Privacy Notice

1. Who we are

CEUsy is operated by Last Round Clothing LLC (d/b/a CEUsy), a Pennsylvania limited liability company ("CEUsy", "we", "us"). For the personal data described in this notice, Last Round Clothing LLC acts as the data controller. You can reach us at hello@ceusy.com.

2. What we collect & why

We collect only what we need to operate CEUsy for you.

Payment card data is collected and processed directly by Paddle (see Sharing below) — CEUsy never sees or stores your card number.

3. Who we share data with

We do not sell your personal data. We share it only with the service providers and partners we need to run CEUsy:

• Paddle — our Merchant of Record. Handles checkout, billing, tax, invoicing, and refunds. Paddle is a separate data controller for payment data.
• Supabase — our hosting and database provider. Stores your account, CEU records, and uploaded files in secure cloud infrastructure.
• Google (Gemini AI) and other AI gateway providers — used to power OCR on certificates and CEU recommendations. We send only the file or text needed for the request. We do not authorize these providers to train their models on your data.
• Email delivery providers — used to send transactional emails (sign-in confirmations, receipts, account notifications).
• Professional advisers (legal, accounting) — only when needed.
• Authorities — when required by law, court order, or to protect rights and safety.

4. How long we keep it

We keep your data while your account is active and for a reasonable period after you close it (typically up to 12 months) to handle billing, support, and legal obligations. You can request earlier deletion at any time. Anonymous, aggregated analytics may be kept longer.

5. International transfers

CEUsy is operated from the United States, and our service providers may store and process data in the United States or other countries. Where data is transferred from the UK or EEA, we rely on Standard Contractual Clauses or equivalent safeguards.

6. Your rights

You can:

• Access, correct, or download your data from your account.
• Delete your account and the data tied to it.
• Opt out of marketing emails at any time via the unsubscribe link.
• If you're in the UK or EEA: restrict or object to processing, request portability, withdraw consent, and lodge a complaint with your local supervisory authority.
• If you're in California: request access, deletion, or correction under the CCPA/ CPRA. We do not sell or share personal information for cross-context behavioral advertising.

To exercise any right, email hello@ceusy.com. We'll respond within 30 days.

7. Security

We use industry-standard technical and organizational measures to protect your data: HTTPS in transit, encrypted storage at rest, row-level security in the database, scoped access controls, and least-privilege service credentials. No system is perfectly secure, but we treat your data as if it were our own.

8. Cookies

CEUsy uses essential cookies to keep you signed in and the app working. We may use privacy-friendly product analytics to understand which features are useful. We do not use third-party advertising cookies.

9. Children

CEUsy is for working professionals and is not directed to anyone under 18.

10. Changes

We may update this notice as the product evolves. If a change is material we'll give you reasonable notice (in-app or by email).

11. Contact

Privacy questions or requests: hello@ceusy.com.