Privacy Policy

1. Information we collect

• Account information — your name, email address, and the organization details provided when an account is created or you accept an invitation.
• Authentication data — security settings such as password hashes, multi-factor authentication configuration, and a security PIN. If you connect Google sign-in, we receive your Google account’s email address and basic profile information.
• Usage and security logs — sign-in events, administrative actions, IP address, and device/browser information used to operate and secure the Service.
• Content you submit — information you enter while using the platform, such as organization profiles and configuration.

2. How we use information

• To provide, maintain, and improve the Service.
• To authenticate users and protect accounts, including detecting and preventing unauthorized access.
• To send transactional messages such as invitations, email verification, and password-reset links.
• To respond to enquiries and provide support.
• To comply with legal obligations.

We do not sell your personal information, and we do not use it for advertising.

3. Service providers we share data with

We rely on a small number of trusted providers to run the Service. They process personal information only on our behalf and under contract:

• Cloud infrastructure — authentication, database, and backend hosting for the Service.
• Google — optional “Sign in with Google” authentication, where you choose to connect a Google account.
• Email delivery — sending transactional messages such as invitations, email verification, and password-reset links.
• Hosting and content delivery — serving the application to your browser.

We may also disclose information where required by law or to protect the rights, safety, and security of our users and the Service.

4. Data retention

We retain personal information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer required, we delete or anonymize it.

5. Security

We use technical and organizational measures to protect personal information, including encryption in transit, access controls, multi-factor authentication, and a security PIN for sensitive actions. No method of transmission or storage is completely secure, but we work to protect your information and continually improve our safeguards.

6. International transfers

Our providers may process and store information in countries other than your own. Where information is transferred internationally, we take steps to ensure it remains protected in accordance with this policy and applicable law.

7. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details below. Administrators can also update much of this information directly within the platform.

8. Children

The Service is intended for business use and is not directed to children. We do not knowingly collect personal information from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above, and material changes will be communicated through the Service where appropriate.

10. Contact

If you have questions about this Privacy Policy or how your information is handled, contact us at admin@traininghq.com.