Privacy Policy

GetMyCert ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our AI-powered certification practice exam platform.

1. Information We Collect

Information You Provide Directly

• Account Information: Email address, password, name, and profile details when you create an account
• Subscription Data: Billing information, subscription plan, and payment history
• Quiz Responses: Your answers to practice exam questions, score data, and study progress
• Communication: Messages you send us through contact forms or email support
• Preferences: Your settings, preferences, and notification choices

Information Collected Automatically

• Usage Analytics: Pages visited, features used, quiz completion rates, and time spent studying
• Device Information: IP address, browser type, operating system, and device model
• Cookies and Similar Technologies: We use cookies to remember your preferences and analyze site usage
• Location Data: Approximate location based on IP address (not precise GPS)

Information from Third Parties

• Payment Processor: Stripe provides confirmation of successful payments
• Analytics Providers: Basic usage data to help us improve the platform

2. How We Use Your Information

We use the information we collect for various purposes:

• Providing, maintaining, and improving our certification practice platform
• Processing subscription payments and managing your account
• Personalizing your learning experience and tracking your progress
• Sending service updates, password reset emails, and important notifications
• Responding to your questions and providing customer support
• Analyzing usage patterns to improve our questions and platform
• Detecting and preventing fraudulent transactions and abuse
• Complying with legal obligations

3. Sharing Your Information

We do not sell your personal data. However, we share information with trusted partners:

• Stripe: Payment processing partner that handles billing information securely
• Supabase: Cloud database provider that hosts your data in the United States with industry-standard security
• Compliance: We may disclose information if required by law or court order
• Service Providers: Third-party vendors who assist with analytics and customer support

4. Cookies and Tracking Technologies

We use cookies to:

• Keep you logged in to your account
• Remember your preferences and settings
• Analyze how you use the platform
• Prevent fraud and improve security

You can control cookies through your browser settings. Disabling cookies may affect platform functionality.

5. Data Retention

We retain your information as follows:

• Active Accounts: Kept while your account is active and for 30 days after deletion
• Quiz Data: Stored for the duration of your subscription to track progress
• Payment Records: Retained for 7 years for tax and compliance purposes
• Analytics: Aggregated data retained indefinitely; personal identifiers removed after 12 months
• Support Communications: Kept for 2 years or until dispute resolution

6. Your Privacy Rights

Depending on your location, you may have the following rights:

GDPR Rights (EU/EEA Residents)

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate information
• Right to Erasure: Request deletion of your data (with exceptions)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured, portable format
• Right to Object: Opt-out of certain processing activities
• Right to Withdraw Consent: Withdraw consent at any time

CCPA Rights (California Residents)

• Right to Know: What personal information is collected
• Right to Delete: Request deletion of your data
• Right to Opt-Out: Opt-out of sale or sharing of personal information (we don't sell data)
• Right to Non-Discrimination: No discrimination for exercising your rights

To exercise any of these rights, contact us at hello@getmycert.com. We will respond within 30 days.

7. Data Security

We implement industry-standard security measures to protect your information:

• SSL/TLS encryption for data in transit
• Encryption at rest for sensitive data
• Regular security audits and vulnerability assessments
• Restricted access to personal data on a need-to-know basis
• Supabase's enterprise-grade security infrastructure

While we strive to protect your data, no security system is completely impenetrable. We are not responsible for unauthorized access due to events beyond our reasonable control.

8. International Data Transfers

Your data is hosted on Supabase servers in the United States. If you are located in the EU/EEA, this involves transferring your data outside the EEA. We rely on Standard Contractual Clauses approved by the European Commission to ensure adequate protections.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of external sites. We encourage you to review their privacy policies before providing information.

10. Children's Privacy

GetMyCert is not intended for children under 13. We do not knowingly collect information from children under 13. If we become aware of such collection, we will delete the information immediately. Parents who believe their child's information has been collected should contact us at hello@getmycert.com.

11. California Privacy Rights

California residents have the right to know what personal information is collected, used, shared, or sold. We do not sell personal information. For requests, contact hello@getmycert.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by updating the "Last updated" date and, when appropriate, by email or prominent notice on our website. Continued use of the platform constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

• Email: hello@getmycert.com
• Website: https://www.getmycert.com
• Company: GetMyCert

EU Residents: You have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.