privacy
Your application is personal.
Effective November 3, 2026. USMLEMatch is operated by LuxeTruc LLC (United States). Privacy and deletion requests: abhishek.shankar@gmail.com.
What we collect
Account identity, contact email, service and appointment details, professional background, questions, consent and optional application PDFs. Card details are entered on Stripe’s hosted checkout and are not stored by this site.
Purpose and access
We use information to arrange and deliver your requested services, support your account and maintain transaction records. Private intake and documents are accessible to your account and the authorized operator. We do not sell personal information or use application materials for advertising.
Storage and providers
Cloudflare D1 stores records and private R2 stores documents. Intake, notes, filenames and document contents are additionally encrypted. Sites provides account sign-in; Stripe processes payments. Providers may process information in the United States and other locations under their own applicable terms and privacy notices.
Retention schedule
Unpaid drafts and their documents are deleted after 90 days without an update. After a service is marked delivered, cancelled or refunded, documents are deleted after 90 days and intake and advisor notes after 12 months. We keep only minimal account and transaction references for seven years after closure for accounting and dispute handling. Active service records remain available while the service is ongoing.
Deletion and access requests
You can remove documents and eligible draft, cancelled or refunded bookings in your dashboard. For other access, correction or deletion requests, email abhishek.shankar@gmail.com from your account email. We verify ownership, acknowledge requests within five business days and aim to complete them within 30 days. Where applicable law requires a different deadline or continued retention, we will explain it. Processor-held payment records are governed separately by Stripe’s retention obligations.
How deletion runs
Eligible data is removed during background cleanup when the site is used; the operator also checks cleanup monthly. Allow up to 30 days after a retention deadline for processing. Restricted infrastructure backups, if any, expire under the hosting provider’s backup lifecycle and are not used for routine service access.
Minimize sensitive information
Use this service only for professional application guidance. Remove patient data, passport numbers, health records and unnecessary personal identifiers. For adult applicants aged 18 or older. We use essential sign-in functionality; no advertising trackers are configured.