1. Overview
This policy explains what information CertRidge collects, how we use it, who we share it with, and the choices you have. It applies to the CertRidge web app and certridge.com, which are operated by BGAN Technologies Ltd. It doesn't cover third-party sites we link to.
2. Information we collect
Account information
Your name, email address, and password (stored as a salted hash, never in plain text). If you sign in with Google or Facebook, we receive your name and email address from that provider instead of a password.
Study activity
Your practice-exam attempts — the questions served, the answers you chose, your scores, timing, and the questions you missed or flagged. We use this to run your dashboard, calculate your readiness score, build Review Mode, and (if you leave it enabled) send the spaced-repetition review-digest email. You can unsubscribe from that email at any time from the link in it or from your account.
Billing information
Payments are handled by our payment processor, Paddle, which acts as Merchant of Record. We never see or store your full card number. We do store which certifications (or all-access) you've purchased, the related Paddle transaction and customer identifiers, and your billing email.
Technical & usage data
Standard web request data such as your IP address, browser and device type, and the pages you visit. We use this for security — rate-limiting login attempts, bot protection, and abuse detection — and for basic product analytics.
3. How we use your information
To provide and operate the service (serving exams, scoring, tracking your progress, processing purchases); to secure your account (session management, rate-limiting, abuse prevention); to communicate with you (email verification, password resets, review-digest emails you've opted into, and support); and to improve CertRidge (understanding how it's used, fixing bugs). We don't sell your personal information, and we don't use your data to train any AI models.
4. How we share information
We share information with the vendors that help us run CertRidge, only to the extent needed for them to provide that service:
- Paddle — payment processing and billing (acts as Merchant of Record).
- Railway — application hosting and our database.
- Cloudflare — content delivery and bot protection on sign-up and login.
- Postmark — sending our transactional email (verification, password reset, review digests).
- Google and Meta (Facebook) — only if you choose to sign in with them.
We may also disclose information if required by law, or as part of a merger, acquisition, or sale of assets (with notice to you). We don't sell your personal information to third parties.
5. Cookies & similar technologies
We use a session cookie to keep you signed in — it's required for the app to function and isn't used for advertising or cross-site tracking. Our bot-protection provider may set a short-lived token to verify that sign-up and login requests come from a real browser. We don't use third-party advertising cookies.
6. Data security
Passwords are hashed and never stored in plain text. Data is encrypted in transit via HTTPS. You can view and end active sessions from your account. No method of transmission or storage is completely secure, and we can't guarantee absolute security.
7. Data retention
We keep your information for as long as your account is active, or as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. If you ask us to close your account, we'll delete or anonymize your information, except where we're required or permitted to keep it — for example, billing records we're legally required to retain.
8. Your rights & choices
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to lodge a complaint with your local data protection authority. To exercise any of these, email us at [email protected] — we handle these requests directly.
9. Children's privacy
CertRidge is a study tool for working professionals and is not directed at children. We don't knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we'll delete it.
10. International data transfers
CertRidge is operated from Israel, and we use service providers that process data in other countries, including the United States. Where we transfer personal information across borders, we take steps intended to keep it protected consistent with this policy and applicable law.
11. Changes to this policy
We may update this policy from time to time. If we make material changes, we'll notify you (for example, by email or an in-app notice) before they take effect. Continued use of CertRidge after a change means you accept the updated policy.
12. Contact us
Questions about this policy, or want to exercise a privacy right? Email [email protected]. You can also review our Terms & Conditions.