Privacy Notice
Last updated: August 27, 2026
What we collect
- Teacher profile: the credential-conversion background you fill in yourself, including target certificate, held certificates, teacher-preparation program, degree, teaching experience, immigration status, undergraduate GPA.
- Conversations: your question-and-answer history with the advisor, used to give continuous guidance.
- Uploaded documents: transcripts, teaching certificates, workshop certificates and other files you upload (PDF/DOCX); the system extracts text for the advisor to cite.
- Account info: email (for sign-in and recovery). Google sign-in only reads your email, not other Google data.
We do not collect Social Security Numbers (SSN). NYSED's SSN field is entered by you yourself in the TEACH system and never passes through this product.
Why we collect it
Sole purpose: to determine which NYS conversion pathway you qualify for and produce a materials checklist and application steps. Your profile and uploaded documents feed the rules engine for matching; they are not used for advertising and are not sold to third parties.
How we store it
- Profile fields are encrypted at rest in the database using industry-standard encryption; only the key-holding server can decrypt and read them.
- Conversations and extracted document text are stored in plaintext (high-frequency streaming path); after account deletion they are retained per the “Retention & deletion” section below.
- All data is hosted on Supabase (US region), in transit over HTTPS.
Third-party processors
- Supabase: database and file storage (Auth / Postgres / Storage).
- Anthropic: conversations pass through its large language model to generate replies; the messages you send to the advisor are sent to Anthropic as a prompt.
- Google (only if you sign in with Google): provides OAuth authentication.
We do not share your identifiable information with any party beyond the above.
Retention & deletion
Data is retained for the life of the account. At any time you can go to the bottom of the my profilepage and click “delete my account”: you are signed out immediately and can no longer sign in with that account (not self-recoverable), and your past conversations, profile, and materials are no longer visible to you. To guard against abuse and for product analysis, conversations and usage records are retained after deletion (the deletion itself is logged); re-registering with the same email creates a fresh account with no visible history, but the free quota is not reset. To fully delete all records, contact the email below.
Your rights (CCPA / GDPR)
- Know: this page explains how data is used.
- Delete: self-serve deletion is available above.
- Portability: contact the email to request an export of your profile and conversations.
- Withdraw: deleting your account withdraws future-use authorization; existing records are retained per the policy above, and you can contact us for full deletion.
Contact
For data-related requests, email privacy@certbridge-ai.com