Privacy policy

This policy explains how CertsToWork (“we”, “us”) collects, uses and shares personal information when you use certstowork.com and our online training, certificates and manager tools (the “Service”). By using the Service you agree to this policy.

Information we collect

• Account information: your name (as it should appear on certificates), email address, and a password if you choose one. Passwords are stored only as a one-way cryptographic hash; we can't see them.
• Training records: courses you enroll in, lesson progress, knowledge-check and exam answers and scores, attempt dates, certificates issued, and any confirmation you give (for example, that you meet a course's minimum age).
• Practical evaluation records: where a course requires one, the evaluator's name and title, date, location, equipment, checklist results and attestation.
• Organization information: if your employer gives you a training seat, the organization name, your site or location, and your role in the organization.
• Purchase information: what you bought, the amount and the date. Payments are processed by Stripe; we never receive or store your full card number.
• Technical and security information: IP address, browser type and the times of sign-ins and important actions, kept in security and audit logs.
• Messages: emails we send you (sign-in links, invitations, reminders) and anything you send to us.

How we use information

• To provide training, grade exams, issue certificates and let others verify them.
• To let employers who purchased your seat track completion and record practical evaluations.
• To process payments and send receipts, sign-in links, invitations and expiration reminders.
• To keep the Service secure: preventing fraud and abuse, enforcing one active sign-in per account, and keeping audit records.
• To support you, improve the Service, and meet legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

Who can see your information

• Certificate verification: anyone with a certificate's ID, code or QR code can see the learner's name, the course, issue and expiration dates, status, practical evaluation details and the issuer. Verification never shows email addresses, scores or other account details.
• Your employer: if you use a seat purchased by an organization, its managers can see your name, email, site, course progress, certificate status and evaluation records for that training.
• Service providers who process data on our behalf: Cloudflare (hosting, database, file storage and security), Stripe (payments) and Resend (email delivery). They may use it only to provide their services to us.
• Legal and safety: when required by law, to protect rights and safety, or as part of a merger, acquisition or sale of assets, subject to this policy.

Cookies and local storage

We use one essential cookie to keep you signed in. We don't use advertising or third-party tracking cookies. If you install the Service as an app, your device may save copies of course pages you've opened so they work offline; these are cleared when you sign out.

How long we keep information

We keep account and training records while your account is active. Certificates and their verification, evaluation and audit records are kept for as long as they may need to be verified — typically for the certificate's validity period plus a reasonable period afterward, since employers and auditors may need to confirm past training. Purchase records are kept as required for accounting and tax purposes.

Your choices and rights

You can update your password from your account. You may ask us to access, correct, or delete your personal information, or for a copy of it, by emailing support@certstowork.com. Some records — for example, an issued certificate and its verification history, or records your employer needs for compliance — may need to be retained or anonymized rather than deleted. Depending on where you live (for example, California), you may have additional rights under applicable law; we will honor them, and we will not discriminate against you for exercising them.

Security

We use encryption in transit, hashed passwords and sign-in tokens, rate limiting, and access controls that keep each organization's data separate. No system is perfectly secure, so please use a strong password and tell us promptly if you suspect unauthorized access to your account.

Children

The Service is intended for workers and employers and is not directed to children under 16. Some courses require learners to be 18 or older.

Where we process information

We are based in the United States, and the Service is operated there. Our providers may process information in other countries with appropriate safeguards.

Changes

We may update this policy. If we make material changes, we will update the effective date above and, where appropriate, notify you by email or on the Service.

Contact

CertsToWork · certstowork.com · support@certstowork.com