Privacy Policy

1. Scope

This policy explains what data we collect when you visit our website, create an account, enroll in a certification, apply for accreditation, contact us, or work with us as a partner or panel member.

2. Data we collect

• Account data — name, email, password (stored hashed), role, and profile details you provide.
• Professional program data — enrollments, uploaded evidence, exam attempts and answers, scores, and issued credential details.
• Business / partner data — organization details, authorized contacts, application answers, supporting documents, and review outcomes.
• Panel data — expertise areas, assignments, and review comments needed to operate assessments.
• Contact submissions — messages and interest areas you send through the contact form.
• Technical data — IP address, browser type, and similar logs needed for security and reliability; see also our Cookies Policy.

3. How we use data

• Operate accounts, portals, exams, and accreditation workflows
• Communicate about applications, results, credentials, and service notices
• Verify identity and integrity of assessments
• Publish verification records for issued credentials (credential code and limited public fields)
• Improve site security, prevent abuse, and meet legal obligations
• Respond to inquiries you submit

4. Legal bases (where applicable)

We process data to perform contracts with you (program delivery), to pursue legitimate interests (security, product improvement, credential integrity), and where required by law. Where consent is needed (for example certain optional cookies or marketing), we will ask for it.

5. Sharing

We do not sell personal data. We may share limited information with:

• Assigned panel reviewers (application/exam materials needed for evaluation)
• Hosting, email, and infrastructure providers that process data on our instructions
• Authorities when legally required
• The public verification tools, which expose only credential verification details intended for public lookup

6. Retention

We retain account, enrollment, application, and credential records for as long as needed to deliver services, support verification, resolve disputes, and meet legal or audit requirements. Contact messages may be retained while useful for follow-up and then deleted or archived.

7. Security

We use access controls, hashed passwords, and host-level protections appropriate to an online credentials platform. No method of transmission or storage is fully secure; please use a strong unique password and protect your inbox.

8. Your choices

• Update profile details in your portal where available
• Request access, correction, or deletion of personal data where legally applicable
• Opt out of non-essential marketing emails if we send them
• Control cookies as described in the Cookies Policy

Credential verification records may need to remain available while a credential is valid or until revoked under program rules.

9. International transfers

If we or our processors store data in other countries, we take steps intended to protect it consistent with this policy and applicable law.

10. Children

GITCAI services are directed to professionals and organizations, not to children. We do not knowingly collect data from anyone under 16.

11. Contact

Privacy requests: info@gitcai.com or the contact form.

Also see: Terms & Conditions · Cookies Policy