Privacy policy

tessura ("we", "us") provides exam preparation and credential tracking for security professionals. This policy describes what we collect, why, and the choices you have. The short version: we collect what the product needs to work, we do not sell your data, and your credential photos are private to your account.

What we collect

• Account information, email address, optional display name, home state, and study goal, provided when you create an account.
• Credential information you add, license types, issue and expiry dates, and optional photos of your credentials. Photos are stored in a private storage bucket readable only by your authenticated account.
• Study activity, quiz attempts, scores, and answers, used to compute your progress, weak topics, and readiness score.
• Usage analytics, anonymous or pseudonymous product events (e.g. "quiz started") used to improve the product.
• Early-access signups, if you join the waitlist on our website, we collect the audience you select (guard, security company, or buyer of security services), your email address, and any name, company, role, or message you choose to include.
• Profile and network activity, if you publish a guard profile: the name, headline, photo, location, and experience you choose to show; applications, saved jobs, job alerts, and contact-request responses. Public profile fields are visible to anyone; license numbers are never shown publicly.
• Phone number, only if you add one for text job alerts. Used solely to send the alerts you subscribed to, never for marketing, never shared with employers.
• Staffing requests, if you request staffing as a client: your name, email, company, and the request details, shown to security-company accounts covering your state so they can respond.
• Reviews, review text and ratings you submit about companies, published only after moderation.
• Post-badge assessments, if you take a post-fit assessment: your answers, score, and the date of each attempt, kept so we can award the badge, enforce the 24-hour retry window, and review question quality. A badge you earn (the post type, score, and date) is shown on your public profile while it is published and to companies whose postings you apply to. Attempt details are never shown to anyone but you.
• Work-style profile, if you complete the work-style inventory: your responses and the resulting profile. It is used to rank job recommendations for you. A summary is shared with a company only when you apply to its posting and have left sharing on (you can turn it off any time); it is never used to accept or reject an application automatically.

What we do with it

• Operate the app: sync your wallet and progress across devices.
• Compute compliance deadlines and send deadline reminders (you can turn them off).
• Improve question quality and product features.
• Process subscriptions through Apple App Store / Google Play (we never see your payment card).
• Contact you about the early access you signed up for, product launches and openings relevant to the audience you selected. Every email includes a way to opt out, and you can ask us to delete your signup at any time.

What we do NOT do

• We do not sell your personal information.
• We do not share credential data with employers, state agencies, or data brokers.
• We do not use your credential photos for anything except showing them to you.
• We do not use your work-style profile to screen, rank, or reject you for any job, and we do not sell or share assessment data with anyone.

Service providers

We use Supabase (database, authentication, and storage), RevenueCat (subscription management), PostHog (product analytics), Anthropic (AI tutor responses, questions sent to the tutor contain exam content, not your personal information), Resend (transactional email such as invites, application updates, alerts, and deadline reminders), and Twilio (text-message job alerts, only if you add a phone number). Each processes data solely to provide their service to us. License verification checks query official state registries with the license number you provide.

Notifications

Deadline reminders are emailed to your account address 60, 30, and 7 days before each renewal or training deadline in your wallet. Turn them off with the link in any reminder or in your dashboard. The iPhone app also schedules local notifications on your device; turn those off in Profile or in your device settings.

Data retention and deletion

Your data is retained while your account is active. You can delete credentials (and their photos) in the app at any time. To delete your entire account and all associated data, open Me and choose Delete account in the app, or visit tessurasecurity.com/dashboard/account on the web. Deletion is immediate: profile, wallet, documents, posts, messages, applications, and sign-in are removed at once. A company page you own alone is deleted with you; one you share passes to your teammates. If you cannot sign in, email privacy@tessurasecurity.com from your account email and we complete the deletion within 7 days.

California residents

Under the CCPA/CPRA you have the right to know, delete, and correct personal information, and to be free from discrimination for exercising those rights. We do not sell or share personal information as defined by the CPRA. Requests: privacy@tessurasecurity.com.

Children

tessura is for adults preparing for professional licensure and is not directed at children under 13. We do not knowingly collect information from children.

Changes

We will post changes to this policy here and update the effective date. Material changes will be announced in the app.

Contact: privacy@tessurasecurity.com