Legal
Privacy Policy
How Tejas Test Prep collects, uses, shares and protects personal information, your rights under Texas law, and how to exercise them.
Effective September 28, 2026 · Last updated September 28, 2026
Plain-English summary. We collect the information a family gives us to enroll and the information a student generates while studying, we use it to teach and to run the business, and we do not sell it or rent it to anyone. Texas law gives you the right to see it, correct it, take a copy of it and have it deleted. Email admin@tejastestprep.com and we will act within 45 days. This summary is not the policy — the sections below are — but nothing below contradicts it.
1. Who we are
This policy is issued by Kalasam LLC, a Texas limited liability company, trading as Tejas Test Prep ("Tejas Test Prep", "we", "us", "our"). We are the controller of the personal data described here, and you can reach us at any time at admin@tejastestprep.com.
It covers tejastestprep.com, the student study portal, our diagnostic and score tools, our live classes (in person and virtual), and the email and text messages we send. It does not cover a third-party site you reach by following a link from ours.
Contact for privacy matters: admin@tejastestprep.com with "Privacy" in the subject line.
2. What we collect
We collect four kinds of information. We have listed them by where they come from, because that is usually what people want to know.
2.1 Information you give us
- Inquiry and enrollment details: student name and grade, parent or guardian name, email address, telephone number, the program and format you are interested in, the term you want, and anything you choose to write in a free-text field.
- Academic context you volunteer: previous SAT, PSAT or ACT scores, target scores, target schools, school name, and any learning needs or testing accommodations you tell us about so we can teach the student properly.
- Correspondence: emails, text messages, and notes from calls and consultations.
- Payment details: handled by our payment processor. We receive confirmation that a payment succeeded, the amount, the date, and the last four digits and brand of the card. We never receive or store a full card number, CVV, or bank credentials.
2.2 Information the student generates by studying
- Answers submitted to practice questions, modules, problem sets and full-length exams, including which choice was selected and whether it was correct.
- Timing data: how long a question, module or section took.
- Derived analytics: skill-level and domain-level accuracy, pacing profiles, error patterns, progress over time, and the recommendations built from them.
- Attendance at live sessions, and instructor notes about a student's progress.
This is the heart of what the course does, and it is the data we are most careful with. It is used to teach that student. It is not used to build a profile of anyone for any other purpose, and it is not shared with schools, colleges, admissions offices, testing agencies, or anyone else without your instruction.
2.3 Information collected automatically
- Standard server logs: IP address, browser and device type, operating system, referring page, pages viewed, and timestamps.
- Cookies and similar storage strictly necessary to keep you signed in to the portal and to remember interface preferences. See section 7.
2.4 Information from third parties
- Our learning platform and scheduling vendors, which return the activity data described in 2.2.
- Our payment processor, as described in 2.1.
- Nothing else. We do not buy contact lists, append demographic data, or acquire personal data from data brokers.
2.5 Sensitive data
We do not seek sensitive personal data as Texas defines it (racial or ethnic origin, religious belief, health diagnosis, sexuality, citizenship or immigration status, precise geolocation, genetic or biometric identifiers, or the personal data of a known child). If you volunteer health or disability information so that we can support a student's accommodations, we treat it as sensitive, use it only for that purpose, keep it access-restricted, and rely on the consent you give by providing it. You may withdraw that consent at any time by emailing us, and we will delete it.
We do not sell sensitive personal data. We do not sell biometric data. We have never done either and have no plans to.
3. Why we use it
| Purpose | Data used |
|---|---|
| Answer your inquiry and propose the right program | 2.1 |
| Enroll a student, confirm a seat, and administer the course | 2.1 |
| Teach: assign work, score it, diagnose weaknesses, adapt instruction | 2.2 |
| Report progress to the enrolling parent or guardian | 2.2 |
| Take payment and keep accounting records | 2.1 |
| Send service messages you need (schedules, exam reminders, portal access) | 2.1 |
| Send marketing about our own programs, where you have opted in | 2.1 |
| Keep the site and portal secure, prevent fraud and abuse | 2.3 |
| Improve the curriculum in aggregate — which questions are mis-keyed, which explanations fail, where cohorts stall | 2.2, aggregated and de-identified |
| Meet legal, tax and accounting obligations | 2.1 |
Where we use de-identified or aggregated data, we commit to maintaining it in that form, to not attempting to re-identify it, and to binding any recipient to the same.
4. What we never do
- We do not sell personal data for money or other valuable consideration, as "sale" is defined by Texas, California or any other state privacy statute.
- We do not share personal data for cross-context behavioral advertising or targeted advertising, and we do not run advertising pixels that would do so.
- We do not profile you in a way that produces legal or similarly significant effects. The analytics in 2.2 decide what a student should practice next; they do not decide anything about a person's rights, finances, employment or opportunities.
- We do not use student work to train third-party artificial intelligence models, and we do not permit our vendors to.
- We do not disclose a student's performance to their school, a college, or a testing agency.
6. How long we keep it
We do not keep personal data indefinitely. Each category has a defined life.
| Category | Retained for |
|---|---|
| Inquiries that do not become enrollments | 24 months from last contact, then deleted |
| Enrollment and contact records | The term, plus 4 years |
| Student activity and analytics (2.2) | The term, plus 24 months of portal access, then deleted or de-identified |
| Instructor notes on a student | The term, plus 12 months |
| Accommodation or health information you volunteered | The term only, then deleted |
| Payment and accounting records | 7 years, as tax law requires |
| Marketing contact records | Until you unsubscribe, plus a permanent suppression entry so we do not re-add you |
| Signed testimonial releases and score verifications | 4 years after the testimonial comes down |
| Server logs | 90 days |
Where a record is subject to a legal hold, we keep it until the hold lifts, and nothing else.
8. Your rights
If you are a Texas resident, the Texas Data Privacy and Security Act (Tex. Bus. & Com. Code ch. 541) gives you the rights below. We extend the same rights to every family we work with, wherever they live, because drawing a line at the state border would be absurd.
- Know and access — confirm whether we hold personal data about you, and get a copy of it.
- Correct — have inaccurate personal data fixed.
- Delete — have personal data about you erased.
- Portability — receive a copy in a portable, machine-readable format where processing is automated.
- Opt out of the sale of personal data, of targeted advertising, and of profiling with legal or similarly significant effects. We do none of these, so there is nothing to opt out of, but the right stands.
- Withdraw consent to any processing of sensitive data.
- Appeal — if we refuse a request, you may appeal (see below).
- Non-discrimination — exercising any of these rights will never affect the price you pay or the teaching a student receives.
8.1 How to make a request
Email admin@tejastestprep.com with the word "Privacy request" in the subject line. Tell us what you want and which student or family the request concerns.
We will verify that the request really comes from you, usually by replying to the email address already on the account. If we cannot verify it, we will tell you why rather than guessing — we are not going to hand a student's records to someone who might not be their parent.
We respond within 45 days. If a request is genuinely complex we may extend once by a further 45 days, and we will tell you before the first 45 days are up. There is no charge for the first two requests in any twelve-month period.
8.2 Who may make a request about a student
For an enrolled student under 18, the enrolling parent or guardian may exercise these rights on the student's behalf. A student aged 13 to 17 may also make a request themselves; we will honor an access or correction request from them directly, and will consult the enrolling parent before deleting course records they are paying for.
8.3 Appeals
If we decline a request, our response will say so, explain why, and tell you how to appeal. To appeal, reply to that response with the word "Appeal". A different person will review it and we will give you a written decision within 60 days. If we still refuse, we will provide a link through which you can complain to the Texas Attorney General at texasattorneygeneral.gov.
8.4 Authorized agents
You may use an authorized agent to make an opt-out request on your behalf. We will ask for written proof that you authorized them.
9. Children
Our programs are built for students in roughly grades 8 through 12. The website is directed at parents and guardians, not at children, and we do not knowingly collect personal data online from a child under 13.
