Security and data
What we process, who processes it, and how long records are kept.
Data we process
Owner email, name, and company; employee name, email, work state, overlay, and language; assignment, completion, certificate, and policy-acknowledgment records; billing identifiers via Stripe.
Processors
- Cloudflare — hosting and D1 database
- Stripe — payments
- Resend — transactional email
Retention
Training records kept for the employer-selected period (3 or 5 years) unless the employer requests earlier deletion where legally permitted.
Rights
Employers control employee roster data. Contact hello@harassmenttraininghq.com for access or deletion requests. No sale of personal information. No ads products in MVP.
Full policy: Privacy.