Legal

Privacy policy

Last updated: September 28, 2026

In short: we collect your email address so you can sign in, and a record of your purchase. We don't use analytics, ad trackers or session recording, and we never sell your data.

This policy explains how Traversaal.ai Inc. ("we", "us") handles personal data on CCA Pro at certified.traversaal.ai. We are the data controller. Questions: support@traversaal.ai.

1. What we collect

Account data: your email address, when your account was created and when you last signed in. If you sign in with Google, we receive your email address and basic profile from Google.
Purchase data: the email you paid with, the amount, currency, any promo code, and a Stripe transaction ID. We never see or store your card details. Stripe handles payment.
Emails we send you: delivery records kept by our email provider.
Technical data: standard server logs (such as IP address and browser type) kept briefly by our hosting provider for security and troubleshooting.

2. How we use it

To sign you in and give you access to what you bought (performance of our contract with you).
To send transactional emails: sign-in links, your welcome email and replies to support requests (performance of contract).
To process payments and refunds and keep records for tax and accounting (legal obligation).
To keep the Service secure and prevent abuse (legitimate interest).

We will only send marketing emails if you've agreed to them, and every marketing email will include a way to unsubscribe.

3. Who processes it for us

Supabase: sign-in and account database
Stripe: payments and refunds
Resend: email delivery
Vercel: website hosting

These providers only process data on our instructions. Some are based in the United States. Where data leaves the EU or UK, it is protected by the providers' Standard Contractual Clauses or equivalent safeguards. We don't sell or rent personal data, and we don't share it for advertising.

4. Cookies and local storage

We don't use advertising or analytics cookies. Your browser stores your sign-in session and a few preferences (such as a dismissed pop-up) in local storage, which is strictly necessary for the site to work. Fonts and scripts are served from our own domain, so loading a page doesn't send your data to third parties.

5. How long we keep it

We keep your account while it's active. Purchase records are kept for as long as tax law requires, typically up to 7 years. If you ask us to delete your account, we delete your account data within 30 days, except records we're legally required to keep.

6. Your rights

Depending on where you live (including under GDPR, UK GDPR and the California Consumer Privacy Act), you can ask to access, correct, delete or export your data, or object to how we use it. Email support@traversaal.ai from your account address and we'll respond within 30 days. You can also complain to your local data protection authority.

7. Children

The Service is for professionals and isn't directed at children. We don't knowingly collect data from anyone under 16.

8. Changes

If we make material changes, we'll update the date above and email account holders.

9. Contact

Traversaal.ai Inc. · support@traversaal.ai