Legal

Privacy Policy

1. Introduction

MASA Pro Workforce Transition Portal (“MASA,” “we,” “us”) is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, share, and retain your personal data, as well as the rights you have as a data subject. The policy is shared at all relevant stages where personal data is collected, including account registration, support requests, service onboarding, and contact forms.

Data is encrypted both at rest and in transit using industry-standard encryption protocols. MASA Pro operates within secure, certified cloud environments designed to meet stringent compliance requirements.

2. Lawful and Fair Collection

We collect and process personal information lawfully, fairly, and transparently. Personal data is only collected when necessary to provide services, meet contractual obligations, fulfil legal duties, or based on your explicit consent.

3. Information We Collect

We may collect the following categories of Personally Identifiable Information (PII):

  • Name, email, phone number, job title, employment history
  • Account credentials
  • Legacy career data (previous roles, years of experience, transferable skills)
  • Assessment results, quiz scores, and certification status
  • Usage data (IP address, browser type, session history)
  • Support communications

4. Purpose of Data Collection

We collect personal data for the following purposes:

  • Providing access to and improving our workforce retraining platform
  • Delivering AI-driven skill mapping and personalized learning tracks
  • Issuing certifications and managing your progress
  • Making certified profiles visible to enterprise recruiters (with your consent)
  • Processing payments and invoices via Stripe
  • Delivering customer support
  • Sending transactional and promotional communications (if opted-in)
  • Ensuring compliance and security

5. Entities with Access to PII

To deliver our services, the following entities may have access to your data:

  • Controller: MASA Pro Workforce Transition Portal
  • Processors/Sub-processors: Supabase (database and authentication), Vercel (hosting), Stripe (payment processing)

We do not sell your personal information to third parties.

6. Consent Management

We obtain user consent for the collection and processing of personal data:

  • At the point of data entry (e.g., contact forms, registration pages)
  • Using opt-in checkboxes with clear purposes defined
  • Through cookie banners for non-essential cookies

Consent will be retained as part of our compliance records. Withdrawal of consent can be requested at any time.

7. Consequences of Denying or Withdrawing Consent

If you deny or withdraw consent, certain services or features may not be accessible or may function with limited capability. We will notify you about the impact of such withdrawal clearly and promptly through email or on-screen messages.

8. Data Minimization Principle

We adhere to the principle of data minimization, collecting only the personal data necessary to fulfil specified, explicit, and legitimate purposes. We do not retain or process data beyond what is required for those purposes.

9. Data Subject Rights

You have the following rights regarding your personal data:

  • Right to Access — Obtain a copy of your data
  • Right to Rectification — Correct inaccuracies in your data
  • Right to Erasure — Request deletion of your data
  • Right to Restrict Processing — Limit how we use your data
  • Right to Data Portability — Receive your data in a portable format
  • Right to Object — Object to processing under certain conditions
  • Right to Withdraw Consent — At any time, without affecting the lawfulness of prior processing

To exercise your rights, contact us at privacy@masa-pro.org.

10. Notification Procedures

We will notify users of material updates to this policy or any data incidents via:

  • Email (for registered users)
  • On-site banners or notices
  • Updates on the masa-pro.org/privacy page

11. Retention of Privacy Policy Versions and Consent

All versions of this Privacy Policy, along with associated consent records, will be retained according to our data retention policy. This ensures transparency for historical reference, dispute resolution, and regulatory inquiries.

12. Data Security and Retention

We employ strong technical and organizational security measures to protect your data, including row-level security, TLS 1.3 encryption, and SOC 2-aligned access controls. Personal data is retained only for as long as needed to fulfil the purposes outlined in this policy or comply with legal requirements.

13. Grievance Redressal

If you have any concerns, complaints, or grievances regarding the processing of your personal data, you may contact our designated security officer. We are committed to addressing your concerns in a timely and transparent manner. All grievances will be acknowledged within a reasonable timeframe and resolved in accordance with applicable data protection laws.

14. Contact Information

If you have questions about this policy or wish to exercise your rights, please contact:

MASA Pro Privacy Team
Email: privacy@masa-pro.org
Website: masa-pro.org