CredonWho we are
Credon is a skill assessment platform at credon.net. Learners complete challenges, and trained reviewers score the work. This policy covers the Credon website and app. For any privacy question or request, write to credon.team@gmail.com.
What we collect
Account details. Your name, email address and password. If you choose, you can also add a phone number, a pseudonym and your time zone. Passwords are stored only as a secure hash by our authentication provider; we never see or store your password in readable form.
Sign in with Google. If you continue with Google, Google shares your name, email address and profile picture link with us. We use your name and email address to create and identify your Credon account. We do not receive your Google password, and we do not ask to read your Gmail, Drive, contacts, calendar or any other Google data.
Your work. The responses, files and evidence links you submit for challenges, the reviews and feedback written about your work, your results and your result history.
Payments. When you buy a cohort seat, the payment method (bKash, Nagad or bank transfer), the transaction reference, the amount, and the sender account details you give us so we can confirm the transfer. We do not receive or store card numbers.
Technical records. Sign-in sessions, security and audit events (such as who changed which record), and network information used to limit abuse.
How we use it
We use personal information to create and secure your account, run assessments, assign and manage reviewers, produce your results, confirm payments and seat holds, send messages you need about your account or your work, and detect and prevent misuse. We do not use it for advertising and we do not sell it.
AI. Credon does not send your submitted work to AI model providers, and AI does not decide your result: a human reviewer scores your work. If we add AI-assisted features that process your work, we will update this policy and tell you before they apply.
Google user data
Credon uses Google Sign-In only to let you log in. We request the basic profile scopes (openid, email and profile) and nothing else. We use this data only to provide and improve your Credon account and login. We do not sell it, use it for advertising, or transfer it to others except as needed to operate the service (see “Who we share it with”) or to comply with the law. No person reads your Google account data except where needed for support, security or legal reasons.
Credon’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect Credon from your Google account at any time at myaccount.google.com/permissions.
Who sees what
Reviewers see only the work assigned to them. Reviewer views do not show your account identity or your numeric score, and learners do not see who reviewed their work. Credon operators can access the records needed for support, review, payment and result release.
Who we share it with
We share personal information only with service providers that help us run Credon, and only as needed for that purpose:
- Supabase, for the database, account sign-in and file storage.
- Vercel, for hosting the website and app.
- Resend, for sending account and notification emails.
- Upstash, for limiting repeated requests to protect the service.
- Google, when you choose to sign in with Google.
- A page-rendering service that produces snapshots of submitted work for reviewers.
We may also disclose information when the law requires it, or to protect the safety and rights of Credon, our users or others. These providers may process data in countries outside Bangladesh.
How long we keep it
We keep your account and assessment records while your account is active and for as long as needed to provide your results and result history, keep payment and audit records, and meet legal obligations. When you ask us to delete your account, we delete or anonymise your personal information, except for records we must keep for payment, security or legal reasons.
Your choices and rights
You can view and update your name, pseudonym, phone number and time zone in your profile settings, and control your notification settings. You can ask us to give you a copy of your data, correct it, or delete your account by emailing credon.team@gmail.com from your account email address. We respond within 30 days. Your profile is private by default.
Security
We protect personal information with encrypted connections, hashed passwords, access controls that limit who can see which records, and audit logs of sensitive actions. No system is completely secure, so please use a strong, unique password.
Children
Credon is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.
Changes to this policy
We may update this policy as Credon changes. We will change the date at the top, and where a change is significant we will tell you by email or in the app before it applies.
Contact
Questions or requests about this policy: credon.team@gmail.com.