1. Scope and Key Definitions

This Privacy Policy applies to information we process in connection with your access to and use of the Service, including our website, application, and support channels.

Third-Party Services means external websites, software, and services we integrate with or that you choose to connect (for example, Certiport/Pearson VUE systems).

Certiport credentials means the username/password (or equivalent authentication factors) that you provide to enable the Service to authenticate to a Third-Party Service at your request.

2. What Information We Collect

We collect information to provide and improve the Service. The types of information we collect include:

• Information you provide directly to us
  • Account information: when you create an account, we collect your name (if provided), email address, and password (stored in hashed form).
  • Certiport credentials: if you choose to connect a Certiport account, you provide the credentials required for the Service to authenticate to Certiport on your behalf, solely to perform actions you initiate.
  • Communications: if you contact us, we collect the content of your message and related contact details.
  • Billing information: if you subscribe to a paid plan, our payment processor processes billing and payment details. We do not store full payment card details on our servers.
• Information we collect automatically
  • Usage data: information about how you use the Service, such as feature usage, job/task status, timestamps, and error codes.
  • Technical data: IP address, browser type, device and operating system information, and similar diagnostic information.
  • Cookies and similar technologies: we may use cookies or similar technologies for authentication, preferences, and security.

What we do not collect from Certiport: The Service is designed not to fetch, ingest, store, or process examinee/candidate personal data (such as candidate name, address, identification numbers, or test scores) from Certiport systems.

3. How We Use Your Information

We use information for the following purposes:

• To provide and operate the Service:
  • To create and manage your account and provide access to the Service.
  • To authenticate to Third-Party Services (such as Certiport) using the credentials you provide, and to execute administrative actions you explicitly initiate.
  • To display operational results about actions you initiate (for example, success/ failure status, timestamps, and aggregated counts), while minimizing collection of any Third-Party Service content.
• For security and fraud prevention: to secure the Service, protect accounts, prevent abuse, and diagnose issues.
• To provide support and communicate with you: to respond to requests, send service-related notices, and communicate about changes to the Service.
• To improve the Service: to analyze performance, debug, and develop new features.
• To comply with legal obligations and enforce terms: to comply with law, respond to lawful requests, and enforce our Terms of Service.

4. How We Share Your Information

We do not sell, rent, or trade your personal data. We share information only as described below:

• With Third-Party Services at your direction: when you connect a Third-Party Service, we transmit the minimum information necessary to authenticate and perform the actions you request. For example, when you connect Certiport, we use your Certiport credentials to authenticate to Certiport and carry out actions you initiate.
• With service providers: we use third-party vendors to help operate the Service (for example, hosting, email delivery, payment processing, and error monitoring). These vendors are authorized to process data on our behalf only as necessary to provide services to us and are required to protect it.
  
  Certiport credentials: we do not disclose your Certiport credentials to service providers for their own use. We also take measures to prevent credentials from being included in analytics and logs.
• For legal reasons: we may disclose information if we believe disclosure is required by law or necessary to comply with a legal process, protect rights and safety, or investigate abuse.
• Business transfers: if we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will provide notice as required by law.

5. Certiport Credential Management and Security

Because Certiport credentials are sensitive, we implement measures designed to reduce risk, including:

• Encryption in transit: we use TLS to protect data transmitted between your device and the Service.
• Encryption at rest (when stored): where credentials must be stored to provide the Service, they are stored in encrypted form.
• Session-limited use: for interactive use, credentials are associated with your authenticated session and are used to execute actions you initiate.
• Background tasks: if you initiate background tasks, we use credentials only as necessary to execute the task and then delete them from the systems used to run the task as part of normal task completion.
• Access controls: access to systems that may handle credentials is restricted to authorized personnel and protected by access controls.
• Log and analytics hygiene: we take steps designed to prevent credentials from appearing in logs, monitoring, and analytics systems.

Your responsibility: you are responsible for maintaining the confidentiality of your Third-Party Service accounts, including Certiport credentials, and for ensuring you have the rights and permissions to allow the Service to access and perform actions on your behalf.

6. Data Retention

We retain personal information only as long as necessary to provide the Service and for legitimate business purposes such as security, auditability, and legal compliance.

• Account data: retained while your account is active. If you request deletion, we delete or anonymize your account data within a reasonable timeframe, unless we must retain certain information to comply with legal obligations or to establish, exercise, or defend legal claims.
• Certiport credentials: retained only as needed to provide the Service features you use (for example, during an authenticated session and for the duration of any task you initiate), and then deleted as part of normal operation.
• Operational logs: we may retain security and operational logs for a limited period for debugging, fraud prevention, and security. These logs are designed to exclude credentials.

