Privacy Policy

1. Introduction

Training OS ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

2. Information We Collect

Personal Information

We collect information that you provide directly to us, including:

• Name and email address
• Username and password
• Payment information (processed securely through Stripe)
• Profile information (avatar, bio, company name)
• Content you upload (SCORM files, videos, PDFs)

Usage Information

We automatically collect certain information about your device and how you interact with our Service:

• Log data (IP address, browser type, pages visited)
• Device information (device type, operating system)
• Analytics data (page views, time spent, features used)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process your transactions and send related information
• Send you technical notices, updates, and support messages
• Respond to your comments and questions
• Monitor and analyze trends, usage, and activities
• Detect, prevent, and address technical issues and security threats
• Personalize your experience and provide content tailored to you

4. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following situations:

• Service Providers: With third-party vendors who perform services on our behalf (hosting, payment processing, analytics)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with any merger, sale of company assets, or acquisition
• With Your Consent: When you explicitly consent to sharing

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information. These include:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of data at rest
• Regular security audits and monitoring
• Access controls and authentication
• Secure payment processing through Stripe (PCI DSS compliant)

However, no method of transmission over the Internet is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Data Portability: Request a copy of your data in a portable format
• Opt-out: Opt-out of marketing communications
• Withdraw Consent: Withdraw consent where we rely on consent

To exercise these rights, please contact us at privacy@trainingos.com.

8. Cookies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

We use the following types of cookies:

• Essential Cookies: Required for the Service to function
• Analytics Cookies: Help us understand how you use the Service
• Preference Cookies: Remember your settings and preferences

9. Third-Party Services

Our Service may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

Third-party services we use include:

• Stripe: Payment processing
• Cloudflare R2: Content storage and delivery
• Supabase: Database and authentication
• Vercel: Hosting and analytics

10. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

11. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ.

By using our Service, you consent to the transfer of your information to the United States and other countries.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.