Privacy Policy

1. Overview

The protection of your personal data is important to us. This privacy policy explains what data we collect, how we use it, and what rights you have regarding your data. This policy applies to all services offered by Certsqill at www.certsqill.com and www.certsqill.com.

2. Controller

The controller responsible for data processing on this website is:

Certsqill
Brüderstraße 25
26121 Oldenburg
Germany

Email: [email protected]

3. Data We Collect

3.1 Account Data

When you create an account, we collect your email address and password (stored encrypted). You may optionally provide a name. This data is required to provide our services.

3.2 Usage Data

We collect data about how you use our platform, including practice session results, exam scores, questions answered, and progress through certifications. This data is used to provide personalized learning analytics.

3.3 Payment Data

Payment processing is handled by Stripe. We do not store your credit card details. Stripe's privacy policy applies to payment data: stripe.com/privacy.

3.4 Technical Data

When you visit our website, our servers automatically log your IP address, browser type, operating system, referring URL, and pages visited. This data is used for security, debugging, and improving our services.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract performance (Art. 6(1)(b) GDPR) — to deliver the courses you purchase and provide our services
• Legitimate interests (Art. 6(1)(f) GDPR) — for security, fraud prevention, and service improvement
• Consent (Art. 6(1)(a) GDPR) — for marketing communications, where applicable
• Legal obligation (Art. 6(1)(c) GDPR) — for tax and accounting requirements

5. How We Use Your Data

• Providing and improving our certification practice platform
• Personalizing your learning experience
• Processing payments and delivering the courses you purchase
• Sending transactional emails (account confirmation, receipts)
• Sending marketing emails if you have opted in
• Analyzing aggregate usage to improve our content and platform
• Ensuring platform security and preventing fraud

6. Data Sharing

We do not sell your personal data. We share data only with:

• Supabase — database and authentication infrastructure
• Stripe — payment processing
• Vercel — website hosting
• Brevo and Resend — email delivery (transactional emails such as purchase confirmations, and, if you opt in, newsletter emails)
• Mistral AI (France, EU) — processes chat input to compose the answer

All processors are contractually bound to process data only on our instructions and in accordance with GDPR.

7. Chat Assistant

The chat window on our site answers questions about certification exams and about Certsqill. Here is what happens to what you enter:

• The message you type and the most recent messages from the same conversation are sent to Mistral AI (France, EU) and processed there by a language model, which composes the answer.
• Alongside them we send excerpts from our own content — the course catalogue, exam facts, and the platform description. These excerpts contain no personal data.
• Prices, exam fees, passing scores, and refund terms come from our own sources and are checked before the answer is shown. If the model states a figure that is not in them, the answer is discarded.
• We do not store the content of chat messages. They are neither written to our database nor used to train any model.
• Your IP address is processed to limit the number of requests per source, and is stored for that purpose only.

Please do not enter passwords, payment details, or other sensitive personal information into the chat.

8. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are legally required to retain it (e.g., billing records for 10 years under German tax law).

9. Cookies

We use technically necessary cookies for session management and authentication. We may use analytics cookies to understand how our platform is used. You can control cookie settings in your browser. Blocking technically necessary cookies may impair platform functionality.

10. Your Rights (GDPR)

You have the following rights regarding your personal data:

• Right of access — request a copy of your personal data (Art. 15 GDPR)
• Right to rectification — correct inaccurate data (Art. 16 GDPR)
• Right to erasure — request deletion of your data (Art. 17 GDPR)
• Right to restriction — restrict processing of your data (Art. 18 GDPR)
• Right to portability — receive your data in a portable format (Art. 20 GDPR)
• Right to object — object to processing based on legitimate interests (Art. 21 GDPR)
• Right to withdraw consent — withdraw consent at any time (Art. 7(3) GDPR)

To exercise your rights, contact us at [email protected]. You also have the right to lodge a complaint with your local supervisory authority.

11. Supervisory Authority

The competent supervisory authority for Certsqill is:

Landesbeauftragte für Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hannover
Germany
www.lfd.niedersachsen.de

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or a notice on our platform. The date at the top of this page reflects the most recent update.

13. Contact

For any privacy-related questions or requests, contact us at:
[email protected]