Privacy Policy

Vorentoe LLC (“we,” “us,” or “our”) operates Certly Prep and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information about you when you use our Service.

1. Information We Collect

Account Information

When you sign in via Google OAuth (handled by NextAuth), we receive your name and email address from Google. We store this information in a PostgreSQL database hosted on Railway (accessed via Prisma) to identify your account and personalize your experience.

Usage Data

We collect information about how you use the Service, including:

• Exam scores and quiz results
• Quiz and lesson progress
• Flashcard and study session activity
• Uploaded study materials (processed to generate quizzes)

Payment Information

Payments are processed by Stripe. We do not store your credit or debit card numbers. We receive limited billing details from Stripe (such as the last four digits of your card and billing country) for subscription management purposes.

2. How We Use Your Information

• To provide, maintain, and improve the Service
• To personalize your study experience and track your progress
• To process subscription payments and send billing communications
• To send team-plan invite and license notification emails
• To respond to your support requests and inquiries
• To send important notices about the Service (e.g., policy updates)
• To detect and prevent fraud or abuse

We do not sell your personal information to third parties.

3. AI Interactions

Certly Prep uses Anthropic's Claude API to generate AI-powered explanations, coaching content, and practice quizzes. When you request an AI explanation, chat with the study coach, or generate a quiz from uploaded material, the relevant question, prompt, or study content is sent to Anthropic for processing. This data handling is subject to Anthropic's privacy policy and terms of service.

We do not intentionally transmit sensitive personal information to the Claude API. Avoid including personal details in prompts or uploaded study materials submitted to AI features.

4. Cookies & Local Storage

We use browser local storage and session cookies to maintain your authentication state (NextAuth session cookies) and store preferences (such as your selected certification). We do not use third-party advertising cookies.

5. Third-Party Services

We use the following third-party services (sub-processors) to operate Certly Prep. Each has its own privacy policy governing data they process:

6. Data Sharing

We do not sell, rent, or trade your personal information. We may share information in the following limited circumstances:

• Service Providers: With third-party vendors (Anthropic, Stripe, Resend, Railway, and Google) solely to operate the Service, under confidentiality obligations.
• Legal Requirements: If required by law, court order, or to protect the rights and safety of Vorentoe LLC or others.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you.

7. Data Security

We implement reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS), server-side access controls for the PostgreSQL database, and Stripe's PCI-compliant infrastructure for payment data.

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Children's Privacy

Certly Prep is not directed at children under 13 years of age, and we do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA). If you believe we have inadvertently collected information from a child under 13, please contact us immediately at shannon@govorentoe.com so we can delete it.

9. Your Rights

California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your personal information, and opt out of any sale of personal information (we do not sell personal information). To exercise these rights, contact us at shannon@govorentoe.com.

EU/EEA Residents (GDPR)

If you are located in the European Union or European Economic Area, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data (“right to be forgotten”)
• Request portability of your data in a structured, machine-readable format
• Object to or restrict processing of your data

To exercise any of these rights, please contact us at shannon@govorentoe.com. We will respond within 30 days.

10. Data Retention

We retain your account and usage data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving billing disputes).

You may request account deletion at any time by contacting shannon@govorentoe.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last updated” date at the top of this page and, where appropriate, by email. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: