Privacy Policy

This policy explains what personal data Skelro Technologies (OPC) Private Limited (“we”) collects when you use CertifyCloudx, why, who it is shared with, and your rights. We are the data fiduciary (controller) for this data.

1. What we collect

• Account details — your name and email address. If you sign up with a password we store only a one-way (bcrypt) hash of it, never the password itself. If you sign in with Google we receive your name, email address and profile photo from Google.
• Profile details you choose to add — job title and country. We also record your timezone, detected from your browser, so daily limits and streaks follow your local day.
• Learning activity — the certifications you add, your answers and attempts, bookmarks and notes, practice and exam sessions (including time spent), and daily activity totals.
• Exam session details — the IP address and browser type when you start a timed exam, used to keep sessions secure and resolve disputes.
• Payments — the plan bought, amount, currency, your approximate country, status and Razorpay's order and payment references. Card, UPI and bank details are entered with Razorpay and never reach us.
• Things you post or send — discussion comments (shown to other learners with your name), question reports, feedback messages, and material you upload to the Contribute feature.

2. Why we use it

• To provide the Service: your account, sign-in, progress tracking, plans and access.
• To run the Contribute feature: uploads are analysed to extract anonymised topic signals (which topics and concepts the material tests) that help us write new, original questions. Your wording is not published.
• To keep the Service secure, prevent abuse and enforce our Terms.
• To answer your messages and handle complaints.

We process data with your consent (given when you sign up or upload) and where necessary to provide the Service you asked for, meet legal obligations, or for our legitimate interest in keeping the Service secure. We do not sell personal data, show advertising, or use your data to profile you for marketing.

3. Who we share it with

Only with service providers who process it on our behalf, under contract, for the purposes above:

• Our hosting provider — runs the application and its database.
• Google Cloud — file storage for Contribute uploads.
• Google — sign-in, if you choose “Continue with Google”.
• Razorpay — our payment gateway, which processes payment when you buy a plan. We share your name and email to pre-fill the checkout; your payment details are collected by Razorpay directly and handled under Razorpay's privacy policy. Razorpay tells us the order and payment reference, amount and status so we can activate your access.
• Anthropic — an AI service that analyses Contribute uploads to extract topic signals. Uploads are sent only when you submit them.

We may also disclose data where the law requires it, or to protect rights and safety. Some providers may process data outside India; we rely on their contractual and security commitments when they do.

4. Cookies and local storage

We use only what the Service needs to work:

• Sign-in cookies — keep you signed in and protect forms against cross-site request forgery. These are strictly necessary.
• Browser storage — remembers display preferences such as light/dark theme and whether the side panel is collapsed. It stays in your browser.

We do not use advertising or third-party analytics cookies.

5. How long we keep it

• Account and learning data — while your account is open. When you ask us to delete your account, we delete or anonymise it within 30 days.
• Uploaded files — until you delete the upload or your account. Anonymised topic signals derived from them contain none of your wording and are kept.
• Security logs — for a limited period needed to investigate abuse.

6. Your rights

Subject to applicable law — including India’s Digital Personal Data Protection Act, 2023 and, where it applies, the EU/UK GDPR — you can ask to:

• access a summary of the personal data we hold about you;
• correct or update it (most profile details can be edited in the app);
• delete it or close your account;
• withdraw consent (this does not affect processing already done);
• nominate someone to exercise your rights if you are unable to.

Email support@certifycloudx.com from your account’s address. We respond within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India or, in the EU/UK, your local data protection authority.

7. Security

We use encrypted connections (HTTPS), hashed passwords, access controls and least-privilege access to production systems. No system is perfectly secure; we will notify you and the authorities of a personal data breach as the law requires.

8. Children

CertifyCloudx is for adults preparing for professional certifications. It is not intended for anyone under 18, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

9. Changes

We will update the “last updated” date when this policy changes and notify signed-in users of material changes.

10. Grievance officer

Privacy complaints can be sent to the Grievance Officer, Skelro Technologies (OPC) Private Limited, at support@certifycloudx.com.

Questions about this policy: support@certifycloudx.com. Skelro Technologies (OPC) Private Limited, Bengaluru, Karnataka, India.