Privacy Policy

Last updated: September 11, 2026

This Privacy Policy explains how the QA Training Platform (“the platform”) handles information when you use its QA training services.

Information used by the platform

The platform uses account details such as your name, email address, role, QA path, and profile information you provide. It also stores the training information you submit, including activity responses, artifacts, evidence, participant notes, Validation Lab records, reviews, scores, and related feedback.

When you use attendance features, the platform records check-in and check-out timestamps and the resulting session duration. Coaches/Mentors and Admins may access training records needed to operate, review, and administer the program.

Google Drive connection

Connecting Google Drive is optional and is separate from the manually entered Training Drive link. If you connect Google Drive, Google provides account identity information such as your Google account ID and email address. The platform requests the narrow drive.file permission, which is used to work with files created by the platform or files you explicitly make available to it.

The connection is intended to support participant-owned training files and future supported exports. Automatic training exports and Google Sheets synchronization are not currently active features of this platform. The platform does not request Gmail, Calendar, or Contacts access.

OAuth access and refresh tokens are stored using application encryption and are not shown to participants, Coaches/Mentors, or other users. You can disconnect Google Drive from your profile; this removes the stored connection information and the application can no longer use that authorization. You may also revoke access through your Google Account settings.

How information is used

Information is used to authenticate users, deliver QA training, record progress and attendance, review submissions, calculate configured scores, evaluate Gates, provide feedback, protect platform security, and administer accounts. We do not sell participant information.

Access and retention

Access is limited by role. Participants can access their own training information. Assigned Coaches/Mentors can perform authorized reviews for assigned participants, while Admins administer the platform. Historical submissions, evidence, reviews, scores, and Gate records may be retained to preserve training history and reporting. Information is retained for as long as reasonably needed for the training and administration purposes described here, subject to the platform owner’s retention requirements.

Security

The platform uses authentication, role-based authorization, server-side access checks, encrypted OAuth token storage, and protected private evidence storage. No online service can guarantee absolute security, so please protect your account credentials and report suspected unauthorized access.

Third-party services

Google OAuth and Google Drive are third-party services. Their handling of information is governed by Google’s own terms and privacy policies. The platform does not receive unrelated Google services data through this connection.

Contact

Privacy questions can be sent to mprestoza@fullscale.ph.

Changes

We may update this policy when the platform or its data practices change. The updated version and effective date will be posted on this page.