Privacy Policy

1. Introduction & Scope

CertFactory (“we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy outlines how we collect, use, store, and safeguard your information when you visit our website, register an account, or use our certification practice platform. By using CertFactory, you consent to the data practices described in this policy.

2. Exact Data We Collect

To provide high-fidelity mock exams, domain diagnostics, and sync progress across your devices, we collect the following categories of information:

• Authentication & Account Data: Email address, encrypted credentials, and display name provided during signup or authentication via Google Firebase Auth.
• Usage & Performance Data: Practice exam scores, question responses, test completion timestamps, domain diagnostic breakdowns, and study streaks.
• Technical & Performance Telemetry: IP address, browser type, device identifiers, operating system, and diagnostic logs used to prevent bot activity and maintain platform security.

3. Third-Party Processors

We partner with trusted industry-leading third-party service providers to deliver core functionalities. These vendors adhere to strict data protection standards:

• Stripe, Inc.: Handles secure payment processing for one-time premium purchases. Stripe collects billing details, credit card numbers, and transaction metadata in accordance with PCI-DSS compliance standards. CertFactory never stores full credit card numbers on our servers.
• Google Firebase & Cloud Infrastructure: Powers secure user authentication, database storage (Firestore), and serverless execution environments.

4. Cookie Policy & Tracking Technologies

We utilize essential session cookies, secure authentication tokens, and local storage mechanisms to keep you logged in, remember your quiz preferences, and ensure seamless navigation. You can configure your browser to reject cookies; however, disabling essential cookies may prevent you from logging into your account or taking practice exams.

5. Data Retention & Security Timelines

We retain your personal data and examination progress logs for as long as your account remains active or as needed to provide services. If you request account deletion, we will purge your personal identifier and exam history within 30 days, except where retention is required for tax, fraud prevention, or legal compliance purposes.

6. User Rights (GDPR & CCPA Compliance)

Depending on your geographic jurisdiction (including the European Union under GDPR and California under CCPA), you possess specific rights regarding your personal data:

• Right to Access: You may request an exported copy of all personal data and exam history associated with your account.
• Right to Rectification: You can update or correct your profile information directly through your account dashboard.
• Right to Deletion (“Right to Be Forgotten”): You have the right to request permanent deletion of your account and associated database records at any time.
• Right to Restriction: You may restrict processing of your data under specific statutory conditions.

7. Contact & Privacy Inquiries

To exercise any of your privacy rights, submit a data access request, or ask questions about our data practices, please contact our Data Protection Officer at: