Privacy Policy
This policy explains what personal information HelpCert collects, why, and what we do with it. We keep collection to the minimum needed to run the Service.
1. What we collect
- Account details — your email address and a securely hashed password. We never store your password in readable form.
- Study progress — which questions you have answered, whether you got them right, your mock exam scores and the dates you studied.
- Subscription status — which certification tracks you have access to and whether the subscription is active.
- Technical data — standard server logs kept by our hosting provider, such as IP address and browser type, used for security and reliability.
We do not collect your card number, expiry date or security code. Payments are handled entirely by Stripe.
2. Why we use it
- To create and secure your account and sign you in.
- To save your progress so it follows you between devices.
- To grant access to the tracks you have subscribed to.
- To send essential service emails such as verification codes and receipts.
- To diagnose faults and protect the Service from abuse.
3. Service providers
We rely on a small number of established providers, each handling only what they need:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Accounts and database | Email, hashed password, progress, access status |
| Stripe | Payments and subscriptions | Email, payment details (held by Stripe, not us) |
| Netlify | Website hosting | Standard server logs |
| Resend | Sending account emails | Email address and message content |
These providers may process data outside Australia. We choose providers that apply recognised safeguards to international transfers.
4. What we never do
- We do not sell or rent your personal information.
- We do not show advertising or share your data with advertisers.
- We do not use third-party tracking or advertising cookies.
5. Cookies and local storage
We use only what the Service needs to function: a session token to keep you signed in, and browser storage to hold your study progress and preferred certification track. There are no advertising or cross-site tracking cookies.
6. How long we keep it
We keep your account and progress while your account is open. If you ask us to delete your account, we remove your personal data within 30 days, except where we must retain limited records (such as payment records) to meet legal or tax obligations.
7. Security
Traffic is encrypted in transit with HTTPS. Passwords are hashed by our authentication provider. Database access is restricted by row-level security so users can only read their own records. No system is perfectly secure, but we take reasonable steps to protect your information and will notify you and any relevant regulator of a data breach where required by law.
8. Your rights
You may ask us to access, correct or delete your personal information, or to provide a copy of it. Email support@helpcert.com and we will respond within a reasonable period. If you are unhappy with how we handle a request, you may complain to the Office of the Australian Information Commissioner.
9. Children
HelpCert is intended for people aged 16 and over. We do not knowingly collect information from younger children. If you believe a child has created an account, contact us and we will remove it.
10. Changes
We may update this policy. Material changes will be notified by email or within the Service.
11. Contact
Privacy questions or requests: support@helpcert.com