Privacy Policy

1. Introduction

This Privacy Policy describes how Webbi ("we," "us," or "our") collects, uses, and protects information when you use our Operator Training Platform (the "Platform"), available at vgm.webbilearn.com and related domains.

By using the Platform, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Platform.

2. Information We Collect

We collect the following types of information:

Account Information

• Email address — used for account creation, login, and communication
• Name — used for training certificates and identification within the admin dashboard
• Organization/company name — used for subscription management and admin features
• Password — stored securely by Firebase Authentication (we do not have access to plaintext passwords)

Training Progress Data

• Course completion status and scores
• Current module position within each course
• Quiz and scenario answers
• Certificate generation records
• Timestamps of training activity

Payment Information

• Payment processing is handled entirely by Stripe. We do not store credit card numbers, CVVs, or other payment card data on our servers.
• We receive from Stripe: subscription status, plan type, and billing email for account management purposes.

3. How We Use Your Information

We use collected information for the following purposes:

• Platform operation: To provide access to training courses, track progress, generate certificates, and manage subscriptions
• Admin dashboards: To allow authorized administrators at your organization to view team training progress and completion data
• Communication: To send account-related emails such as team invitations, password resets, and important platform updates
• Product improvement: To analyze anonymized, aggregated usage patterns to improve course content and platform functionality
• Support: To respond to your questions and troubleshoot issues

4. Data Storage & Security

We take reasonable measures to protect your information:

• Authentication: Managed by Google Firebase Authentication with industry-standard encryption
• Database: Training data is stored in Google Cloud Firestore with security rules that restrict access to authorized users
• Hosting: The Platform is hosted on Netlify with HTTPS encryption for all connections
• Payments: Processed by Stripe, a PCI-DSS Level 1 certified payment processor

While we implement reasonable security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

• Your organization's administrators: Training progress data is visible to authorized admins within your subscribing organization
• Service providers: We use third-party services to operate the Platform:
  • Google Firebase (authentication and database)
  • Stripe (payment processing)
  • Netlify (hosting and serverless functions)
  • SendGrid (transactional emails such as team invitations)
• Legal requirements: We may disclose information if required by law, regulation, or legal process

6. Data Retention

We retain your data as follows:

• Active subscription: All account and training data is retained for the duration of your organization's subscription
• After cancellation: Data is retained for 90 days following subscription termination, after which it may be deleted
• Deletion requests: You may request deletion of your personal data by contacting us at the email below. We will process requests within 30 days, subject to any legal retention obligations.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data
• Portability: Request your training data in a portable format

To exercise any of these rights, contact us using the information in Section 10.

8. Cookies & Tracking

The Platform uses minimal cookies and local storage:

• Authentication cookies: Firebase Authentication uses cookies/local storage to maintain your login session
• No advertising trackers: We do not use advertising cookies, tracking pixels, or behavioral analytics
• No third-party analytics: We do not use Google Analytics or similar third-party analytics services

9. Children's Privacy

The Platform is intended for use by adult employees in industrial work environments. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

10. Contact

For questions about this Privacy Policy, data requests, or privacy concerns, contact:

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the email address associated with your account. Continued use of the Platform after notification constitutes acceptance of the updated policy.