This policy explains what personal information SealReady Training ("we", "us") collects through SealReady, how we use it, and the choices you have. We follow the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy law.
1. Information we collect
- Account information: your email address, the name you enter, and your password (stored only as a secure hash by our authentication provider).
- Study data: quiz and exam attempts, the answers you select, scores, progress, bookmarks, notes you write, your target exam date, study streaks, and which questions' answers you have been shown (the money-back guarantee's limit is counted from it).
- Payment information: payments are processed by Stripe. We never receive or store your full card number. We store your payment status and Stripe reference identifiers so we can unlock Pro and handle refunds.
- Technical information: standard server logs such as IP address, browser type and pages requested, collected by our hosting provider for security and reliability.
- How you found us: when you arrive through one of our ads or links, or from another website, your browser keeps a short note of which one (the link's label or the site's name, and the page you arrived on) for up to 90 days. If you create an account, the note is saved with it.
2. How we use it
- to provide the Service, save your progress and show your results;
- to process your purchase and provide Pro access;
- to respond to support requests and content-error reports;
- to keep the Service secure and prevent abuse;
- to learn which of our ads, posts and links bring new students (from how you found us);
- to improve the Service using aggregated, non-identifying statistics (for example, which questions are most often missed).
We do not sell your personal information and we do not use it for third-party advertising.
3. Service providers
We share information only with the providers needed to run the Service, each bound to protect it:
- Supabase — database and authentication;
- Vercel — web hosting and privacy-friendly visit counts;
- Cloudflare — the "verify you are human" check (Turnstile) on the sign-in, sign-up and password-reset pages, which sees your IP address and browser details to tell people from bots;
- Stripe — payment processing;
- Resend — sending account emails (sign-up confirmation, password reset);
- Sentry — error monitoring: technical details of crashes (page, browser, error message), without your name, email or IP address;
- GitHub — an encrypted weekly copy of the database, kept for 90 days so the Service can be restored if something goes wrong. Only we hold the key that opens it.
These providers may store or process data outside Canada (for example, in the United States), where it may be subject to the laws of those jurisdictions. We may also disclose information where required by law.
4. Cookies
We use essential cookies to keep you signed in, a local browser setting to remember your light/dark theme, and, for up to 90 days, a local note of how you found us (section 1). We do not use advertising or cross-site tracking cookies, and we don't share how you found us with advertisers.
5. Retention
We keep your information while your account is active. Deleting your account from the profile page removes your account and study data, and cancels a Monthly Pass so it doesn't renew. Payment records may be retained as required for accounting, tax and fraud-prevention purposes. If you used the money-back guarantee, we keep a one-way hash of your email address (not the address itself) after deletion, only so the guarantee stays once per person, and a one-way hash of the card identifier Stripe gives us for the card that was refunded (never the card number, and not something the card can be worked out from), only so it stays once per card.
6. Your rights
- You can view and update your name from your profile, and reset or delete your data there.
- You can ask us to access, correct or delete your personal information by contacting us.
- You can withdraw consent, subject to legal or contractual restrictions, though this may mean we can no longer provide the Service.
- If you are not satisfied with our response you may contact the Office of the Privacy Commissioner of Canada.
7. Security
Data is encrypted in transit, access to the database is restricted by row-level security so that you can only reach your own records, and secrets are held server-side. No system is completely secure, so please use a strong, unique password.
8. Children
The Service is intended for apprentices and tradespeople and is not directed to individuals under 16.
9. Changes and contact
We may update this policy; the "Last updated" date will change when we do. Privacy questions or requests: support@sealready.ca or our contact page.