Privacy Policy

This Privacy Policy explains what personal information the ProvenPath™ Career Launcher (“the Service”) collects about you, how we use it, and who we share it with. It applies to everyone who uses the Service — graduates of Winder CNA Training, public community members, and healthcare employers.

1. What We Collect

Information you provide: name, email, phone, mailing address, program of study, campus, certifications and licensure numbers, employment history, resume content, interview and readiness-test responses, and any other information you enter into your profile or job applications.

Information we receive from Winder CNA Training:if you enrolled in a Winder CNA Training program, we import your enrollment record (course, end date, course completion status, license number if issued, campus, registration status) from the Training Center’s CRM to create or enrich your account.

Employer information: for employer accounts we collect company name, business type, contact details, job postings, and a record of which student profiles your team has viewed or unlocked.

Usage data: session timestamps, pages viewed, features used, approximate location derived from IP address, and diagnostic logs. We do not use third-party advertising trackers.

2. How We Use Your Information

• Operate the Service — authenticate your sessions, save your profile, deliver job application emails, render your public profile when your visibility is on.
• Connect students with employers — surface your profile to employers searching our marketplace; deliver your application to the employer you chose.
• Provide AI-assisted features — generate draft resumes, mock interviews, and readiness-test feedback from content you submit. We send only the minimum necessary content to the AI provider to produce a response; identifiers like your full name and license number are not sent unless you put them in content we’re asked to improve.
• Communicate with you — send transactional email (sign-in links, application receipts, account alerts) and, only if you opt in, marketing email about new features and job-market updates.
• Improve and secure the Service — detect abuse, debug errors, measure feature usage in aggregate.
• Comply with legal obligations — respond to valid legal requests.

3. Who We Share With

Employers:by default your profile is not discoverable. When you enable discoverability, employers can see a limited version of your profile (name, program, general location, readiness signals). An employer has to take an explicit action to “unlock” your contact information (email, phone, full license number); this unlock is logged. Employers are bound by the Employer Data Use Agreement which restricts what they can do with your data. We do not sell your information to employers for advertising; any employer fee is for access to find and contact candidates through the Service.

Service providers: we use trusted vendors to operate the Service:

• Supabase — database and file storage (servers in the United States).
• AWS SES — email delivery.
• Anthropic— large language model for AI-assisted features. We do not send identifiers beyond what’s minimally needed.
• Zoho — CRM source of record for Winder CNA Training enrollments (enrolled students only).
• Microsoft Entra — identity provider for admin staff sign-in only; not used for student or employer accounts.
• Vercel — application hosting.

Each vendor is contractually limited to processing data on our behalf.

Legal compliance: we may disclose information if required by subpoena, court order, or applicable law, or to protect the rights or safety of users or the public.

Business transfers: if Winder CNA Training is acquired, merges, or sells its career platform operations, user data may transfer as part of that transaction. You will be notified of a change in controller.

We do not sell your personal information. We do not share it with third-party advertisers.

4. Data Retention

We retain your account data for as long as your account is active. When you delete your account we remove your profile, resume content, interview/test submissions, and sessions within 30 days. We retain minimal record of account existence and opt-out preferences (email suppression list) longer, for legal and anti-abuse reasons. Email-log entries are retained for 24 months for deliverability diagnostics.

5. Your Rights

You can:

• Access and update your profile information at any time from your account settings.
• Turn discoverability off to remove your profile from employer search.
• Opt out of marketing email via the unsubscribe link in any marketing email or in your account settings. Transactional email continues.
• Request deletion of your account by emailing support@windercna.com.
• Request a copy of the personal data we hold about you.

For California residents: you have the additional rights under the CCPA to know, delete, and opt-out of sale of your personal information. We do not sell personal information. To exercise these rights, contact us at support@windercna.com.

6. Children

The Service is intended for users 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact us and we will remove it.

7. Security

We use industry-standard measures to protect your data: encrypted transport (TLS), hashed session tokens, access controls on our infrastructure. No system is perfectly secure; we will notify you of any breach affecting your personal information within the timeframes required by law.

8. Cookies

We use essential cookies to keep you signed in and to operate the Service. We do not use third-party analytics or advertising cookies. You can block cookies in your browser, but signing in will not work.

9. International Use

The Service is operated from and hosted in the United States. If you access it from outside the US, your information will be transferred to and processed in the US, which may have different data-protection laws than your home country.

10. Changes to This Policy

We may update this Policy. Material changes will be announced via email or in-product notice at least 14 days before taking effect. The version and last-updated date appear at the top of this page.

11. Contact

Privacy questions, data requests, or complaints:
support@windercna.com
Winder CNA Training
Winder, Georgia, USA