Licensure Hours is operated by Avrohom A Pil, a sole proprietorship based in Brooklyn, New York.
This policy explains what information Licensure Hours collects, how it is used, who it is shared with, and the choices you have. It is written to be read, not skimmed. If anything here does not match what the service does, tell us at [email protected] and we will fix the policy or the service.
1. Information you give us
About you
- Account: email address and password. The password is stored only as a one-way bcrypt hash; we cannot read it. If you continue with Google instead, Google tells us your email address and that it has verified it; it also sends your name, which we do not keep. We never see your Google password.
- Profile: full legal name, NY LMSW license number, MSW degree date, LMSW issue date, and an optional target LCSW date. If you do not have your LMSW yet, the license details stay blank until you add them.
- Placements: workplace name and the dates your supervised work there began and ended.
- Hours: for each week, client-contact hours, supervision hours, and whether supervision was individual or group, in person or by video. Nothing about what happened in a session.
- Billing: which plan or exam prep you bought and its status. Card details never reach us; see section 5.
- Exam prep: the answers you choose, how sure you said you were, the reason you give for a miss, your practice plan and the questions due for review, practice exam results, and, if you enter them, your exam date, your exam result and your score report by content area. If you report a problem with a question, what you wrote and which question it was.
About your supervisor, and sometimes a colleague
To do its job the service holds information about people who are not its users. You enter it, and you are responsible for having their permission to do so:
- Supervisor: name, profession, license number and state, email address, and the period they supervised you.
- Review records: which weeks you sent them, when they confirmed or flagged a week, and any note they left.
- Unavailability declarations: if you record that a supervisor has died or cannot be reached, that declaration and the date, in your name.
- Colleague attestor: where a licensed colleague certifies weeks in place of an unavailable supervisor, their name, profession, license number and email.
Supervisors and colleagues receive emails from us only because you asked us to send them. Each email says who sent it and why, and any of them can tell us to stop by replying or writing to [email protected].
Collected automatically
- Session cookie: one cookie that keeps you signed in. Nothing else is set.
- IP address and request logs: used to limit sign-in attempts and detect abuse. Failed and successful sign-ins are recorded with the address they came from.
- Application audit log: a record of significant actions on your account (a week revised, a supervisor changed, a placement closed), kept so that a dispute about your hours can be settled from the record.
- Exam prep activity: simple events inside exam prep, such as a question shown, an explanation opened, a practice exam started, or checkout opened, tied to your account. We use them to build your plan and to see which parts of exam prep work, never for advertising.
We do not run analytics or advertising trackers today; the exam prep activity above stays in our own database. If that changes, this policy will be updated before it does, and the tool will be one that does not build profiles of you.
2. What we never collect
- No client information: no names, initials, dates of birth, diagnosis codes, session notes, or contact details of the people you serve. The service has no field for them.
- No Social Security or other government identifiers. Form 4B asks for some of these; you enter them on the official form yourself, never here.
- No card numbers. Payment happens on our payment provider's pages, not ours.
3. How we use it
- To keep your record and calculate your progress toward NYSED's requirements
- To send your supervisor review requests and reminders, when you ask for them
- To fill NYSED Form 4B and the psychotherapy log from your logged weeks, when you ask
- To build your exam practice plan from your answers, and to fix questions you report
- To send you the emails the service needs: verification, password reset, receipts, and review updates
- To answer support requests
- To protect the service from abuse and to meet legal obligations
We do not sell personal information, and we do not use it for advertising.
4. Who we share it with
Your supervisor
When you send weeks for review, your supervisor receives your name, license type, the weeks and their totals, and a secure link to confirm them. They do not need an account.
NYSED
We send nothing to NYSED. The forms we fill are yours to give to your supervisor, who submits them.
Service providers
We use outside companies for the things a small service does not run itself. Each one is bound by contract to use the information only to provide its service to us. By role, and naming the provider we use as of the date at the top of this page:
- Hosting and database: Hetzner Online GmbH — receives all service data, stored on servers in Germany.
- DNS, content delivery and DDoS protection: Cloudflare — receives IP addresses and request metadata in transit.
- Payment processing (merchant of record): Lemon Squeezy — receives your email address, billing details and purchase history; never your hours or supervisor records.
- Transactional email delivery: Resend — receives recipient addresses and the content of emails we send, including supervisor review links.
Providers change. When one does, we update this list; the roles and what each role receives stay the same unless we say otherwise.
Legal requests
We disclose information when the law requires it, for example in response to a subpoena, court order, or a lawful request from NYSED. Where we are allowed to, we will tell you first.
5. Payments
Purchases are processed by our payment provider, which acts as the merchant of record: the sale is legally between you and them, they collect any sales tax, and their privacy policy governs what they do with your billing details. We receive confirmation of what you bought and its status, never your card number.
6. Where your information is stored
The service is operated from New York, United States. The database and application run on servers in Germany (European Union), and traffic passes through a content-delivery network with servers worldwide. By using the service you agree to your information being stored and processed in those places.
7. Security
What we actually do, stated plainly:
- All traffic is encrypted in transit with TLS.
- Passwords are stored as bcrypt hashes with a work factor of 12.
- Sign-in attempts are rate limited per address and per account.
- Supervisor review links are single-purpose, expire, and are stored hashed.
- Significant actions on your record are written to an audit log.
- Only the operator has access to production systems.
- The database is backed up nightly and each backup is verified; seven days of backups are kept.
No system is perfectly secure, and we do not promise otherwise. Please keep your own copy of your hours record using Export in Settings; it is a complete, machine-readable file and it is yours.
If there is a breach
If we learn that your private information was accessed without authorization, we will notify you at your account email as quickly as we can and within the time New York's SHIELD Act requires, and we will notify the authorities that law requires us to notify.
8. How long we keep it
- While your account exists: everything in section 1.
- When you delete your account: your profile, placements, hours, supervisor records, review records, exam prep answers and activity, question reports, and audit log are deleted immediately. There is no recovery. Export first.
- Server and security logs: kept for a limited time for security purposes, then discarded.
- Payment records: held by the payment provider for as long as tax and accounting law requires them to.
9. Your choices
- See and take your data: Export in Settings gives you your hours record (profile, placements, supervisors and weeks) as a JSON file, any time. Exam prep history is not in that file yet; write to us and we will send it to you.
- Correct it: your profile, placements and hours are editable in the app.
- Delete it: Delete account in Settings removes everything immediately.
- Emails: supervisor reminders are off unless you turn them on. Emails the service needs to function (verification, password reset, receipts) cannot be switched off while you have an account.
For anything you cannot do yourself, write to [email protected]. We answer within 30 days. We do not track you across other sites, so there is nothing for a browser “Do Not Track” signal to change.
10. Children
The service is for social workers and social work graduates and is not directed to anyone under 18. We do not knowingly collect information from children; if you believe we have, contact us and we will delete it.
11. HIPAA
Licensure Hours is not a HIPAA-covered entity or a business associate, and does not offer a Business Associate Agreement. It is built to hold no Protected Health Information, and you must not enter any. For client records, use a HIPAA-compliant system.
12. Changes to this policy
If we change this policy in a way that affects you, we will email your account address at least 30 days before the change takes effect. Corrections that only make the policy more accurate about what the service already does take effect when posted. The date at the top is the date of the current version.
13. Contact
Questions about this policy or your information: [email protected].