Privacy Policy

This policy is published by Qualeron Technologies, LLC ("Qualeron," "we"), and covers the public website, the Qualeron platform, and account and billing interactions with certifying-body customers. It does not cover a program-specific notice a certifying body publishes on its own candidate-facing pages, where one applies.

Qualeron plays two different roles, and which one applies decides who you ask for what:

• Controller. For information about our own website visitors, sales and support contacts, and the staff, admins and reviewers of a certifying-body customer's own account, Qualeron decides why and how that information is used.
• Service provider / processor. For information a certifying body enters or collects about its own candidates, learners or credential holders — applications, eligibility answers, exam results, credential records — Qualeron processes it only at that certifying body's direction, under its subscription agreement. Qualeron does not decide why that data is collected or what happens to a candidate as a result.

Depending on how you reach Qualeron, we may collect:

• Website forms: name, work email, organization, role, and what you wrote — a quote request, an application to bring a program onto Qualeron, a support message, a privacy request.
• Account and workspace data: sign-in credentials, the roles and permissions your organization grants, and actions taken in the platform, for the staff, administrators and reviewers your organization adds.
• Billing data: the subscription plan and term recorded on your account, invoices, and payment method details, which are collected and stored by our payment processor (Stripe) — Qualeron does not store full card numbers.
• Candidate and credential-holder data, only as your certifying body's own customer: whatever a certifying body configures its programs to collect from its own candidates — application answers, eligibility documentation, scheduling and exam-session data, scores, and credential and renewal records. This category is processed under the controller/processor split in §1.

Qualeron processes ordinary server and security information needed to operate the platform, prevent abuse and keep an auditable record of what happened and who did it — a requirement of the compliance work certifying bodies use the platform for. Audit entries commonly store a cryptographic hash derived from an IP address rather than the raw address. Hosting and infrastructure providers may separately keep their own customary server logs under their own retention rules.

The website and platform use browser localStorage for functional preferences — privacy choices, interface state such as a dismissed notice, and in-progress form drafts. This storage stays in your browser until cleared or replaced and is not an advertising tracker; see privacy choices below for the optional-diagnostics control.

Account, billing and website information is used to respond to inquiries and applications, provision and operate a subscription, process payment, provide support, secure the platform and keep the audit trail those two things depend on, and improve the product. Qualeron does not sell personal information and does not use it for third-party advertising.

Candidate and credential-holder data is used only to provide the platform to the certifying body that collected it, and only as that body's configuration and instructions direct — Qualeron does not use it for Qualeron's own marketing, and does not repurpose one certifying body's candidate data for another's program.

Qualeron does not sell personal information. Qualeron does not share a certifying body's candidate data with another certifying body, or with the general public, beyond what that body itself configures (for example, a public verification lookup it turns on for its own credential holders). Qualeron may disclose information where required by law, to protect the security or integrity of the platform, or in connection with a corporate transaction, subject to the confidentiality commitments in the applicable subscription agreement.

Account, billing and website records are kept for the period reasonably required by the subscription agreement, applicable law, security needs and the purpose for which the information was collected.

Candidate and credential-holder data is kept per the retention settings and instructions of the certifying body that collected it, and per the export and post-termination terms in the Terms of Use. A request to access, correct or delete that data should go to the certifying body first; see §10.

Qualeron uses administrative and technical safeguards appropriate to a platform handling assessment and credentialing records, including encryption in transit, access controls scoped by role, password hashing, CSRF protection, rate limiting, file-type validation and audit logging. No internet service can guarantee absolute security. Do not send payment-card numbers, government identification numbers or other unnecessary sensitive information through ordinary web forms.

For information Qualeron holds as controller — your own account, billing or website-contact information — you may request access, correction or deletion, subject to identity verification and records Qualeron must keep for legal or security reasons. Reach us through Contact Qualeron.

Where the California Consumer Privacy Act, as amended, applies to a Qualeron processing activity, a California resident may have rights to know or access covered personal information, request correction or deletion, and exercise other rights the law provides. Qualeron does not sell personal information and does not share personal information for cross-context behavioral advertising. Qualeron will not discriminate against anyone for exercising an applicable privacy right.

The Qualeron website and platform are directed to organizations and to adults acting in a professional or administrative capacity; Qualeron does not knowingly design its own forms to solicit personal information from children. Where a certifying-body customer's own candidate population may include minors, that body is responsible for the notices and consents its own program requires; Qualeron processes what it is instructed to process under §1.

Material changes to this policy are dated and published on this page. A change does not retroactively narrow a confidentiality commitment already made about previously submitted information.

Privacy questions or requests about Qualeron's own account, billing or website data can be submitted through Contact Qualeron. Qualeron will verify the request as appropriate before releasing or changing personal information.