7. Your Rights and Choices

Depending on where you live, you may have rights regarding your personal data, such as access, correction, deletion, objection, restriction, and data portability. You may also have the right to lodge a complaint with a data protection authority.

To exercise rights or make requests, contact us using the details in Section 10.

8. International Data Transfers

Your information may be processed in countries other than your country of residence, depending on where we and our service providers operate. Where required by applicable law, we use appropriate safeguards for international transfers.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the updated policy and update the Effective Date. If changes are material, we will provide additional notice as required by law.

10. Contact Us

If you have questions or requests regarding this Privacy Policy, please contact us:

• By email: support@catc.ly
• By visiting: Contact page

1. Acceptance of Terms

By accessing or using the Service, you agree to be bound by these Terms and our Privacy Policy (which is incorporated by reference). If you do not agree, you must not access or use the Service.

2. Eligibility

The Service is intended for use by adults acting in a professional capacity. You must be at least 18 years old (or the age of majority where you live) to access or use the Service. We do not knowingly permit minors to use the Service.

If we learn that you are not eligible, we may suspend or terminate your access immediately.

3. The Service; No Affiliation with Certiport

The Service helps you perform administrative tasks you initiate related to your own Certiport Authorized Test Center (“CATC”) operations.

We are not Certiport, Pearson VUE, or any Program Sponsor. We are not affiliated with, endorsed by, or sponsored by Certiport or Pearson VUE. Certiport and Pearson VUE trademarks belong to their respective owners.

Third-party dependence. The Service may interact with third-party websites, software, and services (including Certiport/Pearson VUE systems) (“Third-Party Services”). Third-Party Services may change, suspend, restrict, or terminate access at any time. We do not control Third-Party Services and do not guarantee the Service will work with them.

4. Account Registration; Credentials; Authorization

To use certain features, you may need to connect your Certiport CATC account. You are responsible for all activity that occurs through your account.

• Your authorization. You authorize us to access and use your Third-Party Service account (including Certiport CATC portal access) solely to perform the specific actions you request through the Service and to provide the outputs you request.
• Your responsibility for third-party compliance. You represent and warrant that: (a) you are authorized to provide us access to the Third-Party Service account; (b) your use of the Service (including any automation) does not violate any applicable law, and does not violate your agreements with Certiport/Pearson VUE or any other third party, including any CATC agreements and related CATC policies, guidelines, and procedures; and (c) you have obtained any required consents.
• No guarantee of permissibility. We do not represent or warrant that Certiport or any Third-Party Service permits automation, credential sharing, or access through third-party tools. You understand and agree that Third-Party Services may suspend or terminate your account or restrict access, and that we are not responsible for such actions.
• Security. You must keep your credentials confidential. Notify us immediately of any suspected compromise. We may require you to reset credentials or disconnect Third-Party Services at any time for security reasons.
• Data access. If you provide or enable access to Examinee Personal Data or other sensitive data through Third-Party Services, you are responsible for ensuring you are permitted to do so and that you comply with applicable privacy and data protection laws and your CATC contractual obligations.

We may refuse to connect or may disable connections to Third-Party Services if we believe (in our reasonable judgment) that doing so could violate third-party terms, compromise exam security, or create legal or security risk.

5. Prohibited Uses

You agree NOT to:

• reverse-engineer, decompile, or attempt to extract the Service source code;
• circumvent or attempt to circumvent any security, access controls, or rate limits;
• use the Service to violate any law or any Third-Party Service terms (including Certiport/Pearson VUE terms and CATC obligations);
• upload viruses or malicious code;
• impersonate any person or entity or misrepresent affiliation;
• use the Service for unlawful, harmful, or fraudulent purposes;
• resell, lease, or provide the Service to third parties unless we expressly agree in writing.

6. Intellectual Property

The Service and all related content (excluding Third-Party Services and your data) are owned by us and are protected by applicable intellectual property laws. We grant you a limited, non-exclusive, non-transferable, revocable license to use the Service for your internal business purposes during the Term and only in accordance with these Terms. All rights not expressly granted are reserved.

7. User Content; Feedback

You retain ownership of information you submit to the Service (“User Content”). You grant us a limited license to host, process, transmit, and display User Content solely to operate, maintain, and improve the Service and to perform actions you request.

If you provide suggestions or feedback, you grant us a perpetual, irrevocable, worldwide, royalty-free license to use it without compensation or attribution.

8. Suspension; Termination

Suspension. We may immediately suspend or restrict your access to the Service (in whole or in part) if we believe, in our reasonable judgment, that: (a) your use poses a security risk; (b) your use may violate law or Third-Party Service terms (including Certiport/Pearson VUE or CATC obligations); (c) your use may compromise exam integrity; (d) you have provided false information; or (e) suspension is necessary to protect the Service, other users, or us.

