Privacy Policy | CertLake

1. Information We Collect

We collect the following types of information:

Account information: Name, email address, and profile image provided through Google sign-in
Usage data: Exam attempts, answers, scores, and progress data
Technical data: Browser type, device information, and IP address

2. How We Use Your Information

We use your information to:

Provide and maintain the Service
Track your exam progress and performance
Process payments and manage subscriptions
Send service-related communications
Improve the Service based on usage patterns

3. Payment Information

Payment processing is handled by Polar.sh. We do not store your credit card details. Payment information is collected and processed directly by Polar.sh in accordance with their privacy policy and PCI DSS compliance standards.

4. Data Storage

Your data is stored securely in our database. We use industry-standard security measures to protect your information from unauthorized access, alteration, or destruction. Our application is hosted on Vercel and your data is stored in a managed PostgreSQL database provided by Neon, located in the United Kingdom.

Some of our service providers (including Vercel and Polar.sh) process data on infrastructure located outside the United Kingdom, including in the United States. Where data is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or equivalent contractual protections.

5. Third-Party Services

We use the following third-party services:

Google OAuth: For authentication and sign-in
Polar.sh: For payment processing and subscription management
Vercel: For hosting and deployment

Each third-party service has its own privacy policy governing the use of your information.

6. Cookies

We use essential cookies for authentication and session management. These cookies are necessary for the Service to function and cannot be disabled. We do not use tracking or advertising cookies.

7. Data Retention

We retain your account and progress data for as long as your account is active. To delete your account, email us at support@certlake.com from your registered email address; we will confirm your request and remove your personal data within 30 days, except where retention is required by law.

8. Your Rights

You have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data
Export your data
Object to processing of your data

To exercise these rights, please contact us at support@certlake.com.

9. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or through the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

For questions about this Privacy Policy, please contact us at support@certlake.com.