Privacy policy

1. Introduction & Overview

Welcome to Techlerator (“Techlerator,” “we,” “us,” or “our”), operating through Techlerator Inc. (a Delaware, United States corporation) and Techlerator Ltd (United Kingdom). Techlerator is an AI workforce intelligence company providing digital learning platforms, workforce assessment software, and educational services, including our products Xeruit, Xualify, Xearn, Salary Insights, and our training programmes (Transition, Graduate, Expert, and Talent Incubation).

We respect your privacy and are committed to protecting your personal data in accordance with global data protection standards, including the EU General Data Protection Regulation (EU GDPR), UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), US State Comprehensive Privacy Laws (including Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Texas TDPSA, Utah UCPA), the US Children's Online Privacy Protection Act (COPPA), and the US CAN-SPAM Act.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website (techlerator.com), enroll in our learning programmes, use our SaaS products, or communicate with us.

2. Data Controller & Business Contact Details

Depending on your location and the services accessed, Techlerator Inc. (Delaware, USA) and Techlerator Ltd (UK) act as joint data controllers or businesses responsible for processing your personal information.

If you have any questions about this Privacy Policy, your data protection rights, or wish to submit a data subject request, please contact our Data Protection Office:

• Data Protection Officer (DPO): dpo@techlerator.com

3. Information We Collect

We collect personal information through direct interactions with you, automated tracking technologies, and trusted third-party services.

3.1 Personal Data You Provide Directly

• Registration & Account Data: Full name, email address, phone number, postal address, password credentials, and job title when creating an account, enrolling in a programme, or booking a product demo.
• Educational & Professional Profile Data: CV/resume details, current skills, educational background, employment history, career goals, and portfolio/capstone submissions to personalize your learning and career recommendations.
• Financial & Billing Information: Payment details (e.g., credit card numbers, billing address, bank account details for installments). All payment card transactions are processed securely via PCI-DSS compliant third-party payment gateways (such as Stripe). Techlerator does not store full credit card numbers on its servers.
• Communications & Support Data: Information provided when contacting customer support, submitting feedback, responding to surveys, or communicating in course forums.

3.2 Information Collected Automatically

• Usage & Telemetry Data: IP address, device type, browser type, operating system, pages visited, time spent on pages, referral URL, clickstream data, and interaction with course modules.
• Cookies & Identifiers: Small data files stored on your device that enable functionality, security, analytics, and tailored preferences. Please refer to Section 11 for cookie management details.

4. Legal Bases for Processing (EU & UK GDPR)

Under the EU and UK GDPR (Article 6), we rely on the following lawful bases to process your personal data:

• Performance of a Contract: Necessary to deliver the courses, SaaS product access, certification, and customer support you requested when signing our terms or enrolling.
• Legitimate Interests: Necessary for our legitimate business interests in securing our platform, optimizing user experiences, conducting product analytics, detecting fraud, and improving our AI workforce capabilities, provided these interests do not override your privacy rights.
• Consent: Where you have given explicit consent, such as subscribing to our marketing newsletters, accepting non-essential analytics cookies, or agreeing to share your CV with partner employers via Talent Connect. You may withdraw consent at any time.
• Legal Obligation: Necessary to comply with statutory legal requirements, tax obligations, and regulatory compliance.

5. How We Use Your Personal Data

We process your personal information for the following specific business and operational purposes:

• Delivering online learning courses, tracking curriculum progress, grading capstones, and issuing diplomas.
• Operating and maintaining our AI workforce intelligence platforms (Xeruit, Xualify, Xearn, Salary Insights).
• Processing enrollment fees, installment subscriptions, and corporate invoicing securely.
• Connecting qualified learners with hiring employers through Talent Connect (only upon student opt-in).
• Providing responsive customer service, technical support, and onboarding guidance.
• Sending critical transactional notices, administrative updates, and security alerts.
• Sending commercial newsletters, course announcements, and promotional communications in compliance with the US CAN-SPAM Act and PECR (with immediate single-click opt-out options).
• Ensuring platform integrity, preventing fraudulent activities, and complying with applicable US and UK laws.

6. AI Capabilities & Automated Decision-Making

Techlerator utilizes artificial intelligence and machine learning models to provide personalized learning pathways, skills intelligence, and workforce analytics.

• No Solely Automated Legal Decisions: Our AI models assist in skills evaluation and career recommendations, but no decision with legal or similarly significant effects is made solely by automated processing without human review.
• Human Oversight & Bias Enquiries: Students and employers have the right to request human review of any automated skill assessment or platform evaluation, or submit compliance and algorithmic bias enquiries, by emailing compliance@techlerator.com.

7. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We disclose personal data strictly under the following limited circumstances:

• Authorized Service Providers: Trusted third-party vendors who perform services on our behalf (e.g., cloud infrastructure on GCP/AWS, payment processing via Stripe, transactional email delivery, CRM, analytics). These providers are bound by strict contractual data processing agreements (DPAs) requiring them to safeguard your data.
• Instructors & Mentors: Course facilitators receive necessary profile and assignment data to deliver instruction, provide feedback, and offer career coaching.
• Partner Employers: With your explicit consent via Talent Connect, your profile, verified skills, and resume may be shared with hiring organizations seeking qualified technical candidates.
• Corporate Clients: If your training or platform access is sponsored or paid for by your employer, we may report aggregate or individual course completion and skills assessments to your organization in accordance with the corporate sponsorship agreement.
• Legal & Regulatory Disclosures: When required by law, subpoena, legal process, court order, or regulatory agency (including US Federal Trade Commission, state Attorneys General, or UK Information Commissioner), or when necessary to protect the rights, property, and safety of Techlerator, our users, or the public.

