Verten Academy — Legal
Privacy Policy
This Privacy Policy explains what personal information Workforce Development and Management Corp. (“WDMC”, “Verten”, “we”, “us”) collects when you use Verten Academy, how we use and protect it, how long we keep it, and the choices and rights you have. We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA).
1. Information we collect
Information you provide
- Account details — name, email address, password, and preferred language when you register.
- Profile information — optional details you add, such as a profile photo or professional background.
- Learning records — course enrollments, lesson progress, quiz and assessment results, reviews, and certificates earned.
- Payment information — processed directly by Stripe. We receive transaction confirmations and receipts, never your full card number.
- Communications — messages you send us through the contact form or by email, and support requests.
Information collected automatically
- Technical data — IP address, browser and device type, and pages visited, collected through cookies and analytics (see our Cookie Policy).
- Usage data — sign-in events and course activity used to maintain your progress and secure your account.
2. How we use your information
- To create and manage your account and authenticate you.
- To deliver courses, track your progress, enforce enrollment windows, and issue and verify certificates.
- To process payments and maintain required financial records.
- To send transactional notifications — enrollment confirmations, deadline reminders, certificate delivery, and important service or policy updates.
- To provide AI-assisted features such as course recommendations and skills-gap assessments.
- To secure the platform, prevent fraud and abuse, and comply with our legal obligations.
- To understand aggregate platform usage and improve courses and features.
We do not sell your personal information.
3. AI features and your data
- AI features are powered by a third-party AI provider (Anthropic). Inputs are sent to the provider only to generate your result.
- Our AI request logs store hashed references and technical metadata only — raw inputs and outputs are not retained in our logs. AI request logs are purged after 90 days.
- Your personal data is not used to train AI models.
4. Who we share information with
We share personal information only with service providers who process it on our behalf under contractual safeguards:
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication, and secure file storage |
| Stripe | Payment processing |
| SendGrid | Transactional email delivery |
| Microsoft Azure | Course video, thumbnail, and resource hosting and delivery |
| Anthropic | AI-assisted features |
| Google Analytics | Aggregate usage analytics |
We may also disclose information where required by law, to enforce our terms, or to protect the rights, safety, and security of Verten, our users, or the public. If a certificate you hold is verified by a third party through our public verification page, that page displays only your name, the course name, the completion date, and validity status.
5. How long we keep your information
| Data type | Retention period |
|---|---|
| Profile and account data | While your account is active, plus 2 years after deactivation; hard-deleted earlier on written request |
| Certificate records | Permanent — certificates remain verifiable even if your account is closed (revocable, not deletable) |
| Payment records | 7 years (Canada Revenue Agency requirement) |
| Notification logs | 90 days in-app; up to 1 year in delivery logs |
| AI request logs (hashed metadata only) | 90 days, then auto-purged |
| Administrative audit logs | 3 years — immutable |
6. Your rights and choices
- Access and correction — view and update your profile information from your account settings at any time, or ask us for a copy of the personal information we hold about you.
- Portability — request a full export of your profile data (JSON) and certificate PDFs. Exports are delivered by email within 48 hours.
- Deletion — request deletion of your personal data as described on our Data Deletion Request page. Requests are processed within 30 days.
- Marketing preferences — unsubscribe from promotional email at any time via the link in each message. Transactional messages (receipts, deadline reminders, policy notices) are sent as part of the service.
7. How we protect your information
- Data is stored with row-level security so each user can access only their own records, and is encrypted in transit.
- Course files and private media are served through short-lived signed URLs — never public links.
- Administrative access is restricted, and administrative actions are recorded in an immutable audit log.
8. International users
PIPEDA applies to all Canadian users. For users outside Canada, we apply PIPEDA principles as our baseline standard. Our service providers may process data in other jurisdictions (including the United States) under contractual safeguards.
9. Children
Verten Academy is a professional training platform and is not directed at children. You must be at least 16 years old to create an account. If we learn we have collected personal information from a child under 16, we will delete it.
10. Changes to this policy
If we make material changes to this Privacy Policy, we will notify you in-app or by email before the changes take effect. The “Last updated” date at the top of this page identifies the current version.
11. Contact us
For privacy questions or to exercise any of your rights, contact Workforce Development and Management Corp. at hello@verten.ca or through our contact page. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.