1. Introduction
ReadyScale ("we", "us", or "our") operates the ReadyScale platform, an AI-powered workforce readiness and learning management system. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").
By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
2. Information We Collect
2.1 Information You Provide
- Account data: name, email address, password (hashed), role, organisation affiliation.
- Profile data: profile photo, bio, skill tags, certifications, learning preferences.
- Payment data: billing address, payment method details. Card numbers are processed directly by our payment provider and are never stored on our servers.
- Content you create: course materials, assessments, comments, and uploaded files.
- Communications: messages sent through contact forms or support channels.
2.2 Information Collected Automatically
- Usage data: pages visited, features used, learning progress, XP earned, badges achieved.
- Device & log data: IP address, browser type, operating system, referring URLs, timestamps.
- Analytics: we use Vercel Analytics to collect aggregated, anonymised usage statistics to improve the Service.
- Error tracking: we use Sentry to capture application errors. Error reports may include technical context such as request URLs and stack traces but do not intentionally capture personal data.
3. How We Use Your Information
- Provide, operate, and maintain the Service.
- Process payments and send transaction receipts.
- Personalise your experience, including AI-powered recommendations and mentoring.
- Send essential communications: account verification, password resets, billing alerts, security notices.
- Generate aggregated analytics and readiness reports for employers and administrators.
- Detect, prevent, and address fraud, abuse, and technical issues.
- Comply with legal obligations.
4. Legal Basis for Processing (EEA/UK)
If you are in the European Economic Area or United Kingdom, we process your data under:
- Contract performance: to deliver the Service you signed up for.
- Legitimate interests: to improve the Service, prevent fraud, and ensure security.
- Consent: for optional analytics and marketing communications (you may withdraw consent at any time).
- Legal obligation: to comply with applicable laws and regulations.
5. Information Sharing & Disclosure
We do not sell your personal information. We may share data with:
- Service providers: Paystack (payment processing), Vercel (hosting & analytics), Resend (transactional email), Sentry (error tracking), Neon (database hosting). Each provider operates under their own privacy policy and data processing agreements.
- Your organisation: if you use the Service through an employer or training provider, your administrator may access learning progress, readiness scores, and usage reports.
- Legal requirements: when required by law, court order, or governmental authority.
6. AI-Powered Features
ReadyScale uses AI services (OpenAI, Anthropic) to provide features such as AI mentoring, quiz generation, and course outline suggestions. When you use these features:
- Your prompts and relevant learning context are sent to the AI provider to generate responses.
- We apply PII filtering to remove personal identifiers before sending data to AI providers.
- AI providers process data under their respective data processing agreements and do not use your data to train their models.
7. Data Retention
- Account data is retained while your account is active and for a reasonable period after deletion to comply with legal obligations.
- Learning progress and certificates are retained for the duration of your account.
- Payment records are retained as required by tax and accounting regulations.
- Expired tokens, sessions, and stale data are automatically purged by scheduled maintenance processes.
- Audit logs are retained for six months.
8. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your account and associated data (available in your account settings).
- Export your data in a portable format.
- Restrict or object to certain types of processing.
- Withdraw consent for optional data processing at any time.
To exercise these rights, contact us at privacy@readyscale.com or use the account deletion feature in your profile settings.
9. California Privacy Rights (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect and how it is used.
- Request deletion of your personal information.
- Opt out of the sale of personal information (we do not sell your data).
- Non-discrimination for exercising your privacy rights.
10. Cookies
We use essential cookies for authentication and session management. Analytics cookies (Vercel Analytics) collect anonymised usage data. You can manage cookie preferences in your browser settings. See our Cookie Policy for details.
11. Security
We implement industry-standard security measures including: encrypted data in transit (TLS), hashed passwords (bcrypt), CSRF protection, rate limiting, role-based access controls, and regular security audits. While no system is 100% secure, we are committed to protecting your data.
12. Children's Privacy
The Service is not directed to individuals under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
13. International Data Transfers
Your data may be processed in countries outside your own, including the United States. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses, when transferring data internationally.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date. Your continued use of the Service after changes constitutes acceptance.
15. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
privacy@readyscale.com