Privacy Policy
Last updated: June 2026
This policy explains what data CertGrid collects, how we use it, and your rights.
1. Data We Collect
- Account data: email address, display name, and hashed password
- Usage data: exam attempts, scores, answers, bookmarks, and session activity
- Technical data: IP address and approximate location (country) at sign-up and login, used for security, fraud/abuse prevention, and regional pricing
- Payment data: processed by Razorpay; we do not store card numbers
- Analytics data (with your consent): usage and behavior collected via Google Analytics and Microsoft Clarity (see section 3)
2. How We Use Your Data
- Provide and improve the service (scoring, analytics, progress tracking)
- Send transactional emails (verification, password reset)
- Aggregate anonymized statistics for platform improvements
3. Analytics and Cookies
With your consent, we use Google Analytics 4 and Microsoft Clarity to understand how visitors use CertGrid so we can improve it. These tools collect usage data such as pages viewed, clicks, scrolls, device and browser type, and approximate location (from IP). Clarity also captures anonymized session recordings and heatmaps; typed text and form fields are masked by default, and we exclude the admin and checkout/payment pages from recording.
This data is processed by Google and Microsoft as our analytics providers. See the Google Privacy Policy and the Microsoft Privacy Statement.
Analytics, and the cookies these tools set, load only after you accept them in our cookie banner. You can decline at any time, and you can change your choice later by clearing the site's stored preference or using your browser/extension controls. We do not use advertising pixels, and we do not sell or share your personal data with third parties for marketing purposes.
4. Data Storage and Security
Data is stored in a PostgreSQL database hosted on Microsoft Azure. Passwords are hashed with bcrypt. All connections use TLS encryption. Access to production systems is restricted to authorized administrators.
5. Payment Processing
Payments are processed by Razorpay. We store a payment reference and your access status, but never your card details.
6. Data Retention
Your data is retained for as long as your account is active. If you request account deletion, all associated data (profile, exam history, bookmarks, and access records) will be permanently removed.
7. Your Rights
You can access and export your data from your profile page, update your display name and password at any time, and request full account deletion by emailing support@certgrid.app.
8. Children
CertGrid is not intended for users under 16 years of age. We do not knowingly collect data from children.
9. Changes to This Policy
We may update this policy as needed. Material changes will be communicated via email or in-app notification.
10. Contact
For privacy questions or data requests, email support@certgrid.app.