Privacy Policy
1. Responsible business
CONSEQWIN is the product brand. Services are supplied by THE INNOVATION INFORMATION SYSTEM, at 23 July street, Muscat 25532, Oman. Contact support@conseqwin.com.
Contact support@conseqwin.com for privacy questions or requests. This policy covers our websites, accounts, learning activity, enquiries, payments and support. An organization may separately determine how participant information is used in its own sessions.
2. Information we handle
- Account information: email, name, sign-in identifiers, verification state and security/session information.
- Learning activity: selected products, progress, simulation decisions, session/team identifiers, results, scenarios and resources you create.
- Payments: subscription and transaction references, plan, payment state, dates, amounts, currency and access entitlement. PayPal collects payment credentials; our checkout does not ask you to send us full card details.
- Enquiries and support: contact details, messages, issue category, page and relevant technical details. Problem reports can include a browser user-agent; sensitive values are redacted before the application report log is written.
Avoid unnecessary personal, confidential or sensitive information in scenarios and reports. Use fictional or anonymized examples. Instructors can see activity needed to run and review their sessions; team results can identify people in small groups.
3. Purposes and legal bases
We use information to administer accounts, supply requested services, verify payments, maintain access, respond to requests and protect the service. Where applicable law requires a legal basis, processing depends on the purpose: performance of a contract or requested pre-contract steps, legitimate interests in administration and security subject to your rights, legal obligations, or consent for optional activities where required. Required account information is necessary to provide the service.
Simulation feedback supports education and does not determine employment, lending or other legally significant eligibility. We do not treat agreement to the customer terms as blanket consent to unrelated processing or marketing.
4. Providers and disclosures
The service uses Cranl for application hosting, Clerk for authentication, PayPal for payment processing, Resend for transactional email and Zoho Mail for the support mailbox. Domain and DNS services are managed through Bluehost. These providers receive information needed for their functions; PayPal also processes payment information under its own privacy terms. Database and Redis storage support account, session and billing records.
Authorized instructors and organization administrators can access information needed for their sessions and workspaces. We may disclose information when legally required or to establish or defend legal claims. Provider infrastructure and authorized access can involve international processing. Contact us for details relevant to your account and any transfer safeguards required by applicable law.
5. Cookies and device storage
Necessary cookies and device storage support sign-in, security, language and appearance preferences, simulation participation and app functions. Authentication providers can set their own session cookies. You can manage stored data through your browser; removing it may sign you out or interrupt a session. This policy does not authorize optional advertising or tracking without any consent required by law.
6. Retention and security
We keep information as needed for the service, support, security and applicable legal recordkeeping. Account closure requests are reviewed against remaining contractual and legal obligations. Billing records may need to be retained beyond the subscription period. Backups and provider records may follow separate retention cycles; contact us for details about a specific record.
Application problem-report files have best-effort pruning of records older than 90 days when new reports are written. Hosting logs and support emails are separate records; the file-pruning rule does not promise their automatic deletion. No online service can guarantee absolute security. Report suspected unauthorized access to support@conseqwin.com.
7. Your rights and choices
Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to processing. Send requests to support@conseqwin.com. We may need proportionate identity verification. Where your organization is responsible, we help route the request appropriately. You may complain to the competent privacy regulator in your jurisdiction.
Withdraw consent for an optional activity through the relevant control or by contacting us; withdrawal does not affect earlier lawful processing. Do not include credentials in a request. Where participation involves minors, the instructor or organization must ensure the appropriate authority and privacy arrangements before providing their information.
8. Updates
We show the policy version and date above. We provide additional notice or obtain consent where required when practices change. Request a copy or further information at support@conseqwin.com.
