Privacy Policy

Ziggy Tech Soluções em Nuvem LTDA (Brazilian CNPJ 61.258.340/0001-01), based in Florianópolis, SC, Brasil, operates Azure Certified at azurecertified.com and is the controller of the personal data described here.

This policy applies to everyone who uses the site, wherever they are. It is written to meet Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018), the EU General Data Protection Regulation (GDPR) and the UK GDPR. For any privacy question or request, write to thiago@azurecertified.com, our privacy contact (LGPD "encarregado").

• Account: your email address and, if you sign in with Google, the name and profile photo on that Google account.
• Study activity: your answers, practice and exam attempts, scores, competency reports, flashcard progress, target exam date, and comments you post in question discussions.
• Purchases: which exam you bought, when, through which payment provider, and that provider's transaction reference. We never receive or store card numbers or bank details; those stay with Stripe or AbacatePay.
• Free practice quiz: the email you enter, the language you took it in, your answers as you go (including if you stop before the end), your score and your result by skill area.
• Emails: a record of which follow-up emails we sent you and when, and whether you unsubscribed.
• Support: the content of emails you send us.
• Technical data: your approximate country, derived from your IP address by our hosting provider, used to choose the currency, the language and whether we must ask for cookie consent. We do not store it with your account.
• Cookies and local storage: see section 5.

• To provide the service (your account, purchased exams, scoring and reports, flashcards, discussions): performance of our contract with you.
• To process payments and refunds: performance of contract, and our legal obligations (tax and accounting records).
• To give you your free quiz result: steps taken at your request, before any contract.
• To send free-quiz follow-up emails (your result, study tips, reminders): your consent, given when you start the quiz. You can withdraw it at any time with the unsubscribe link in every email.
• To measure our advertising (Google Ads): your consent in the EEA, the UK and Switzerland; elsewhere, our legitimate interest in knowing which ads work, which you can refuse at any time (section 5).
• To keep the service secure (rate limiting, fraud and abuse prevention, email validation): our legitimate interest.
• To answer support requests: performance of contract, or our legitimate interest in helping you.

We do not sell your personal data. We use these providers, who process data on our behalf and under contract:

• Supabase: database and sign-in.
• Vercel: hosting, and privacy-friendly aggregate analytics that use no cookies.
• Stripe: card payments in US dollars.
• AbacatePay: Pix payments in Brazilian reais.
• Resend: sending our emails.
• Google: sign-in with Google (only if you choose it), and Google Ads measurement (only as described in section 5).

We may also disclose data when required by law or to protect our rights.

• Essential (always on): your sign-in session, your language choice, your light/dark theme and your cookie choice itself. The site doesn't work properly without them, so they don't need consent.
• Analytics: Vercel Analytics counts visits without cookies and without identifying you.
• Advertising (Google Ads): measures which of our ads lead to visits and purchases. In the EEA, the UK and Switzerland it is only loaded after you click "Accept" in the cookie banner. Elsewhere it is on by default, and you can turn it off.

You can change or withdraw your choice at any time: open cookie settings, or use the "Cookies" link at the bottom of every page.

Our providers store and process data outside your country, mainly in the United States and the European Union. Where data leaves Brazil, the EEA or the UK, we rely on the safeguards those laws recognise: the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, the EU-US Data Privacy Framework where a provider is certified, and the LGPD's rules on international transfers (Art. 33). You can ask us for details at thiago@azurecertified.com.

• Account and study activity: while your account exists. When you ask us to delete it, we delete it within 30 days.
• Purchase records: 5 years after the purchase, as required by Brazilian tax law, even if you delete your account.
• Free quiz data: up to 24 months after your last quiz, or sooner if you ask us to delete it.
• Email send records: as long as the free quiz data they relate to.
• Unsubscribe list: kept indefinitely, holding only your email, so we never email you again by mistake.
• Support emails: up to 2 years.

Depending on where you live, you have the right to:

• know whether we process your data, and get a copy of it (access);
• correct inaccurate or incomplete data;
• have your data deleted, or anonymised;
• restrict how we use it;
• receive it in a portable format, or have it sent to another provider;
• object to processing based on our legitimate interest, and to direct marketing at any time;
• withdraw your consent at any time, without affecting what was done before;
• know who we share it with, and the consequences of not giving consent.

To exercise any right, email thiago@azurecertified.com. We answer within 15 days, and in any case within one month. We may need to confirm your identity first. We do not make decisions about you based solely on automated processing.

You can also complain to a data protection authority: in Brazil, the ANPD (gov.br/anpd); in the EU, the authority of the country where you live or work; in the UK, the Information Commissioner's Office (ico.org.uk). We'd appreciate the chance to sort it out with you first.

Data is encrypted in transit (HTTPS), access to our database is restricted and protected by row-level security, and payment data never touches our servers. No system is perfectly secure; if a breach affects your data, we will notify you and the competent authorities as the law requires.

Azure Certified is meant for adults preparing for professional certifications and is not directed at children under 16. If you believe a child has given us personal data, contact us and we will delete it.

When we change this policy, we update the date at the top. If a change materially affects how we use your data, we will tell you by email or on the site before it takes effect.

Ziggy Tech Soluções em Nuvem LTDA, Florianópolis, SC, Brasil. Email: thiago@azurecertified.com.