Privacy Policy
This Privacy Policy describes how NestedCerts collects, uses, and protects your personal information when you use our AWS certification prep platform.
The data controller is Nested Technology Group Pty Ltd, an Australian private company, ABN 54 698 422 552 (ACN 698 422 552), Queensland 4113, Australia. We serve customers worldwide. Contact us at support@nestedcerts.com to exercise any data right; we respond within 30 days.
Last updated: August 2026
1. Information We Collect
Account Information
- Email address
- Name (optional)
- Password (encrypted)
Usage Data
- Quiz and exam scores
- Progress and completion data
- Flagged questions
- Time spent on platform
Payment Information
- Processed securely through Stripe
- We do not store credit card numbers
- Billing history and subscription status
Technical Data
- IP address
- Browser type and version
- Device information
- Cookies and similar technologies
2. How We Use Your Information
- Provide and improve our service
- Track your progress and performance
- Process payments and subscriptions
- Send service-related emails
- Respond to support requests
- Analyze usage patterns
- Prevent fraud and abuse
3. Information Sharing
We do NOT sell your personal information. We share data only with:
- Stripe: Payment processing
- AWS: Hosting and authentication (Cognito)
- Service Providers: Metricool (cookieless analytics on our public marketing pages only) and other monitoring tools
- Legal Requirements: When required by law
4. Data Security
- Encrypted data transmission (HTTPS)
- Secure password storage (hashed)
- Regular security audits
- Access controls and monitoring
5. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and data
- Export your data
- Opt-out of marketing emails
6. Cookies
We use cookies for:
- Authentication and session management
- Remembering preferences
- Analytics and performance monitoring
You can disable cookies in your browser, but some features may not work.
7. Data Retention
- Account data: Until account deletion
- Usage data: 2 years
- Payment records: 7 years (legal requirement)
8. Children's Privacy
Our service is not intended for children under 13. We do not knowingly collect data from children under 13.
9. International Users
Your account and study data are hosted in Amazon Web Services’ Asia Pacific (Sydney) region. Some providers we rely on — notably Stripe for payments and email delivery — process data in other countries, including the United States and the European Union. Where personal data is transferred out of your country, those transfers are covered by the standard contractual clauses and equivalent safeguards our providers maintain, not by your continued use of the service.
10. Changes to Privacy Policy
We may update this policy. We'll notify users of significant changes via email. Continued use constitutes acceptance.
11. Contact Us
Questions about privacy? Contact us at security@nestedcerts.com
JavaScript is required to use this application.
Please enable JavaScript in your browser to access the full NestedCerts platform.
Contact: support@nestedcerts.com