Privacy Policy

What this is

escrummaster is a learning management system for Scrum certification prep. This page describes what data we collect, why, and your rights over it. We collect the minimum we need to operate the service.

Data we collect

• Identity from your OAuth provider — when you sign in with Google or Microsoft, we receive your name, email address, and profile picture URL. Nothing else. We do not request access to Gmail, Drive, Calendar, Outlook mailbox, or any other resource.
• Learning activity — which lessons you opened, quiz attempts (the questions, your selected answers, scores, and timestamps), practice-test results, and active study time (only while the browser tab is focused).
• Coach interactions — when you use the AI coach, your messages and the coach's responses are sent to Anthropic (Claude) to generate responses. We do not store conversation history in our database. Anthropic has its own data-handling terms; see Anthropic's privacy policy.
• Scrum Alliance Member ID (optional) — if you enter your Member ID on your Account page, we store it solely to print on completion certificates you generate. We never send it anywhere external. Scrum Alliance does not offer a partner API for SEU submission; certificates are downloadable evidence you attach yourself when claiming SEUs through their dashboard.
• Certificate snapshots — when you generate a completion certificate, we save an immutable snapshot of your activity at that moment (active hours, lessons completed, your name + Member ID at the time of issuance, certificate ID). This lets you re-download the same certificate later, even if you keep studying.
• Payment information — if you subscribe to Pro, payment is processed by Stripe. We receive only a Stripe customer ID + subscription status + period-end date; we do not see or store your card number, billing address, or any other payment data. See Stripe's privacy policy.
• Session cookies — a JWT session cookie set by Auth.js, used to keep you signed in. No third-party tracking cookies.

What we do NOT collect

• Anything from your Google Drive, Gmail, Calendar, or Contacts.
• Anything from your Microsoft 365 mailbox or files.
• Your IP address beyond the brief duration of a request.
• Browsing activity outside this site.
• Your full credit-card number or billing address (Stripe handles those).

How we use it

• To show you your progress and quiz history.
• To personalize coach responses based on the lesson you're on.
• To enforce per-user rate limits on the AI coach.
• To restore your account if you sign in again.

We do not sell your data, share it with advertisers, or use it to train AI models.

Where it lives

A Postgres database operated by us. Coach conversation content transits Anthropic's API per the terms above. No data crosses additional third parties.

Your rights

• Access — email the operator (see footer) to request a copy of all data we hold on you.
• Deletion — go to your account page and click "Delete my account." This irreversibly deletes your profile, OAuth links, all quiz attempts, and progress.
• Revoke OAuth access — visit your Google account permissions or Microsoft app access page and revoke escrummaster's access.

Children

This service is not directed at children under 16 and we do not knowingly collect data from them.

Changes

We'll update the "Last updated" date above when this policy changes. Material changes will be announced in the app.

Contact

Questions or requests: open an issue on the project's repository or email the operator.