Privacy Policy

1. Introduction

Welcome to CertGecko ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our certification exam preparation platform.

By using CertGecko, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Personal Information

When you register for an account, we collect:

• Name (first and last name)
• Email address
• Password (encrypted and securely stored)
• Profile information you choose to provide

2.2 Usage Information

We automatically collect information about your interaction with our platform:

• Practice session data (questions answered, scores, time spent)
• Exam preferences and progress
• Device information (browser type, operating system)
• IP address and general location
• Cookies and similar tracking technologies

2.3 Payment Information

When you make a purchase, payment information is processed securely through our payment processor (Paystack/Stripe). We do not store complete credit card information on our servers. We retain transaction records for accounting and subscription management purposes.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Create and manage your account
• Track your progress and provide personalized recommendations
• Process payments and send transaction confirmations
• Send you service-related emails (account verification, password reset)
• Respond to your inquiries and provide customer support
• Analyze usage patterns to improve our platform
• Detect and prevent fraud, abuse, or illegal activities
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Payment processors (Paystack, Stripe)
• Email service providers
• Cloud hosting services (Vercel, Railway)
• Analytics providers (Google Analytics)

4.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests, such as:

• Court orders or subpoenas
• Government investigations
• To protect our rights, safety, or property
• To prevent fraud or security threats

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing
• Regular security assessments
• Access controls and authentication
• Secure backup procedures

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Receive your data in a portable format
• Opt-out: Unsubscribe from marketing emails
• Object: Object to certain processing of your data

To exercise these rights, please contact us at privacy@certgecko.com

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Analyze site traffic and usage patterns
• Improve user experience

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our platform.

8. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations. When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, accounting, or security purposes.

9. Children's Privacy

Our service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

11. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: