Privacy Policy

You can select individual certificates, career pathway badges, topic competency reports and self-reported project links for a shared profile. Sharing is optional and requires your explicit confirmation. Your name, headline and selected items become visible to anyone with the unguessable link until it expires (7, 30 or 90 days) or you revoke it. Links are not recipient-restricted; viewers can copy information they see. Revocation prevents future access through the platform but cannot recall copies already made.

Shared profiles do not expose your email, account identifiers, exam answers, source code, internal review notes, photos or audio. Topic reports are included only when selected and display available topic percentages and preparation guidance. Projects are self-reported external links, not Pyronyx-assessed or endorsed work. Remove a project to withdraw it from all your profiles. Shared profiles are excluded from our website analytics and marked for search engines not to index.

Following a career pathway does not enroll you in exams or add attempts. Requirements are saved by version when you follow. A combined badge requires all component certificates to be approved and valid, and expires no later than the earliest component expiry. Revoked, disqualified, demonstration or expired component credentials do not satisfy the requirements. Administrators can revise or archive pathways without silently replacing existing followers’ saved requirements. Revoked and expired sharing-link records may be retained for security and account administration; no automatic record-deletion schedule is currently configured.

With your separate permission, we use Google Analytics 4 to understand visits to public information and certification catalog pages. The tag is not loaded before you select Allow analytics. Selecting Necessary only does not affect accounts, registration, learning, exams, or certificates. Global Privacy Control defaults to Necessary only until you expressly change that choice.

Analytics events contain the public page address and title and, where recognized, a referring search or social website origin. We exclude URL queries and fragments, unknown referrer paths, contact details, account identifiers, credentials, exam answers, recordings, and payment evidence from our analytics events. Google receives technical connection information when your browser contacts its servers. Registration, waiting-list and partner forms, login and recovery, holder verification, dashboards, and exam pages are excluded. Analytics uses a separate document boundary before those screens so the Google tag is not carried into them.

The provider is Google. Read Google’s Privacy Policy for its processing and international infrastructure. Google Signals and advertising personalization are disabled by this integration. This is a measurement feature, not permission for advertising or exam recording. Browser restrictions and declined consent can make visitor counts incomplete.

Your choice is stored on this device for up to 180 days. Analytics identifier cookies also have a maximum configured lifetime of 180 days without renewal on each event. Open Analytics preferences in the website footer or the Cookie Policy to decline later. Withdrawal stops this integration, clears its accessible identifier cookies and reloads the document if the tag had loaded; it does not automatically erase data already processed by Google. Contact contact@data-sorcerers.com for privacy requests. The operator must configure the GA4 event-data retention setting to two months before activation; that setting does not automatically remove aggregate reports.

When configured, Cloudflare Turnstile checks public certificate-verification requests to reduce automated abuse. Your browser contacts Cloudflare, which processes technical connection and challenge information under its Privacy Policy. The server validates a short-lived, single-use token. This integration does not send your certificate code, holder name or assessment records to the validation service. The challenge script is isolated from account and exam pages by a document reload when leaving verification.

Security rejections are aggregated using hashed connection identifiers, redacted endpoint paths, counts and timestamps. Repeated rejections can notify authorized administrators; these signals alone do not establish misconduct. Aggregates expire after 30 days through scheduled maintenance. Used challenge-token hashes expire after five minutes. A cleanup delay does not extend token validity.

We use public registration details to create an order, calculate its fee, arrange the selected exam date, review payment evidence and extracted amount/date/time matching results from local receipt OCR, prevent reuse of the same transaction, and email account activation and exam access after approval. A temporary checkout cookie limits access to orders created in that browser. QRIS is paid through your bank or wallet to the merchant; the Portal does not request bank passwords, PINs, OTPs or card numbers and does not automatically read your bank history.

Receipt images can reveal financial and personal information. Keep the merchant, amount, time and transaction reference visible, and hide unrelated balances or transactions before uploading. Only authorized payment administrators can open stored receipts. Order and review records are retained for registration administration, dispute handling, fraud prevention and applicable recordkeeping obligations; this version has no automatic payment-record deletion schedule. Contact contact@data-sorcerers.com for access, correction or deletion requests, subject to necessary retention obligations.

Required service notices are separate from the optional, unchecked marketing preference. Declining marketing does not affect registration, payment review, results or exam access.

After completing an exam, you may provide your name, institution or university, major or profession, overall and aspect ratings, recommendation score, criticism, suggestions, technical issues and future-topic preferences. Feedback is identified, optional, and does not affect grading. A unique link is associated with your account and completed exam; your own sign-in is required. We record first and last authenticated opening, an opening count limited to once per 30 minutes, and submission timestamps to follow response progress. By default, responses are visible only to authorized staff. Contact permission is optional and separate from publication. A separate, optional checkbox allows publication of your name, certification title, rating, and original comment as a moderated testimonial. An optional JPEG or PNG photo is decoded, resized and stripped of metadata before storage. Photo publication needs a separate permission as well as testimonial permission and administrator approval. Institution, profession, aspect ratings, detailed criticism, technical issues and contact preferences are not part of the public testimonial. You can remove your uploaded photo from the form. These feedback records have no automatic deletion schedule in this release; privacy requests can be made through our contact channel. Trial feedback is not published. You can edit your feedback or withdraw publication permission in Exam feedback; changes remove the published testimonial until a new review. You can also contact us for deletion or other privacy requests.

Operational emails include reminders before an assigned exam window closes, review decisions, and newly issued certificates. Completed participants are excluded from exam reminders. Delivery records contain recipient, subject, sending status, provider reference, and timestamps to prevent duplicate messages and investigate delivery problems. These messages support your certification and are not a subscription to marketing emails.

Authorized participant operators can view a contact journey assembled from existing account, waiting-list and public-registration records, including access status, last login/activity, assignment outcomes, payment status and recent invitation delivery status. They may record internal service notes and follow-up tasks with an owner and due date. This does not create marketing consent or automatically send emails. Do not provide passwords, tokens, financial credentials or unnecessary sensitive information in notes. These operational records have no automatic deletion schedule in this release; requests follow the retention and rights process in this policy.

Completed exams can include descriptive topic-level feedback based on authored question mappings and the same academic grading records. Coverage and small samples are disclosed. Topic feedback is not a separate pass/fail or a validated diagnosis. Administrators can publish exam incident announcements to a batch or selected participants and grant documented extra time to eligible active sessions. Recipient membership, internal reasons, time changes, responsible administrators and timestamps are stored for service administration and audit. Participants see their announcements and applicable time change, not internal notes or other participants.

We store appeal reasons, decisions, accommodation requests, approved time allowances, technical-retake references, renewal requests, and the administrators responsible for decisions. Describe the adjustment needed without sending medical records. Access is restricted according to administrator roles.

Administrator audit records track privileged changes. Authenticator secrets and webhook signing secrets are encrypted using a server-held key; recovery codes and API tokens are stored as hashes. Consistent backups can include account, assessment, and supervision records; backup retention and off-host storage must be set by the deployment operator.

Open Badge assertions publish a salted hash of the holder email alongside credential identity, dates and status, so a compatible badge platform can match the holder without publishing their email address. When an authorized HR or LMS integration is configured, scoped API access and signed webhook notifications disclose credential status and public credential details, not exam answers or supervision recordings.

1.1 Who this policy covers

This policy covers visitors, invited participants, credential holders, and administrators when they browse the Portal, activate or use an account, take an exam, request support, or verify a credential.

1.2 Responsible organization

PT. Data Sorcerers Indonesia operates Pyronyx Certification and is responsible for the personal-data processing described in this policy. Pyronyx Certification is part of Pyronyx Academy by Data Sorcerers. Direct privacy requests to contact@data-sorcerers.com.

1.3 Event registration and related notices

Registration may take place through a public checkout or an event organizer. For public checkout, you supply your contact details, selected certification and exam date; the organizer verifies payment before granting access. Applications, payments, scholarships, recruitment decisions, and other processing outside the Portal follow the notice provided for that activity.

Read this policy with the Terms & Conditions, Cookie Policy, and your event notice. This policy describes processing through the Portal; it does not replace an event notice for separate activities.

2.1 Categories and sources

2.1a Participant presence

Authorized participant administrators can view recent Portal activity to support event preparation and resolve access issues. Online status means a recent browser signal, not proof of attention. Signals expire after approximately 90 seconds without an update. This feature does not inspect other websites or applications and does not automatically disqualify participants.

2.2 Passwords, clipboard, and recordings

• Passwords: stored as salted verification hashes, not readable passwords.
• Code paste: activity logs record the character count, not a separate copy of clipboard contents. Code you paste and save as an answer becomes part of your assessment record.
• Photos and audio: may contain your face, voice, surroundings, other people, or background sounds. They are reviewed as recordings; the Portal does not create face templates or voiceprints.
• Connection identifiers: used to limit abusive requests and investigate security problems. This notice does not imply collection of your entire browsing history.

2.3 Information you choose to provide

We do not intentionally request health, religious, or other sensitive personal details for ordinary certification. Recordings or support requests can incidentally contain such information. Share only what is necessary when requesting an accessibility arrangement, and avoid unrelated personal information in your exam environment.

Account and assessment details are needed to provide certification. If you decline proctoring before starting, the exam cannot begin and your attempt is not used. Contact the organizer to discuss your situation.

3.1 Why information is processed

The applicable processing basis depends on the purpose and circumstances: providing the certification service, separate consent for proctoring, legal obligations, or a proportionate legitimate interest in security and reliable credentials. These bases must be applied consistently with your rights.

3.2 Uses that are excluded

We do not sell or rent personal data, publish exam recordings for promotion, use recordings for advertising, perform facial recognition, voice identification or emotion analysis, or use recordings or answers to train AI models. Browser permission for a camera or microphone does not authorize unrelated processing.

3.3 Automated grading and human review

Multiple-choice answers are scored against the assigned answer key. Coding submissions are evaluated using test cases. Automated grading produces a score; administrators decide integrity outcomes. Browser activity flags are indicators to assess in context. You may request human review of a disputed result or decision.

Indonesia’s Law No. 27 of 2022 on Personal Data Protection is a relevant legal reference.

4.1 Before an attempt begins

The preparation flow presents the rules, device permissions, and separate proctoring consent. Camera and microphone permissions are controlled by your browser. Consent must be given before an exam begins; simply browsing the Portal is not consent to recording.

4.2 Local device test

The device check uses a camera preview, microphone level meter, and short local audio sample that you can play back. Test samples are not uploaded and the test does not use your attempt. After a successful check, the devices can remain ready for up to five minutes while you prepare, without an exam recording.

4.3 During the exam

Camera video and screen video are not recorded.

4.4 Limitations of browser supervision

Browser suspension, power saving, and network interruptions can cause gaps. The exam page cannot inspect which other websites or applications you open. It cannot reliably detect every operating-system screenshot. A shortcut, focus change, or recording gap alone is a signal for review, not proof of misconduct.

4.5 Your choices

• Before starting: decline recording without using the attempt, or contact your organizer about accessibility or device constraints.
• During an exam: select End exam early to stop capture and permanently close the attempt. This does not restore the opportunity.
• Withdrawal: contact contact@data-sorcerers.com to withdraw consent or ask about further processing. If you intend to stop a live exam, use its ending controls as well; sending an email does not immediately stop the browser. Earlier lawful processing is not retroactively invalidated.

4.6 Your surroundings

Use a quiet, private space and tell people nearby that your camera and microphone are active. Keep unrelated personal or confidential material outside the camera view.

5.1 Participants and administrators

You can access your own assignments, results, and credentials. Other participants cannot access your assessment or proctoring records. Authorized administrators can manage participants and review exam records. Review events, reasons, and selected administrative changes are recorded to support administration and the handling of concerns.

5.2 Infrastructure and communications

Hosting, database, storage, backup, security, and email services can process information needed to operate the Portal. The website is hosted on Vercel. Render runs the application API and audio processing, and Supabase stores account and assessment records in a Singapore database. When connected by the administrator, Google Drive stores exam photos and audio in private folders; the database retains the file references and any uploads waiting for transfer. When E2B grading is enabled, submitted Python source and test arguments are processed in a disposable sandbox; database credentials, participant names, and expected answers are not sent to that sandbox. Public-example Run/Test executes locally in your browser using a Python runtime served by this website. The Portal uses Zoho Mail for private operational invitations sent from pyronyx@data-sorcerers.com. Zoho processes the recipient email, holder name, assigned program and schedule, exam code, account activation or login link, and a temporary first-access password where needed to transmit and retain the message. Delivery records in the Portal contain the recipient, subject, administrator, provider message reference, request state and timestamps; acceptance by Zoho does not prove inbox delivery or reading. We do not add open-tracking pixels.

We do not claim that all records remain in Indonesia. Any cross-border processing must meet applicable safeguards. Material changes to providers, locations, or processing purposes should be reflected in the notice given to participants.

5.3 Event organizers and sponsors

The organizer administering your event can access the participation information needed for certification. A sponsor does not gain access to your photos or audio merely by sponsoring an event. Any additional disclosure to an employer, school, or sponsor needs a stated purpose and an applicable basis; check the notice for your event.

5.4 Legal disclosures and organizational changes

Records may be disclosed to meet a valid legal obligation or to establish, exercise, or defend legal claims, limited to the information relevant to that purpose. A transfer of the service or responsible organization must be handled with the protections and participant notices required by applicable law.

5.5 External services

LinkedIn sharing links open a separate service. The Portal does not send your proctoring recordings to LinkedIn or embed LinkedIn tracking. External services handle information under their own terms once you choose to use them.

5.6 Initial account access

An inactive participant may receive a unique temporary password in their private invitation email. It expires after 24 hours and must be replaced at first sign-in before accessing the dashboard or exam. Password verification uses a salted hash. A backend-encrypted temporary secret permits consistent invitation preparation and is removed from active temporary credentials when the participant chooses a password; older encrypted invitations and backups can retain the now-invalid temporary value. A previously chosen personal password is not included in invitation emails. Keep the invitation private and contact your organizer if first-access details expire or appear exposed.

5.7 Google Drive authorization

Only a super administrator can connect the designated Data Sorcerers storage account. Participants do not need to authorize their personal Google accounts. We request OpenID and email access to confirm the authorized account identity, and drive.file access to manage files created by or explicitly selected for this application. We use the account identifier and verified email to enforce the configured owner, and file identifiers, metadata, checksums, and file contents to upload, verify, and retrieve private exam recordings. We do not request access to the account’s entire Drive or Gmail.

Access and refresh tokens are stored encrypted in the backend database. File references and connection status are kept there for storage recovery and administration. Google processes authorization and Drive storage; hosting and database providers process the backend records as described above. Retrieved recordings are available through authenticated, authorized administrator review. Google account data and Drive recordings are not sold, used for advertising, or used to train AI models.

The storage owner can disconnect the integration in the admin dashboard or revoke Pyronyx access in Google Account connections. Local disconnection removes active tokens, but does not delete existing Drive files, assessment records, or older encrypted backups. It pauses upload and Drive-backed playback until a valid reconnection. Request deletion through the contact details and retention process in this notice.

6.1 Public information

• Holder name and certification.
• Issue and expiry dates.
• Credential validity or revoked status.

Anyone with a valid verification link or certificate code can request this information, subject to security checks and rate limits. Complete certificate PDFs and personalized badge files require the authenticated holder or an authorized reviewer.

6.2 Information that stays private

Public lookup does not expose account email or identifiers, grades, section results, event or batch details, review reasons, exam answers, submitted code, camera photos, or audio recordings. Hosted Open Badge assertions separately include a salted recipient hash for interoperability; they do not publish a readable email address.

6.3 Watermarks and voluntary sharing

Reviewer copies carry a watermark. Holders may voluntarily share their original credential; a watermark does not prevent redistribution. Sharing a certificate, badge, QR code, or LinkedIn link makes its information available to recipients and potentially a wider audience. Content you publish elsewhere may be indexed or copied by other services.

6.4 Status and removal requests

Verification helps third parties confirm authenticity and current status. Revoked credentials remain marked as revoked so copies cannot be mistaken for valid credentials. You may contact contact@data-sorcerers.com about inaccurate information or removal. Scores are excluded from public lookup. A request is considered under applicable law and the need for accurate credential records.

7.1 Current retention behavior

Scheduled automatic deletion of server-side photos, audio, and activity records is not yet implemented. Records remain until an administrator carries out an applicable retention or deletion decision. Do not assume that a recording disappears when the exam ends. Contact us for the retention arrangement that applies to your event.

7.2 Records and retention considerations

7.3 Requests and backups

Ask contact@data-sorcerers.com about your event’s retention arrangement or request deletion. Retention and deletion decisions must consider the stated purpose, open disputes, credential verification, and applicable law. Any applicable limit on a request should be explained; the absence of automatic deletion does not waive your rights.

Backups may contain earlier copies and require separate handling. We do not promise a fixed backup-erasure interval here. A deletion response should explain relevant backup limitations and how restored copies will be handled.

7.4 Local upload queue

When uploads are interrupted, photos, audio segments, and activity records may wait in your browser’s local queue. Successfully synchronized items are removed. Unsent items can remain after closing the tab or signing out. Clearing site data removes them and can create unrecoverable gaps. Reconnect and let uploads finish before clearing data.

7.5 Answer and support drafts

Pending answers and unsent issue descriptions can be kept in tab-scoped session storage for recovery after a refresh or interruption. They are cleared after successful synchronization or submission; closing the tab can remove them. An expired or conflicting draft is not automatically submitted. See the Cookie Policy for the storage inventory.

8.1 Available requests

8.2 How to submit a request

1. Email contact@data-sorcerers.com or contact your organizer through the official event channel.
2. Give your name, registered email, event, and the action requested. Explain the relevant record or decision.
3. Do not include passwords, access codes, unrelated identity documents, or copies of exam questions.

8.3 Verification, handling, and response

We may request proportionate information to confirm that the request concerns your account. Requests are handled by the organizer; there is no automatic account-deletion tool in this release. Applicable legal response periods govern the request. No longer internal target overrides a shorter legal deadline.

If a legal duty or unresolved matter affects what can be provided, the response should explain the reason and available next steps. Withdrawal of consent does not invalidate processing that was lawful before withdrawal.

8.4 Complaints

You can raise unresolved concerns with the competent authority or pursue remedies available under applicable law. You do not waive these rights by taking an exam.

9.1 Safeguards and limitations

The Portal separates participant and administrator access, uses salted password verification hashes, limits the validity of account sessions and recovery links, and applies checks to prevent unauthorized access and abusive requests. Exam code execution has configured resource restrictions. These controls reduce risk; no system guarantees absolute security.

Hosting, connection protection, backup arrangements, and code-execution safeguards depend on the environment used for your event. Contact us for details of that arrangement before participating.

9.2 Your role

Keep account credentials and access links private, use a secure device, and report suspected misuse or exposure promptly to contact@data-sorcerers.com. Avoid sending unnecessary personal information with a report.

9.3 Personal-data incidents

Personal-data protection failures must be handled and notified as required by applicable law. Where Article 46 of Indonesia’s Personal Data Protection Law applies, written notification is required within 3 × 24 hours to affected data subjects and the competent institution, describing the data exposed, when and how exposure occurred, and response and recovery measures.

9.4 Young participants

Event age and eligibility rules apply. If a participant is a child under applicable law, the organizer must arrange required parent or guardian consent and appropriate safeguards before collecting exam recordings. Do not start a supervised exam until the organizer confirms those arrangements.

10.1 Contact details

Pyronyx Certification is operated by PT. Data Sorcerers Indonesia, part of Pyronyx Academy by Data Sorcerers.

Privacy, participant support, and appeals: contact@data-sorcerers.com. You may also contact your organizer through the official channel in your event invitation or registration confirmation.

Commercial and event partnership inquiries: partnership@data-sorcerers.com. Send privacy requests and assessment concerns to the contact address above.

Include your name, registered email, event, and the subject of your request. Never send your password, invitation token, or exam access code.

10.2 Changes to this notice

The update date and version identify this notice. Changes that materially affect processing should be communicated before they apply, with fresh consent where required. A change to this notice does not itself authorize an unrelated use of recordings. Contact us for questions about a notice that applied to an earlier session.