Privacy Policy

01 / Who is responsible

Who is responsible

Crydd, operated by Melvin Contreras, an individual sole proprietor based in the Philippines decides how and why personal data on this platform is handled, and is the party accountable for it under the Data Privacy Act of 2012 (Republic Act No. 10173).

Privacy questions and requests go to privacy@crydd.com.

02 / What Crydd collects

What Crydd collects

You can browse the catalog without an account and without telling us who you are. Everything in the first three groups below exists only because you created an account or chose to send it.

Account

Your name, email address, whether that email is verified, and — if you sign in with Google or GitHub — the profile image and account identifier they return. Passwords are stored only as a cryptographic hash and can never be read back.

Profile you fill in

Experience level, country, career goals, target roles and industries, preferred exam language, and providers you are interested in. All optional, all editable, all visible to you.

What you track

Certifications you save or bookmark, their status (planned, in progress, completed), roadmap progress, skills, and your learning timeline.

Feedback you send

The name, email, category, subject, and message you submit, plus any screenshot you attach. Attachments are stored as files with our hosting provider; only their location, type, and size are recorded in our database.

Subscription

If you subscribe: plan, status, billing region, the country of the paying card as reported by Stripe, renewal date, and Stripe's customer and subscription identifiers.

Technical

Your network address (used to rate-limit abuse), an approximate region and timezone used to show the right price, and — where product analytics is enabled — pages viewed and features used.

Crydd never receives or stores your card number. Payment details are entered directly with Stripe, our payment processor.

03 / Why it is used

Why it is used

To provide the service

Running your account, remembering what you saved, personalising recommendations, and delivering Premium if you subscribe. Without this data those features cannot work.

Legitimate interests

Keeping the platform secure and available, preventing abuse, fixing errors, and understanding in aggregate which parts of the product are useful.

Legal obligations

Keeping the records that tax and accounting rules require for payments.

Consent

Anything genuinely optional — for example publishing a testimonial you chose to submit. You can withdraw it at any time.

Crydd does not sell personal data, does not share it with advertisers, and does not run behavioural advertising.

04 / Who else processes it

Who else processes it

Crydd is built on a small number of specialist services. Each one only receives what it needs to do its job, and each is bound by its own contractual and legal obligations.

Neon

Hosts the database in which your account and profile live.

Vercel

Hosts and serves the application, and stores feedback attachments.

Stripe

Processes payments and holds the payment records.

Resend

Sends transactional email: verification and password resets.

Anthropic

Runs the language model behind the AI Career Advisor. See the AI Disclaimer for exactly what is sent.

PostHog

Product analytics, when enabled — which pages and features are used.

Sentry

Error monitoring, when enabled, so faults can be diagnosed.

Upstash

Rate limiting, to keep the platform available.

Google / GitHub

Only if you choose to sign in with them, and only to authenticate you.

These providers operate outside the Philippines, so using Crydd involves transferring data internationally. They are chosen for their security posture and their contractual commitments to handle data only on documented instructions.

05 / How long it is kept

How long it is kept

Account and profile

Until you delete your account. Deletion is immediate and permanent.

Analytics page views

Automatically expired after 90 days by a scheduled job — the longest window any traffic record is held.

Feedback

Kept while it is useful for fixing what it reported. Say the word and we will remove yours.

Payment records

Retained by Stripe for as long as tax and accounting law requires, independently of your Crydd account.

06 / Your rights

Your rights

You can see, correct, export, restrict, object to, or erase your personal data, and you can withdraw consent where processing rests on it.

Most of this needs no request at all: your dashboard profile shows everything Crydd holds about you and lets you edit it, and Dashboard → Profile → Delete account permanently erases your account and its contents. Deleting cancels any active subscription first.

For anything the interface does not cover, write to privacy@crydd.com. We aim to acknowledge within 15 business days, and we may need to verify your identity before acting so that nobody else can make a request in your name. If you are unhappy with the outcome you may complain to the National Privacy Commission of the Philippines.

07 / How it is protected

How it is protected

• Traffic is encrypted in transit, and session cookies are restricted to secure, same-site delivery.
• Passwords are stored only as salted hashes; nobody at Crydd can read yours.
• Card details never reach Crydd's servers.
• Requests are rate limited, and uploads are checked for type and size on the server before being accepted.
• Administrative access is restricted to the operator and protected by the same authentication as everything else.

No platform can promise perfect security. If a breach ever affects your personal data, we will notify you and the regulator as the law requires, and tell you plainly what happened.

08 / Children

Children

Crydd is intended for people making decisions about professional certification and is not directed at young children. If you believe a child has created an account, tell us and it will be removed.