Privacy Notice

• Assessment answers and results: your answers about credentials, education, teaching experience and related questions, completion time and pathway selection; these generate application pathways, requirements and items to verify.
• Take Action progress: your certificate-title selection for each pathway and records of requirements you confirm or uncheck yourself.
• Application assistant: questions you send, assistant answers, the current pathway and certificate title, requirement focus, and timestamps, generation status and model usage for conversation recovery, limits and operational analysis.
• Contact messages: your question and contact email, used to reply by email.
• Account info: email, sign-in method and registration details for authentication, recovery and account security; Google sign-in may also provide basic account information such as your name and avatar.
• Access and operational data: visit and performance metrics, and request information such as IP addresses and account identifiers used for rate limiting.
• Retired historical data: legacy teacher profiles, advisor conversations, uploaded materials and extracted text may still be retained; these retired features are no longer collection channels for the current assessment.

This product does not ask for Social Security Numbers (SSN). Submit information required for official applications through TEACH or other official channels. Do not send SSNs, passwords, ID documents or payment details in assistant questions or contact messages.

• Assessment answers, completion time and pathway selection are stored encrypted in the Supabase database, with the key supplied by the server for encryption and decryption. Results are recalculated from saved answers by the rules engine, without separate historical assessment snapshots.
• Take Action title selections and self-confirmations are stored in the database without field-level encryption, with access controls limiting reads and writes to their owner; reassessment does not automatically clear this progress.
• Assistant questions, answers and source citations are encrypted by the server before database storage, with history restored by account, pathway and certificate title. Metadata such as timestamps, titles, generation status and usage is not field-encrypted. Model requests receive the current question, current guide and a limited recent conversation history. Authorized operations staff may review or export conversations to handle user issues, investigate failures and check service quality; access is audited.
• Accounts are managed by Supabase Auth. Contact messages are delivered through an email service to our contact inbox, rather than written to the assessment table.
• Retired historical profiles keep their existing encryption; historical conversations and extracted material text are stored in plaintext, and historical uploads remain in their original file storage. Retirement does not mean erasure; retention after account deactivation is described below.
• The website transmits data over HTTPS. Storage regions for database, email, hosting and analytics services depend on their actual deployment configurations; this page does not promise that all data stays in a US region.

• Supabase: authentication and database services (Auth / Postgres), plus Storage for retired historical files.
• Resend: delivering contact messages (contact email and message content).
• Vercel: website hosting, plus visit statistics and page-performance processing through Analytics / Speed Insights.
• Upstash (only when Redis rate limiting is enabled in the deployment): abuse-prevention identifiers and counters; identifiers may include IP addresses and account IDs.
• Z.ai (GLM): the default application-assistant provider, receiving the current question, current guide and up to 20 recent complete question-and-answer rounds. The assistant does not search the web or send separate assessment answers or retired materials. This notice will be updated if the deployed provider changes. The retired advisor may historically have sent messages, profile summaries, material text or searches to Anthropic or Z.ai under the configuration at the time.
• Google (only if you sign in with Google): provides OAuth authentication.

The current deterministic assessment does not call a large language model or send assessment answers to Anthropic or Z.ai; auxiliary AI and assessment pathway matching are separate functions.

• Know: this page explains how data is used.
• Delete: the self-service action above only deactivates the account; send personal-data deletion requests to the email below.
• Portability: contact the email to request an export of your assessment and progress records, and any retained retired historical data.
• Withdraw: you can deactivate your account to stop using the Service; existing records remain as described above. Contact us for other data-processing or deletion requests.

For data-related requests, email infra@certbridge.app