Privacy Policy

Last updated: May 9, 2026

1. Who We Are

TradeSeal Digital Inc. ("we", "us", or "our") operates tradeseal.ca, a Red Seal exam preparation platform for Canadian tradespeople. We are incorporated in Canada and are committed to protecting your privacy in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

You can reach us at [email protected].

2. Information We Collect

We collect only the information necessary to provide our service:

• Account information: Your email address when you register via email magic link or Google OAuth. We do not collect your name unless you voluntarily provide it.
• Usage data: Practice test scores, mock exam results, question difficulty votes (easy/ok/hard), and study progress — used to power your personal dashboard and improve question quality.
• Payment information: Billing is processed entirely by Stripe. We never receive or store your full card number, CVV, or banking details. We do store your Stripe customer ID and subscription status to manage your access.
• Technical logs: Anonymous JavaScript error reports and basic request logs (IP address, browser type) collected by Cloudflare to help us diagnose issues. These are not linked to your account.

3. How We Use Your Information

We use your information only for the following purposes:

• To create and manage your account and authenticate you securely
• To save your exam progress, scores, and study history
• To process subscription payments and manage your access tier
• To send transactional emails (e.g., sign-in links, subscription receipts) — we do not send marketing emails without your explicit consent
• To identify and fix bugs or performance issues on the platform
• To improve our question bank and study content based on aggregated, anonymized usage patterns

We do not sell, rent, or trade your personal information to any third party.

4. Data Storage & Security

Your account data is stored securely using Supabase (PostgreSQL), hosted on AWS infrastructure. Data may be stored on servers located in Canada or the United States. All data in transit is encrypted using TLS. Row-Level Security (RLS) policies are enforced in our database so that users can only access their own data.

Authentication tokens are stored in your browser's local storage and managed by Supabase's secure auth library. We do not have access to your passwords — sign-in is handled via email magic links or Google OAuth.

5. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal information within 30 days. Anonymized, aggregated usage statistics (e.g., question difficulty scores) may be retained indefinitely as they cannot be linked back to you.

Stripe retains billing records as required by law and their own data retention policies.

6. Third-Party Services

We use the following trusted third-party services to operate TradeSeal:

• Supabase — authentication and database storage (Privacy Policy)
• Stripe — payment processing (Privacy Policy)
• Google OAuth — optional sign-in method (Privacy Policy)
• Cloudflare — hosting, CDN, and DDoS protection (Privacy Policy)

Each of these services has their own privacy policy and data handling practices that we encourage you to review.

7. Your Rights (PIPEDA)

Under PIPEDA, you have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Ask us to correct inaccurate or incomplete information
• Deletion: Request that we delete your account and all associated personal data
• Withdrawal of consent: Withdraw consent to our use of your data (note: this may affect your ability to use the Service)

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

8. Cookies & Local Storage

We use browser local storage to manage your authentication session and save in-progress test state between visits. We do not use third-party advertising cookies or tracking pixels. Cloudflare may set a security cookie (__cf_bm) for bot protection purposes — this does not track you across sites.

9. Children's Privacy

TradeSeal is intended for adults pursuing professional trade certification. We do not knowingly collect personal information from anyone under the age of 16. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this page periodically. Continued use of TradeSeal after any changes constitutes acceptance of the updated policy.

11. Contact

If you have questions, concerns, or a privacy complaint, please contact us at [email protected]. We take privacy concerns seriously and will respond promptly.