Trust
How we look after your information
A plain summary. The full technical controls are on our security page, and the legal terms are in our privacy notice and terms of use.
What we collect
We collect what you send us, through the contact form or by email, and, if you create a learner account, your email address and course progress. We do not run analytics, advertising or tracking scripts on this site, and we do not sell or share personal information.
How you sign in
Learners sign in with a one-time link sent to their email address. There are no passwords to leak. Each link works once and expires after 15 minutes, and we store only a scrambled copy of it.
Staff sign in through a separate, protected sign-in that checks their address against a named list before any part of the control center opens. Staff actions are recorded in an audit log.
Keeping the connection safe
- Every page is served over HTTPS, and browsers are told to use it only.
- Forms and sign-in requests are rate limited, so they cannot be flooded.
- Pages can only load scripts and styles from this site, which blocks many kinds of injected code.
- The site cannot be placed inside another site's frame, which blocks clickjacking.
Who helps us run the site
We use a small number of providers, each for a specific job. Our privacy notice lists them and what they do:
- Cloudflare: hosting, the database, staff sign-in and the assistant's AI model.
- Google: our company email.
- Resend: sign-in emails and notices to our own inbox.
Raising a concern
To ask what we hold about you, to have it corrected or deleted, or to report a security problem, write to legal@pontelon.com. We reply within 30 days, and usually within two working days. Security reports go to security@pontelon.com.
Read the full security page, our privacy notice and our terms of use.