Privacy Policy

Professional Project Management License ("PML," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (the "Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our Service.

2.1 Personal Information You Provide

We collect information that you voluntarily provide to us, including:

• Account Information: Name, email address, password
• Profile Information: Professional details, qualifications, work experience
• Payment Information: Billing address (payment card data is handled by Stripe and never stored on our servers)
• Exam Information: Exam responses, scores, attempt history
• Communications: Messages you send us, feedback, support requests

2.2 Information Automatically Collected

When you use our Service, we automatically collect certain information:

• Device Information: IP address, browser type, operating system
• Usage Data: Pages viewed, time spent on pages, links clicked
• Course Progress: Lessons completed, videos watched, quiz scores
• Exam Activity: Start/end times, tab switches, time per question
• Cookies and Tracking: Session cookies, authentication tokens

2.3 Information from Third Parties

If you sign in using Google OAuth, we receive:

• Your name and email address from Google
• Profile picture (if available)
• Google account ID (for authentication purposes)

We use the information we collect for the following purposes:

3.1 Provide and Improve the Service

• Create and manage your account
• Process payments and fulfill purchases
• Deliver course content and track your progress
• Administer exams and issue certificates
• Improve course content and platform functionality
• Develop new features and services

3.2 Communications

• Send transactional emails (account verification, password resets, purchase confirmations)
• Send educational emails (exam reminders, certificate expiration notices)
• Respond to your inquiries and support requests
• Send marketing communications (with your consent, which you can withdraw at any time)

3.3 Security and Compliance

• Detect and prevent fraud, abuse, and security incidents
• Monitor exam integrity and detect cheating
• Comply with legal obligations and enforce our Terms of Service
• Protect our rights, privacy, safety, or property

3.4 Analytics and Research

• Analyze usage patterns and trends
• Measure effectiveness of our courses and exams
• Conduct research to improve educational outcomes
• Generate aggregate, de-identified statistics

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Stripe: Payment processing (subject to Stripe's privacy policy)
• Resend: Email delivery service
• Neon: Database hosting (PostgreSQL)
• Vercel: Website hosting and infrastructure
• Google: OAuth authentication

These providers are contractually obligated to use your information only for the purposes we specify and to maintain appropriate security measures.

4.2 Certificate Verification

Your certificate information (name, certification status, issue date, expiry date) is made publicly available through our verification system. This allows employers and others to verify your certification.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Court orders or subpoenas
• Legal processes or government requests
• Enforcement of our Terms of Service
• Protection of our rights, property, or safety, or that of our users or the public

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership.

4.5 With Your Consent

We may share your information for other purposes with your explicit consent.

We implement appropriate technical and organizational security measures to protect your information from unauthorized access, disclosure, alteration, or destruction:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Secure password hashing (bcrypt)
• Regular security assessments and updates
• Access controls and authentication
• Monitoring for suspicious activity

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

We retain your personal information for as long as necessary to:

• Provide the Service and maintain your account
• Comply with legal, tax, and accounting obligations
• Resolve disputes and enforce our agreements
• Prevent fraud and abuse

Specific retention periods:

• Account data: Until you request deletion or 3 years after last activity
• Course progress: Until you request deletion or 3 years after last activity
• Exam records: Retained for 7 years for verification and compliance
• Certificates: Retained permanently for verification purposes
• Payment records: Retained for 7 years for tax and legal compliance

You have the following rights regarding your personal information:

7.1 Access and Portability

You can access and download your personal information from your account dashboard. You may also request a copy of your data by contacting us at privacy@projectmanagementlicense.com

7.2 Correction

You can update your account information directly in your profile settings. If you need assistance correcting your information, contact us at support@projectmanagementlicense.com

7.3 Deletion

You may request deletion of your account and personal information by contacting us at privacy@projectmanagementlicense.com. Please note:

• Deletion is permanent and cannot be undone
• Some information may be retained for legal or compliance purposes
• Certificate verification records will be retained but anonymized

7.4 Marketing Communications

You can opt out of marketing emails by clicking the "unsubscribe" link in any marketing email or by updating your preferences in your account settings. You cannot opt out of transactional emails (e.g., purchase confirmations, password resets).

7.5 Cookies

You can manage cookies through your browser settings. Note that disabling cookies may affect the functionality of the Service. See our Cookie Policy for more information.

7.6 Do Not Track

Our Service does not currently respond to "Do Not Track" signals from browsers.

Our Service is not directed to children under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately at privacy@projectmanagementlicense.com and we will delete that information.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from those in your country. By using the Service, you consent to the transfer of your information to the United States and other countries where we or our service providers operate.

We take appropriate safeguards to ensure your information receives adequate protection in accordance with this Privacy Policy.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we collect
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the "sale" of personal information (we do not sell personal information)
• Right to Non-Discrimination: Exercise your rights without discriminatory treatment

To exercise these rights, contact us at privacy@projectmanagementlicense.com with "California Privacy Rights" in the subject line. We will verify your identity before processing your request.

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right of Access: Obtain confirmation of whether we process your data and access to such data
• Right to Rectification: Correct inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Restrict the processing of your personal data
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to the processing of your personal data
• Right to Withdraw Consent: Withdraw consent for processing based on consent

To exercise these rights, contact us at privacy@projectmanagementlicense.com. You also have the right to lodge a complaint with your local data protection authority.

Legal Basis for Processing: We process your personal data based on:

• Performance of a contract (providing the Service you purchased)
• Legitimate interests (improving our Service, fraud prevention)
• Consent (marketing communications)
• Legal obligations (compliance with laws)

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a new "Last Updated" date.

If we make material changes, we will notify you by email or through a prominent notice on our Service. Your continued use of the Service after the changes take effect constitutes your acceptance of the revised Privacy Policy.