Privacy Policy

Last updated: July 16, 2026

1. Information We Collect

Licenta collects contractor workspace profiles, license details, continuing education (CE) hours tracking, compliance documents, and logs of actions to operate the product. Specifically, this includes:

• Account Data: Full name, email address, password hash, and contact phone number.
• Workspace Data: Shop name, trade licensing classifications (e.g. Electrical, Plumbing, HVAC), license numbers, state jurisdictions, and expiration dates.
• Uploaded Files: Physical copies of certificates, licenses, and insurance documents.
• Audit & Security Logs: IP address, browser user-agent, and transaction types recorded during security audits.

2. How Data is Stored and Protected

In our current production deployment:

• Database Storage: All system transactions and records are stored inside a secure, workspace-isolated SQLite database (data/licenta.db).
• File Storage: Uploaded compliance files are saved in localized folders on our server, separated by tenant ID (data/uploads/{workspace_id}/), ensuring data isolation.
• Security Measures: We employ sliding-window rate limiters, session cookie protection, secure password hashing using scrypt, and HTTP security headers to guard your credentials.

3. Deletion and Grace Period

If you initiate a request to delete your account:

• Your account is immediately marked as inactive and all active login sessions are revoked.
• We retain your workspace records and uploaded compliance files for a 30-day grace period, during which you can reactivate your profile by contacting support.
• Upon expiration of the 30-day grace period, all database records and uploaded files are permanently deleted.

4. Third-Party Integrations

We integrate with selected service providers to deliver the product:

• Email Delivery: We use Resend to transmit verification links, password reset codes, and workspace invitation messages.
• Compliance Assistant (AI): Gated behind an admin feature flag, license scan details may be securely processed through the NVIDIA integrate API to deliver real-time renewal guidance.