Privacy Policy
CertDuty is software that firearms and security training instructors use to run their classes: scheduling, registration, waivers, attendance, scoring and certificates. This policy explains what information we handle, why, who sees it, and the choices you have.
CertDuty is in a testing period. While we test, the service is free and no payments are taken. Accounts and everything in them will be deleted or reset before CertDuty launches in production.
1. Who this policy covers
- Instructors — instructors and training businesses with a CertDuty account, and the team members they add.
- Students — people who register for an instructor’s class through a CertDuty registration page, a class listing embedded on an instructor’s website, or the instructor directly.
- Visitors to certduty.com.
If you are a student, the instructor you register with decides what they ask for and keeps the records of your class. For those records CertDuty works on the instructor’s behalf. If you have a question about your class record, contact your instructor first; we are glad to help too.
2. Information we collect
Instructor accounts. Name, email address, phone number, business name and address, logo, time zone and portal address; the names, email addresses and roles of team members; instructor credentials you choose to add, such as license numbers and expiry dates; and the courses, classes, waivers and forms you create.
Student registrations. Name, email address and phone number; date of birth if the instructor asks for it; answers to the instructor’s registration questions, which can include license or permit numbers such as a California guard card or firearm permit; electronic signatures on waivers, with the time they were signed; attendance, scores and pass or fail results; and certificates issued.
License checks. When a student gives a California BSIS license number, CertDuty may look it up in the California Department of Consumer Affairs’ public license search and store the result (the name on the license, its type, status and expiry) so the instructor can confirm it.
Payments. Card payments are processed by Stripe. We never receive or store full card numbers. When an instructor connects Stripe to receive payments, Stripe collects their identity and bank details on Stripe’s own pages; CertDuty stores only Stripe’s account reference and its status. We keep a record of each payment: amount, date, class and status. Payments are switched off during the testing period.
Technical information. Sign-in sessions, and the IP address and basic browser or device details recorded in server and security logs.
We do not collect Social Security numbers or other government identification numbers.
3. How we use information
- To provide CertDuty: class listings, registration, waivers, rosters, check-in, scoring and certificates.
- To send service emails: registration confirmations, reminders, class changes, certificates, and the requalification reminders an instructor sets up.
- If you opt in, to send transactional text messages to your mobile number about class registrations, class reminders and schedule changes, waitlist openings, certificates, and support requests, as described in section 11.
- To let anyone confirm a certificate is genuine. Our verification page, reached with a certificate’s code, shows limited details: the student’s name, the course, the date, the issuing business and whether the certificate is valid.
- To keep the service secure, prevent fraud, fix problems and answer support requests.
- To understand how CertDuty is used, using aggregated information, so we can improve it.
- To meet legal obligations.
We do not sell personal information. We do not share it for cross-context behavioral advertising, and we do not use student information to market CertDuty.
4. Who information is shared with
- The instructor. What a student submits for a class goes to that instructor and the team members they authorize. Each instructor’s records are kept separate from every other instructor’s.
- Service providers who run parts of CertDuty for us, such as hosting and database (Supabase, Cloudflare), payment processing (Stripe), email delivery and website hosting (Webflow). They may use the information only to provide their services to us.
- Public class pages. An instructor’s class listings, registration pages and website embeds show class details, never student information. Embeds show only a class’s city and state; the venue is shared after registration.
- Legal reasons. When required by law, legal process or a government request, or to protect the rights, property or safety of CertDuty, our users or others.
- Business transfers. If CertDuty is involved in a merger, acquisition or sale of assets, information may transfer as part of it, subject to this policy.
5. How long we keep information
We keep information while the instructor’s account is active. Instructors may need to keep training records for their regulators, and they decide when to delete their records. When an account is deleted we delete or anonymize its personal information within a reasonable time, except where we must keep records by law, such as payment records. Records needed to verify certificates that were already issued may be kept so those certificates stay verifiable. Information created during the testing period will be deleted or reset before launch.
6. Security
Information is encrypted in transit. Database access rules keep each instructor’s records separate, and staff access to accounts is restricted and requires multi-factor authentication. No system is perfectly secure, so we cannot guarantee absolute security. If a breach affects your information, we will notify you as the law requires.
7. Your choices and rights
You can ask to see, correct or delete your personal information. Instructors can update most of their information in their account. Students can ask their instructor, or contact us and we will work with the instructor. Service emails about a class you registered for are part of the service; any marketing email we send has an unsubscribe link.
California residents. Under California law you have the right to know what personal information we collect, use and disclose; to delete it; to correct it; to opt out of its sale or sharing (we do neither); to limit the use of sensitive personal information; and not to be discriminated against for using these rights. To make a request, email [email protected]. We will verify your identity before acting, you may use an authorized agent, and we will respond within the time the law requires.
8. Cookies and similar technology
CertDuty uses cookies and browser storage needed to keep you signed in and to protect your account. Our marketing website may use basic analytics to count visits. We do not use advertising trackers.
9. Children
CertDuty is not intended for children under 13, and we do not knowingly collect their information. Instructor accounts are for adults. An instructor who teaches minors is responsible for obtaining any parent or guardian consent the law requires.
10. Changes to this policy
We may update this policy. We will post the new version here with a new effective date and, for significant changes, tell instructors by email or in the app.
11. Text messages (SMS)
- If you opt in, CertDuty sends transactional text messages about class registrations, class reminders and schedule changes, waitlist openings, certificates, and support requests.
- Message frequency varies based on your activity. Message and data rates may apply.
- Reply STOP to opt out at any time. Reply HELP for help, or contact [email protected].
- Consent to receive text messages is not a condition of purchase.
- Mobile numbers and SMS opt-in consent are never sold or shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except service providers (such as the SMS delivery provider) that send messages on CertDuty’s behalf.
12. Contact us
CertDuty, Santa Rosa, California
Email: [email protected]