Privacy Policy

This Privacy Policy explains how Pak Soft Skill Certificate ("we", "us", "our") collects, uses, discloses, and safeguards information when you use the Pak Soft Skill Certificate Chrome browser extension (the "Extension") and the companion website at http://localhost:3000 (the "Service").

By creating an account or installing the Extension, you agree to the collection and use of information in accordance with this policy.

1. Information we collect

a) Information you provide directly

• Account information: name, email address, and a hashed password when you register.
• Payment proof: screenshots, transaction reference numbers, or other proof you upload to verify a credit purchase. We do not collect or store your card number, CVV, or banking credentials.
• Support messages: any content you send us through email or contact forms.

b) Information collected automatically by the Extension

• Activity events: when you trigger automation (e.g. slide progression, quiz answer submission), the Extension calls our API so we can deduct or track credit usage.
• Authentication tokens: a session token is stored locally in your browser to keep you signed in.
• Diagnostic data: minimal request metadata (timestamp, status codes) used solely for security and rate-limiting.

c) Information we do NOT collect

• We do not read, log, or transmit the content of pages you visit outside of Pak Soft Skills.
• We do not collect browsing history, cookies from third-party sites, or personally identifiable information from any other website.
• We do not sell, rent, or trade your personal data to anyone.
• We do not use your data to train machine-learning models or for advertising purposes.

2. How we use your information

• To create and manage your account and authenticate you across the Extension and Service.
• To deduct, track, and refund credits associated with certificate generation.
• To verify your manual payment submissions before crediting your wallet.
• To respond to support requests and notify you about important account or service changes.
• To detect, prevent, and respond to fraud, abuse, or security incidents.
• To comply with applicable laws and lawful requests from authorities.

3. Permissions used by the Extension

The Chrome Extension requests the minimum permissions necessary:

• scripting / activeTab — to display the floating control panel and interact with the active Pak Soft Skills tab when you click on it.
• storage — to remember your settings and authentication token locally in your browser.
• host_permissions — limited to our API host so the Extension can communicate with your account.

4. Data sharing

We share information only in the following limited circumstances:

• Hosting and infrastructure providers who store and serve our application under data-processing agreements.
• Legal compliance when required by law, court order, or to protect rights, safety, or property.
• Business transfers in the event of a merger or acquisition, with notice to you.

We never sell personal information.

5. Data retention

We retain account information for as long as your account is active. Payment records and credit transactions are retained for up to seven (7) years to comply with accounting and tax obligations. Diagnostic logs are rotated within 30 days.

6. Your rights and choices

• Access & correction: view and update your name and email from your dashboard at any time.
• Account & data deletion: permanently delete your account and all associated personal data from Dashboard → Settings → Delete Account. Deletion is irreversible and removes your profile, wallet, payments, certificate history, and authentication tokens.
• Withdraw consent: uninstall the Extension or close your account at any time.
• Contact us: for any privacy request, email support@pakskills.example.com.

7. Security

We use industry-standard measures including HTTPS for all transport, password hashing using bcrypt-class algorithms, scoped API tokens, and principle-of-least-privilege access controls. No method of transmission or storage is 100% secure, but we work continuously to harden our systems.

8. Children's privacy

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

9. International users

Our infrastructure may be hosted in jurisdictions outside your country of residence. By using the Service you consent to the transfer of your information to those jurisdictions, which may have different data protection laws than your own.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice within the Service at least 14 days before they take effect.

11. Contact

Questions about this policy? Email support@pakskills.example.com.