Privacy Policy
CERTRCTR ('we', 'us', 'our') operates the CERTRCTR platform. This policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. Please read carefully. If you do not agree with our policies, do not use our platform.
Last updated: July 2026Information We Collect
We collect information you provide directly: name, email, phone, company, job title, resume, recruiter credentials, certification goals, work history, and employment preferences. We also collect technical data automatically: IP address, browser type, device information, pages visited, time spent, and usage patterns via cookies and analytics tools. When you download badges or generate content, we log those actions for analytics and service improvement.
How We Use Your Information
We use your data to match you with relevant job opportunities, send certification recommendations, improve our matching algorithms, personalize your experience, and communicate about your career progress. Employers receive only information you authorize for job matching purposes. We process data on the legal bases of consent, contract performance, and legitimate business interests.
Authentication and Security
Admin access requires OTP email authentication. We send one-time passwords to your registered email address that expire after 10 minutes. We implement brute-force protection and rate-limiting to prevent unauthorized access attempts. Passwords and sensitive credentials are hashed using industry-standard encryption.
Information Sharing and Third Parties
We share your profile and qualifications with employers you've opted into matching with. CERTRCTR integrates with Apollo (recruiter data enrichment) and OpenAI (content generation) via secure MCP connections; data shared with these services is governed by their respective privacy policies. We do NOT sell your personal data to third parties. We may share aggregated, anonymized data for platform analytics, and disclose information only when required by law or to protect our legal rights.
California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect, use, disclose, and share; the right to delete personal information (with limited exceptions); the right to correct inaccurate information; and the right to opt-out of the sale or sharing of personal information. CERTRCTR does NOT sell personal information. You also have the right to non-discrimination for exercising your privacy rights. To exercise these rights, email privacy@certrctr.com with 'CCPA Request' in the subject line, and we will verify and respond within 45 days.
European Privacy Rights (GDPR)
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing. You may withdraw consent at any time and lodge a complaint with your local supervisory authority. We process personal data lawfully, transparently, and only for the purposes described in this policy. Contact privacy@certrctr.com to exercise your GDPR rights.
Data Security
We implement industry-standard encryption, secure servers, and access controls to protect your information. No method of transmission over the internet is 100% secure. We are not liable for unauthorized access beyond our reasonable control, though we notify affected users of material breaches as required by applicable law.
Data Retention
We retain personal information for as long as necessary to provide services and comply with legal obligations. Account data is retained for up to 3 years after account closure unless deletion is requested. OTP codes and authentication logs are retained for 90 days for security auditing. Upon a valid deletion request, we remove personal data within 30 days, except where retention is required by law.
Your Rights
You may access, update, correct, or delete your account data at any time directly in the platform. You can opt out of marketing communications and withdraw consent for non-essential processing. To request data deletion or export, contact privacy@certrctr.com and we will respond within 30 days.
Children's Privacy
CERTRCTR is not intended for users under 18 years of age. We do not knowingly collect information from minors. If we become aware that we have collected data from a minor, we will delete it immediately.
International Data Transfers
CERTRCTR operates in the United States. If you access our services from outside the US, your information may be transferred to and processed in the United States, which may have different data protection laws. By using CERTRCTR, you consent to this transfer, and we apply appropriate safeguards for international transfers where required.
Changes to This Policy
CERTRCTR may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes via email or platform announcement. Your continued use of the platform after changes constitutes acceptance of the updated policy.
Contact Us
For privacy questions or to exercise your data rights, contact us at privacy@certrctr.com or support@certrctr.com. We will respond to requests within 30 days.