Privacy Policy

This Privacy Policy explains how SecureTMRW collects, uses, shares, and protects information when you use our cybersecurity training platform.

Information We Collect

We collect account information such as email address, display name, profile image, authentication provider identifiers, organization/team membership, and messages you submit through contact forms. We also collect training activity, including module progress, quiz answers, scores, XP, certificates, tabletop exercise results, flashcard and review activity, and shop/customization choices.

How We Use Information

We use this information to authenticate you, deliver training, save progress, issue certificates, operate team features, prevent abuse, troubleshoot issues, respond to support requests, improve content quality, and maintain the security and reliability of the platform.

Cookies and Analytics

Required cookies support sign-in, security, and saved preferences. Optional analytics cookies help us understand aggregate usage through Vercel Analytics when enabled. You can choose essential-only cookies from the cookie banner.

Retention

We retain account and training records while your account is active so your progress, certificates, and team reporting remain available. Contact and support submissions are retained only as long as needed for support, abuse prevention, and operational records. You may request deletion as described below.

Processors and Service Providers

We use service providers to run the platform, including Convex for backend data and authentication, Vercel for hosting, analytics, and performance telemetry, Resend for email delivery when configured, Cloudflare Turnstile for abuse prevention when enabled, and WorkOS only for dormant migration scaffolding unless separately enabled.

Security

We use technical and organizational safeguards designed to protect personal information, including HTTPS, access controls, authentication, rate limiting, and least-privilege administrative workflows. No online service can guarantee absolute security.

Your Rights

Depending on your location, you may have rights to access, correct, export, delete, or object to processing of your personal information. You can update profile details in the app, and you can contact us for account deletion or privacy requests.

Children

SecureTMRW is intended for users who can lawfully use online training services in their jurisdiction. We do not knowingly collect personal information from children without appropriate consent.

Contact

For privacy requests or questions, contact privacy@securetmrw.org. For legal notices, contact legal@securetmrw.org.