Where a student under 13 is enrolled, it is the parent or guardian who enrolls them, who provides their information, and who consents to our collecting the study data in section 2.2 for the purpose of teaching that child. Consistent with the Children's Online Privacy Protection Act and the FTC's amended COPPA Rule, in that situation:
- We give the parent direct notice of what we collect, how we use it, and that it will not be disclosed to third parties beyond the service providers in section 5.
- We obtain the parent's verifiable consent before collecting anything from the child, and separate consent before any disclosure that is not integral to delivering the course. We do not currently make any such disclosure.
- The parent may review the child's information, refuse to permit its further collection, and require its deletion, at any time, without losing the seat except where deletion makes the course impossible to deliver.
- We never condition a child's participation on disclosing more information than is reasonably necessary.
- Retention for a child's data follows the table in section 6, and the child's data is deleted at the end of it. We do not retain a child's personal data indefinitely.
If you believe a child under 13 has given us personal data without a parent's involvement, email admin@tejastestprep.com and we will delete it promptly.
Parents of minors generally. Under the Texas Securing Children Online through Parental Empowerment Act, a parent or guardian of a known minor may ask us to review, correct or delete their child's account data, and may ask us to limit the child's use of the service. Email us and we will action it. We do not show advertising to minors, we do not use a minor's data for targeted advertising, and we do not sell it.
10. How we protect it
We maintain a written information security program appropriate to the size of the business and the sensitivity of what we hold. In practice that means:
- Data in transit is encrypted with TLS. Data at rest is encrypted by our hosting and platform vendors.
- Access is limited to Dr. Karnati and the instructors and administrators who need it to teach or support a given student, on a least-privilege basis.
- Accounts with access to student data require multi-factor authentication.
- We review our vendors' security posture before engaging them and obtain written assurances that they can protect the data we pass them.
- We review this program at least annually and after any material change to how we operate.
No system is perfect and we will not pretend otherwise. If a breach affects your personal data, we will notify you and the Texas Attorney General as Texas law requires — without unreasonable delay and within 30 days of determining that a breach occurred — and we will tell you what happened, what was affected, and what we are doing about it.
11. Email and text messages
Service messages — schedules, exam reminders, portal access, billing — are part of the course and are sent to enrolled families. You cannot opt out of these while enrolled, though you can ask us to change the channel.
Marketing messages are sent only to people who asked for them. Every marketing email carries a one-click unsubscribe link and our postal address, as CAN-SPAM requires, and we act on an unsubscribe within 10 business days — in practice, immediately.
Text messages. We send marketing or informational texts only with your prior express written consent, obtained separately and never as a condition of enrolling. Message and data rates may apply. Reply STOP to any message to stop them, or HELP for help; we honor a revocation made by any reasonable means, and within 10 business days at the outside. Consent to texts is not a condition of purchase.
12. Families outside Texas and outside the United States
We teach students across the country and abroad. Our systems are hosted in the United States, so enrolling with us means your personal data is processed here, under United States law. If you are in a jurisdiction with its own data protection regime — California, Colorado, Virginia, the EEA, the UK — we apply the rights in section 8 to you as well, and you keep whatever additional rights your own law gives you. Write to us and we will not argue about which statute applies; we will just handle it.
California residents: we have not sold or shared personal information as the CCPA defines those terms in the preceding twelve months, including personal information of anyone we know to be under 16.
13. Changes to this policy
If we change this policy we will update the effective date at the top. If a change materially reduces your rights or materially expands how we use personal data, we will email enrolled families at least 14 days before it takes effect, and we will keep the previous version available on request. We will not apply a materially different use to data already collected without asking you first.
14. Contact
Questions, requests, complaints, or a correction to this page:
Kalasam LLC (trading as Tejas Test Prep)
admin@tejastestprep.com
You may also complain to the Texas Attorney General's Consumer Protection Division at texasattorneygeneral.gov. We would rather you came to us first, but the right is yours.