Privacy Policy
XP Certs ("we," "our," or "us") operates xpcerts.com and provides IT certification exam preparation services. This Privacy Policy explains how we collect, use, and protect your information when you use our platform.
1. Information We Collect
Account information: When you register, we collect your name, email address, and encrypted password. If you sign in with a third-party provider (Google, GitHub, Microsoft, Apple), we receive your name and email from that provider.
Usage data: We collect information about how you use XP Certs, including practice session results, certification paths chosen, XP and progression data, streak history, and feature interactions.
Payment information: Billing is handled by Stripe. We never store your full card number. We receive subscription status, last-4 of your card, and billing dates from Stripe.
Technical data: We log IP addresses, browser/device type, pages visited, and timestamps for security and operational purposes. These logs are retained for up to 90 days.
2. How We Use Your Information
- To create and manage your account
- To personalize your study plan and track your progress
- To process payments and manage your subscription
- To send transactional emails (password resets, billing receipts)
- To detect and prevent fraud or abuse
- To improve the platform and fix issues
- To comply with legal obligations
We do not send marketing emails without your consent, and we do not sell your personal data to any third party.
3. Data Sharing
We share your data only with the following categories of service providers who help us operate XP Certs:
- Stripe — payment processing and subscription management on xpcerts.com
- Apple and Google — payment processing for subscriptions bought in the iOS and Android apps
- RevenueCat — verifying App Store and Google Play subscriptions; it receives your account ID and purchase records, not your name or card details
- Supabase / PostgreSQL — database hosting for account and progress data
- Google Firebase — hosting and content delivery
- EmailJS — delivering issue reports you send from the app (your name, email, description and any screenshot you attach)
- Resend — transactional email delivery
We require all providers to handle your data in accordance with applicable data protection laws and to provide at least the same level of protection as described in this policy.
4. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it longer (e.g., billing records for tax purposes, up to 7 years).
5. Cookies and Tracking
We use a minimal number of cookies required to operate the service, including a session token stored in your browser's localStorage. We do not use third-party advertising cookies or tracking pixels.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to or restrict certain processing
- Data portability
To exercise any of these rights, contact us at support@xpcerts.com. We will respond within 30 days.
7. Security
We protect your data using industry-standard practices including: bcrypt password hashing, HTTPS-only transport, JWT-based authentication with session versioning, and role-based access controls. No system is 100% secure — if you believe your account has been compromised, contact us immediately.
8. Children's Privacy
XP Certs is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date above. Continued use of the service after changes constitutes acceptance of the updated policy.
10. Contact Us
Questions about this Privacy Policy? Contact us at:
- Email: support@xpcerts.com
- Website: xpcerts.com