Privacy Policy

Last updated: 29 October 2025

Introduction

Protagon ("we", "our", or "us") respects your privacy. This policy explains how we collect and use personal data when you use CPD Pro to browse content, take tests, obtain certificates and manage objectives.

Data We Collect

We collect the minimum data needed to operate the Service, including:

• Account data: name, email, profession, country
• Authentication data: password hashes, tokens
• Usage data: content viewed, test attempts, certificates, objectives
• Payment metadata from Stripe (no card numbers stored by us)
• Support messages you send us

How We Use Your Data

We use personal data to:

• Provide and secure the Service (authentication, authorization)
• Track completions, generate certificates and maintain your record
• Process payments and manage subscriptions (via Stripe)
• Provide support and communicate important updates

AI Processing

We use OpenAI’s API to generate summaries, questions and explanations from public article text you select. Prompts and generated output may be processed by OpenAI to provide the service. We do not send your password, payment data or private documents to OpenAI.

Privacy Policy – CPD Pro Extension

The CPD Pro browser extension processes the content of web pages only when the user explicitly requests question generation.

• When the user clicks “Generate questions”, the visible text of the active webpage is sent securely to our backend API to generate educational quiz questions.
• We do not collect personal data, browsing history, location data, or tracking information.
• We do not sell or share user data with third parties.
• Page content is processed solely for generating quiz questions and improving the educational functionality of the service.
• All communication with our servers is encrypted using HTTPS.

Contact: service@protagon.ai

Data Storage and Security

Data is stored in a secure MySQL database (PlanetScale) and hosted on modern cloud platforms (e.g., Vercel/Netlify). We apply access controls, encryption in transit (TLS) and industry‑standard security practices.

Cookies

We use essential cookies/local storage for authentication and preferences. We do not use third‑party advertising cookies.

Your Rights

You have the right to:

• Access the data we hold about you
• Request corrections or updates
• Request deletion of your data
• Withdraw consent at any time

To exercise these rights, contact us at service@protagon.ai. We will verify your identity before responding.

Retention

We retain account data for as long as your account is active. After deletion, we may keep limited records required by law (e.g., billing records) for up to 7 years.

International Transfers & Sub‑processors

We may process data in the EU and other regions where our providers operate. Key providers include:

• Stripe – payments and subscriptions
• PlanetScale/MySQL – database
• Vercel/Netlify – hosting and delivery
• OpenAI – AI features (content summarization and questions)

Changes

We may update this policy to reflect legal or technical changes. We will notify you of material updates.

Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: service@protagon.ai