Privacy Policy

Last updated: September 29, 2026

1. What We Collect

We collect the following to provide the service:

Account data: Email address, name, password (hashed).
License data: Profession, state, license number (if provided), renewal dates.
Certificates: Files you upload or forward via email, including OCR-extracted text.
Usage data: Pages visited, features used (via analytics).
Event attendance records: When a CE event organizer shares completion records with us (attendee name, email, license number, course title, hours, completion date), we store them so attendees can claim their credits — even if they don't have a CECourse account yet.

2. How We Use It

To provide CE tracking, reminders, and certificate storage.
To extract data from certificates via OCR.
To send deadline reminders and service notifications.
To send occasional product updates and announcements by email. You can opt out of these marketing emails at any time via the unsubscribe link in the email; opting out never affects transactional emails such as deadline reminders, confirmations, or security notices.
To improve the service (aggregated, anonymized analytics).
To hold event-reported CE completions as waiting credits and notify attendees (including people without an account) that their hours are waiting to be claimed. These notification emails always include an unsubscribe link; opting out stops future claim emails and never affects anything else.

We do not sell your personal data. We do not share your certificates or license data with third parties except as described below.

3. Data Sharing

We share data only in these limited cases:

Service providers: Hosting provider, email service provider, analytics — all bound by confidentiality.
Legal: If required by law, court order, or to protect our rights.

4. Data Storage & Security

Data is stored on secure servers with encryption in transit (HTTPS) and at rest. Certificates are stored on persistent encrypted volumes. We use industry-standard security practices but cannot guarantee absolute security.

5. Your Rights

Access: Request a copy of your data.
Delete: Delete your account and all associated data at any time.
Export: Download your certificates and records.
Correct: Update your information in Settings.

To exercise these rights, email support@cecourse.com.

6. Email Forwarding

If you use a personal forwarding address (e.g., you@inbox.cecourse.com), emails sent to that address are processed to extract certificate attachments. We store the attachments and relevant metadata. We do not read email bodies beyond what is necessary to identify certificates.

7. Event-Imported Completions

CE event organizers (conference hosts, course providers) may share attendee completion records with CECourse. We store each record as a waiting credit keyed to the attendee's email address. If you already have a CECourse account under that email, the credit is added to your vault automatically. If you don't, we may send a single "your CE hours are waiting" email to that address inviting you to create a free account and claim the credits — credits are only ever claimed after the email address is verified, so nobody can claim someone else's hours.

These emails are not marketing: they are a one-time notification tied to a specific event's completion record, and every one carries an unsubscribe link. Unsubscribing (or never responding) deletes nothing — your waiting credits stay available if you sign up later. We never sell organizer-provided attendee lists or use them for any other purpose.

8. Cookies

We use essential cookies for authentication and preferences. Analytics cookies help us understand usage. You can disable non-essential cookies in your browser.

9. Children

The service is not intended for users under 18. We do not knowingly collect data from children.

10. Changes

We will notify you of material changes to this policy via email or in-app notice.

11. Contact

Privacy questions: support@cecourse.com