Legal

Introduction and Scope

This Privacy Policy governs the collection, processing, and storage of data by Certilum LLC, registered at 1209 MOUNTAIN ROAD PL NE STE N, ALBUQUERQUE, NM 87110. As a platform designed for professional preparation—functioning as an engine for certification, evaluation, and readiness—we prioritize the integrity of your personal and cognitive data. By using our Single Page Application (SPA), you consent to the practices outlined herein.

1. Data We Collect

• Identity and Advanced Authentication: Beyond your name and email, we collect data from social login providers (OAuth), nicknames, and your user security configurations (including the activation of Two-Factor Authentication - 2FA).
• Cognitive and Exam Telemetry: We collect far more than just final scores. We record your complete exam session history, specific answers, questions left blank (unanswered), time spent per question, mini-test attempts, and metrics used to calculate your Readiness Target.
• Subscription Data: While we do not store your credit card numbers (this is handled entirely by our payment processor), we do store your billing history, subscription cycle status, and receipts.

2. How We Use Your Information

• Grading and Progress Engine: We use your exam information to feed our adaptive grading algorithms and dynamically calculate if you have reached the required level to take the official certification exam (e.g., achieving "Master" status).
• Generation of Public Credentials: We utilize your name and results to generate Public Badges and Certificates. Due to the nature of our service, upon obtaining a certification, you consent to the generation of a public URL optimized with OpenGraph metadata for sharing on platforms like LinkedIn.
• Transactional Communications and Playbooks: We use your email to send automated reminders, study guides (playbooks), session expiration notifications, and security alerts.

3. Third-Party Sharing

We integrate with the following categories of third parties via APIs to provide our services:

• Payment Gateway (Merchant of Record): We share and validate data with LemonSqueezy, who acts as our payment processor and official seller of our subscriptions.
• Rewards Partners: For our referral program, we share the minimum necessary information (such as name and email) with the Tremendous API to issue, fund, and send gift cards to users who achieve successful referrals.
• Cloud Infrastructure: We utilize cloud database providers (e.g., secure cloud hosting providers and relational databases) and external email delivery services to host and operate our platform securely.

4. Security, Integrity, and Retention

• Active Protection: We employ real-time security mechanisms, including session expiration due to inactivity, token invalidation, and encryption in transit to protect your data.
• Certificate Retention Policy: We retain your exam approval data indefinitely, even if your subscription expires. This is vital to maintain the public validity and verifiability of the certificates you have obtained in the past, unless you explicitly request the total deletion of your account.

5. User Rights and Data Control

• Control from the App: You can manage your personal information, adjust your preferences, and view your billing history directly from the "Security Settings" and "Profile" sections of the platform.
• Revocation of Publicity: If you decide that your certification badge should no longer be public, you may adjust your settings to revoke its public visibility or request its removal.
• Data Subject Requests: For requests regarding data deletion, export, or privacy concerns that cannot be resolved through the app settings, please contact our Data Protection Officer at support@certilum.com.