c3rtfy

Privacy Policy

Effective date: May 22, 2026

c3rtfy ("we", "us", or "our") operates the c3rtfy training platform (the "Service"). This Privacy Policy explains how we collect, use, and protect information when you use our Service.

1. Information We Collect

We collect information you provide directly:

Account information: workspace name, admin email address, and password (stored as a one-way hash).
Learner data: names and IDs you add to your workspace, quiz responses, course progress, and certificates.
Billing information: handled entirely by Stripe. We store only your Stripe Customer ID; we never see or store full card numbers.
AI-generated content: source notes and prompts you submit to generate course content.

We also collect limited technical data automatically: server access logs (IP address, browser type, pages visited) used for security and performance monitoring.

2. How We Use Your Information

To create and operate your workspace and deliver the Service.
To process subscription payments through Stripe.
To generate AI course content using Google Gemini (your source notes are sent to Google's API under their Terms of Service).
To send transactional emails (welcome, password reset) via Postmark.
To prevent abuse and maintain security.

3. Data Sharing

We do not sell your data. We share it only with the following service providers who help us operate the platform:

Stripe — payment processing. Stripe Privacy Policy.
Google (Gemini API) — AI content generation. Source notes you submit are processed by Google.
Postmark (ActiveCampaign) — transactional email delivery.

4. Data Retention

Your workspace data is retained for as long as your account is active. You may delete your workspace at any time from the admin panel, which permanently removes all workspace data. We retain server logs for up to 30 days.

5. Security

We use HTTPS for all data in transit, bcrypt password hashing, and secure session cookies. We do not store payment card data.

6. Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise these rights, contact us at [email protected].

7. Cookies

We use a single session cookie to keep you logged in to the admin panel. We do not use third-party tracking or advertising cookies.

8. Children

The Service is not directed to children under 16. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this policy from time to time. We will post the new policy on this page with an updated effective date. Continued use of the Service after changes constitutes acceptance.

10. Contact

Questions? Email us at [email protected].