8. International Data Transfers

Techlerator operates globally with server infrastructure located in secure data centers across the United States, United Kingdom, and European Union.

When personal data originating in the European Economic Area (EEA) or UK is transferred to the United States or other jurisdictions outside the EEA/UK, we ensure appropriate legal safeguards are implemented in accordance with Chapter V of the GDPR and UK GDPR. These safeguards include Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, and reliance on valid adequacy decisions where applicable.

9. Data Retention & Security

Security Measures: We employ robust technical and organizational security controls, including TLS 1.3 encryption in transit, AES-256 encryption at rest, secure firewalls, vulnerability scans, multi-factor authentication, and strict role-based access control.

Retention Periods: We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including satisfying educational record-keeping, statutory legal, tax, and accounting requirements. Account data is retained during your active relationship with us and for up to 6 years following account closure to satisfy statutory audit limitations in the US and UK.

10. Your Privacy Rights (US & International)

Depending on your state or country of residence, you hold comprehensive rights regarding your personal data:

10.1 Rights under EU & UK GDPR

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data where legal grounds exist.
• Right to Restriction of Processing: Request that we restrict processing of your data under specific conditions.
• Right to Data Portability: Receive your data in a structured, machine-readable format or request direct transfer to another controller.
• Right to Object: Object at any time to data processing based on legitimate interests or direct marketing.
• Right to Lodge a Complaint: You have the right to complain to a supervisory authority. UK residents can contact the Information Commissioner's Office (ICO) at ico.org.uk. EEA residents can contact their local lead supervisory authority.

10.2 Rights under US State Privacy Laws (CCPA / CPRA, VCDPA, CPA, CTDPA, TDPSA)

Residents of California, Virginia, Colorado, Connecticut, Texas, Utah, and other US states with comprehensive privacy laws have specific rights:

• Right to Know & Access: Request disclosure of the categories and specific pieces of personal information collected, processed, or disclosed over the prior 12 months.
• Right to Delete: Request deletion of personal information collected from you, subject to statutory exemptions.
• Right to Correct: Request correction of inaccurate personal information maintained about you.
• Right to Opt-Out of Sale, Sharing & Targeted Advertising: Techlerator does not "sell" personal information for monetary value or share personal information for cross-context behavioral advertising. You have the right to opt out of targeted advertising and profiling in furtherance of automated decisions.
• Right to Limit Use of Sensitive Personal Information: We only process sensitive personal information for necessary operational purposes.
• Right to Non-Discrimination: We will not discriminate against you (e.g., deny services, charge different prices) for exercising any of your US privacy rights.
• Authorized Agents & Appeals: US residents may designate an authorized agent to submit requests on their behalf. If we decline a request, residents in states such as Virginia, Colorado, or Texas have the right to appeal our decision by emailing security@techlerator.com.

To exercise any of these rights, or to submit a privacy request or rights enquiry, please email security@techlerator.com or our DPO at dpo@techlerator.com. We will respond to verified requests within 30 days (or up to 45 days where permitted under US state privacy laws).

11. Cookies & Tracking Policy

We use essential cookies necessary for website functionality, authentication, and security. We also use functional and analytical cookies (such as Google Analytics) to understand aggregated traffic patterns and optimize platform speed.

You can control cookie preferences through your browser settings or cookie consent banner at any time. Disabling essential cookies may impair core functionality on our platform. We respect standard browser Global Privacy Control (GPC) opt-out signals where technically required.

12. Children's Privacy (US COPPA Compliance)

Our services and learning programmes are intended for individuals aged 18 and older (or aged 16+ with verifiable parental/guardian consent). In strict compliance with the US Children's Online Privacy Protection Act (COPPA) and UK Age Appropriate Design Code, Techlerator does not knowingly collect or solicit personal data from children under the age of 13 (or under 16 in the EEA/UK). If we discover that personal information has been collected from a child under 13/16 without verified parental consent, we will delete that information immediately. Parents or guardians who believe their child has provided us with personal information should contact security@techlerator.com.

13. Third-Party Web Links

Our website and platform may contain links to external third-party websites, tools, certification portals, and payment providers. Techlerator is not responsible for the privacy practices or content of third-party sites. We encourage you to read the privacy statements of every external website you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect updates in our operational practices, technological advancements, or legal obligations. We will notify you of material changes by updating the "Last updated" date at the top of this policy or via direct email notice for active registered users.

15. Contact Information

If you have questions, feedback, or data privacy requests regarding this policy, please reach out to us:

• Privacy Requests & Rights Enquiries: security@techlerator.com
• Data Protection Officer (DPO): dpo@techlerator.com
• Compliance & Bias Enquiries: compliance@techlerator.com
• General Enquiries: contact@techlerator.com