Termination by you. You may stop using the Service at any time.

Termination by us. We may terminate these Terms and your account upon written notice if you materially breach these Terms and fail to cure within 30 days, unless the breach is not curable or requires immediate suspension/termination (including security, fraud, or legal compliance reasons), in which case termination may be immediate.

Upon termination, your right to use the Service ceases immediately.

9. Disclaimers

The Service is provided “AS IS” and “AS AVAILABLE.” To the maximum extent permitted by applicable law, we disclaim all warranties, express or implied, including any warranties of merchantability, fitness for a particular purpose, and non-infringement.

We do not warrant that the Service will be uninterrupted, error-free, or compatible with any Third-Party Service, or that use of the Service will prevent account actions by third parties (including suspensions or terminations).

10. Limitation of Liability

To the maximum extent permitted by applicable law, we will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, revenues, data, goodwill, business opportunities, or anticipated savings, arising out of or relating to the Service or these Terms, even if we have been advised of the possibility of such damages.

To the maximum extent permitted by applicable law, our total aggregate liability for all claims arising out of or relating to the Service or these Terms will not exceed the total subscription fees actually paid by you for the Service in the last three (3) months immediately preceding the event giving rise to the claim.

Without limiting the foregoing, we will not be liable for any suspension, termination, access restriction, data unavailability, or other action taken by any Third-Party Service (including Certiport/Pearson VUE), or for any inability to use the Service caused by changes to or unavailability of Third-Party Services.

You agree that the limitations of liability in these Terms reflect an allocation of risk and that the fees charged for the Service reflect this allocation.

Nothing in these Terms limits liability for death or personal injury caused by negligence, fraud, or any liability that cannot be excluded by law.

11. Indemnification

You agree to indemnify and hold harmless us, our affiliates, directors, employees, and agents from any claims, damages, liabilities, and expenses (including reasonable attorneys’ fees) arising out of or related to: (a) your use of the Service; (b) your violation of these Terms; (c) your violation of any Third-Party Service terms (including Certiport/Pearson VUE and CATC obligations); or (d) your infringement of any rights of any person or entity.

12. Copyright Notices

If you believe your copyrighted work has been infringed, please send a written notice to dmca@catc.ly with sufficient detail to identify the work and the allegedly infringing material and to allow us to contact you.

13. Governing Law; Dispute Resolution

Morocco law. Except as set out below, these Terms are governed by the laws of Morocco, without regard to conflict-of-law provisions.

Venue (non-U.S.). If you are not a U.S. resident, any dispute arising out of or relating to these Terms or the Service shall be brought exclusively in the courts of Casablanca, Morocco, unless mandatory consumer protection laws in your country require otherwise.

U.S. arbitration. If you are a U.S. resident, Section 14 (Arbitration & Class-Action Waiver) applies and controls in the event of any conflict with this Section.

Consumer rights. If you are a consumer, you may have mandatory rights under the laws of your country that cannot be waived. Nothing in these Terms limits those mandatory rights.

14. Arbitration & Class-Action Waiver (U.S. Users Only)

IF YOU ARE A U.S. RESIDENT, any dispute arising out of or relating to these Terms shall be resolved by binding arbitration under the Commercial Arbitration Rules of the American Arbitration Association. YOU MAY OPT OUT by sending an email to optout@catc.ly within 30 days of first accepting these Terms. Arbitration will be conducted on an individual basis; class actions and class-wide arbitrations are waived.

This clause does not apply to consumers resident in the European Economic Area or the United Kingdom.

15. Export Controls

You represent that you are not located in a country subject to a U.S. government embargo or listed on any U.S. government list of prohibited parties.

16. Changes to These Terms

We may modify these Terms at any time. Material changes will be announced at least 30 days in advance via email or prominent notice on the Service. If you do not agree to the changes, you may stop using the Service before the effective date. Continued use after the effective date constitutes acceptance.

17. EU/UK Consumer Withdrawal (Paid Subscriptions Only)

If you are a consumer resident in the European Economic Area or the United Kingdom, you may have a right to withdraw from a paid subscription within 14 days, subject to applicable law and any lawful exceptions (including where you requested immediate digital performance and acknowledged loss of the withdrawal right).

To exercise any applicable withdrawal right, contact us at support@catc.ly with an unequivocal statement.

18. Miscellaneous

• Severability. If any provision is held unenforceable, the remaining provisions will remain in effect.
• No waiver. Failure to enforce any provision is not a waiver.
• Assignment. You may not assign these Terms without our prior written consent. We may assign these Terms in connection with a merger, acquisition, or sale of assets.
• Entire agreement. These Terms and the Privacy Policy constitute the entire agreement regarding the Service.

19. Contact Us

• By email: support@catc.ly
• By visiting: Contact page