Privacy Policy

This Privacy Policy explains how RenalCert may collect, use, protect, and disclose information in connection with RenalCert.io and related services. Depending on how the platform is used, RenalCert may process school contact information, administrator, instructor, student, graduate, employer, vendor, partner, and internal user account information, authentication records, phone numbers, addresses, course progress, lesson activity, clinical hour records, assignments, grades, certificates, transcripts, support cases, marketplace listings, career profiles, job applications, credential verification events, demo requests, billing records, imports, AI workflow inputs and outputs, device information, analytics data, and usage logs.

RenalCert uses information to provide, secure, operate, support, bill for, and improve the platform; manage accounts and permissions; maintain tenant isolation; process school operations; deliver communications and support; process imports and migrations; support AI-assisted workflows; administer marketplace and career-network features; verify certificates and transcripts; monitor abuse, security, and system health; analyze product usage; comply with legal obligations; and protect the rights, safety, and integrity of RenalCert, schools, students, and other users.

Schools generally control the student, instructor, course, clinical, certificate, transcript, and school operational records they submit to RenalCert. Schools are responsible for determining whether FERPA, HIPAA, state education laws, healthcare privacy laws, employment laws, accreditation rules, consumer privacy laws, business associate agreements, data processing agreements, or other requirements apply to their use of RenalCert, and for providing required notices and obtaining required consents. If a school needs a specific privacy, security, data processing, or business associate agreement, it should contact RenalCert before using regulated workflows.

Public certificate and transcript verification pages are designed to show limited credential verification information. Marketplace listings, employer profiles, partner profiles, job listings, graduate career profiles, and related inquiries or applications may be visible to other users or the public when submitted, opted in, approved, published, or otherwise made visible through platform controls. Users should not submit or publish information they are not authorized to share.

RenalCert may use third-party service providers to operate the platform, including hosting and infrastructure, Supabase authentication and database services, Vercel hosting, Stripe payments, Resend email delivery, OpenAI or other AI providers, PostHog analytics, monitoring, customer support, security, and similar operational services. These providers may process information only as needed to provide their services to RenalCert, subject to their applicable terms and safeguards.

RenalCert applies administrative, technical, and organizational safeguards appropriate for a healthcare education SaaS platform, including authenticated access, role-based permissions, tenant isolation, server-side authorization, audit-oriented records, and operational monitoring. No system can guarantee absolute security, and schools and users should use strong account practices, least-privilege roles, appropriate internal policies, and careful export-sharing procedures.

RenalCert does not sell student personal information. RenalCert may disclose information to service providers, to authorized school users, to marketplace participants based on visibility and opt-in settings, to public verification users for limited credential verification, when required by law, to protect rights and safety, in connection with a business transaction, or with the direction or consent of the relevant school or user.

Depending on applicable law and the person's location or relationship to a school, privacy rights may include access, correction, deletion, portability, restriction, objection, opt-out, or limits on certain sensitive information uses. Some requests involving school-controlled education records may need to be directed to the applicable school. Privacy, data access, correction, deletion, or consent questions may be sent to support@renalcert.io.