Privacy Policy

1. Who we are

Power Engineer Pro operates the Service. This policy covers the personal information we handle when you use it. Our privacy contact is privacy@powerengineerpro.ca.

2. Information we collect

• Account information — your name, email address, and a securely hashed password (we never see your password in plain text).
• Learning information — your target class and exam date, diagnostic answers, practice and exam attempts, mastery scores, and study activity. This is the data that lets us personalize your path.
• Payment information — when you purchase, Stripe processes your payment. We receive confirmation and limited billing details (for example, that a payment succeeded and your subscription status), but we do not collect or store your full card number.
• Usage and analytics — the pages and features you use and product events (for example, lesson started, exam submitted), tied to your account or an anonymous identifier, which we use to improve the Service.
• Device and security information — your IP address, the approximate location derived from it, browser and device identifiers, and session activity. We collect this to keep your account secure and to prevent account sharing, scraping, and fraud (see "How we use your information"). We do not collect your hardware (MAC) address and we do not use covert fingerprinting beyond what is described here.

3. How we use your information

We use your information to:

• provide and personalize the Service;
• process payments and manage your subscription and entitlements;
• operate, secure, and improve the Service;
• detect and prevent fraud, abuse, account sharing, and unauthorized scraping — including flagging unusual device, location, or volume patterns and, where warranted, limiting or pausing access pending verification;
• communicate with you about your account; and
• only with your consent, send you marketing email.

4. Our legal basis

We rely on your consent (which you may withdraw), the necessity of processing to provide a service you have requested, and our legitimate interest in keeping the Service secure and preventing fraud.

5. Who we share it with

We do not sell your personal information. We share it only with service providers who help us run the Service, under contract and only as needed: Stripe (payments), Supabase (database, authentication, and storage), Vercel (application hosting), our email provider (transactional email and, with your consent, marketing email), and privacy-respecting analytics. We may also disclose information if required by law or to protect rights and safety.

6. International transfers

Some of these providers process data outside Canada (including in the United States). Where that happens, your information may be subject to the laws of those jurisdictions. We use reputable providers and appropriate contractual protections.

7. How long we keep it

We keep your information for as long as your account is active and as needed to provide the Service, meet legal and accounting obligations, and resolve disputes. You can ask us to delete your account; some records (such as transaction records) may be retained where the law requires.

8. How we protect it

We enforce row-level security so you can only access your own data, encrypt data in transit, keep payment processing with Stripe, and restrict server-side keys to our servers. No system is perfectly secure, but we take measures appropriate to the sensitivity of the data.

9. Your rights under PIPEDA

You may request access to the personal information we hold about you, ask us to correct it, and withdraw your consent (subject to legal or contractual limits). To make a request, email privacy@powerengineerpro.ca. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

10. Cookies and local storage

We use cookies and browser storage that are necessary to sign you in, keep your session, run the sign-up flow, and remember basic preferences. We do not use third-party advertising cookies.

11. Marketing email (CASL)

We send marketing email only if you have expressly consented, and every marketing message includes an unsubscribe link. Transactional messages about your account or purchases are sent as needed to operate the Service.

12. Children

The Service is intended for adults pursuing professional certification and is not directed to children.

13. Changes

We may update this policy. We will change the "Last updated" date and, for material changes, take reasonable steps to notify you.

14. Contact

Privacy questions or requests: privacy@powerengineerpro.ca.