissions), browser type, and server logs.
• Cookies and local storage: we use a sign-in cookie and your browser's local storage to keep you signed in and remember your settings. We do not use advertising cookies or third-party analytics trackers.

Do Not Track

Do Not Track. Our Services do not track you across other websites and do not use third-party advertising or analytics cookies, so we treat all visitors the same whether or not a browser sends a Do Not Track or Global Privacy Control signal.

Other companies that receive information when you use our pages

When you load our pages, Google (web fonts) and jsDelivr (a code-delivery network) receive your IP address and browser information so they can deliver files. Some training lessons include embedded YouTube videos; when one loads, YouTube (Google) receives your IP address and browser information and may set its own cookies under Google's privacy policy. When you pay, you enter payment details on a page hosted by Stripe, which collects them under its own privacy policy. Other than these, we do not allow any third party to collect information about your activity across other websites through our Services.

2. How we use information

• To provide the Services: create and secure your account, deliver courses, record progress, and issue certificates and training records.
• To let an organization that provides your training (for example, your employer) see your enrollment, progress, and results for the courses it assigned or sponsored.
• To meet recordkeeping requirements that apply to the training we deliver (see section 5).
• To respond to requests and complaints, send service emails (such as sign-in links, password resets, receipts, and certificates), and provide support.
• To keep the Services secure, prevent abuse, and fix problems.
• To improve our courses and the platform.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not disclose personal information to third parties for their own direct marketing purposes.

3. How we share information

With your organization. If your access is provided by an organization, its administrators can see your account details and training records for that organization's courses.

With service providers who process information on our behalf to run the Services:

For legal reasons. We may disclose information if required by law, to respond to valid legal process, to protect the rights, safety, or property of our users or others, or in connection with a merger, acquisition, or sale of assets (in which case this policy will continue to apply to your information).

With a credentialing body. Where a course is offered under a credentialing body's rules, we may be required to provide that body with training records on request.

4. Security

We use measures designed to protect personal information, including encrypted connections (HTTPS), hashed passwords, access controls, and encrypted off-site backups. No system is perfectly secure, so we cannot guarantee absolute security. If a security breach affects your personal information, we will notify you as California law requires, without unreasonable delay and within 30 days of discovering it.

5. How long we keep information

We keep account and training records for as long as your account is active, and afterward for as long as needed to provide the training records you may request and to meet recordkeeping rules that apply to the training. For example, records for the RBT 40-hour training are kept for seven years, records for continuing-education events are kept for at least three years after the event, and complaint records are kept for at least three years. Information you ask us to delete may remain in encrypted backups until those backups are replaced in the normal course.

6. Your choices and rights

You can view and update much of your account information in the platform. You can also ask us to:

• tell you what personal information we hold about you and how we use it;
• give you a copy of it;
• correct information that is inaccurate; or
• delete it, subject to the recordkeeping obligations described above.

California residents. Under California privacy law you may have the rights listed above, the right to opt out of the sale or sharing of personal information (we do neither), and the right not to be discriminated against for exercising these rights. We extend these rights to every user voluntarily. You may use an authorized agent to make a request. We will verify requests by confirming control of the email address on the account, and we will respond within 45 days.

You can delete your account yourself at operantlearner.com/delete-account or in the phone app. To make any other request, email duanne@instupituous.ai. If your organization provides your access, some requests (for example, deleting records your employer needs) may need to go through that organization.

7. Children

The Services are intended for adults (18 and older) in professional training and are not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we will delete it.

8. Changes to this policy

We may update this policy. We will post the new version here with a new "Last updated" date, and for material changes we will give notice through the Services or by email.

9. Contact us