Privacy Policy

This policy explains what Certavo collects, why, who it is shared with, and the choices you have. It covers the Certavo website and the learning portal.

1. Who we are

Certavo is operated by Certavo Ltd, a company registered in England and Wales. We are the data controller for the personal data described in this policy. You can reach us at hello@certavo.app.

2. What we collect

Account data. You sign in with a Microsoft account. When you do, Microsoft sends us your name, email address, and a unique account identifier, which we store to create and recognise your Certavo account. We do not receive your Microsoft password.

Membership and billing data.When you subscribe, our payment provider Paddle sends us your customer and subscription identifiers, the subscription status, and billing period dates so we can unlock and manage your membership. Card details are entered on Paddle's checkout and are never sent to or stored on our servers.

Study activity. As you use the learning portal we record the practice sessions you start, the answers you give, your scores, questions you mark for review, and exams you favourite. This is what powers your progress and readiness tracking.

Messages. If you email us, we keep the message and our reply so we can deal with your request.

Technical and usage data. Like most websites we receive your IP address, browser and device type, and the pages you visit, and we may use aggregate usage statistics to understand how the site is used.

3. Why we use it, and the legal basis

• To provide the service — creating your account, unlocking membership, tracking your progress, and answering your messages. Basis: performance of our contract with you.
• To run and improve the service — keeping it secure, fixing problems, and understanding which content and features are used. Basis: our legitimate interest in operating a reliable service, balanced against your rights.
• To tell you about your account — for example a change to pricing or these terms, a failed payment, or a cancellation confirmation. Basis: contract and legitimate interest. We do not send marketing email without your consent.
• Legal obligations — keeping billing records for tax purposes and responding to lawful requests.

4. Who we share it with

We do not sell your personal data. We share it only with the providers we need to run Certavo, each of which processes it on our instructions or as an independent controller for its own service:

• Microsoft — provides the Microsoft account sign-in.
• Paddle.com— our merchant of record, which handles checkout, payment, invoicing and tax. Paddle's own privacy policy applies to the data you give it at checkout.
• Infrastructure and analytics providers — the hosting and tooling we use to run, secure and measure the service.

We may also disclose data where the law requires it, or to protect the rights, safety or property of Certavo or its users.

5. International transfers

Some of our providers may process data outside the UK. Where that happens we rely on the UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or the provider's equivalent safeguards.

6. How long we keep it

• Account and study data: for as long as your account exists. If you ask us to delete your account, we delete it within 30 days.
• Billing records: 6 years after the transaction, as UK tax law requires. Paddle keeps its own records under its policy.
• Support emails: up to 2 years after the matter is closed.

7. Your rights

Under UK data protection law you can ask us to: give you a copy of your personal data; correct it; delete it; restrict or object to how we use it; and provide it in a portable format. Where we rely on consent, you can withdraw it at any time. To exercise any of these rights, email hello@certavo.app— we will respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk), though we would appreciate the chance to resolve your concern first.

8. Cookies

We use cookies that are necessary for the service to work: to keep you signed in, to remember that you have a Microsoft session so we can sign you in without prompting, and to remember your preferences. You can block or delete cookies in your browser settings, but parts of the service may then not work.

9. Children

Certavo is for adults preparing for professional certifications. We do not knowingly collect data from anyone under 18; if you believe we have, contact us and we will delete it.

10. Changes to this policy

We may update this policy as the service or the law changes. For material changes we will email you or show a notice on the site before they take effect. The date at the top shows when it was last revised.

11. Contact

For privacy questions or requests, email hello@certavo.app. Our Terms of Service set out the rest of the agreement between us.