Privacy Policy

Agent Certification Institute ("we", "us") is operated by Asymmetric Bets Limited, a New Zealand company. This policy explains what we collect when you use agentcertificationinstitute.com, why, who we share it with, and the choices you have. Questions go to support@agentcertificationinstitute.com.

What we collect

• Account details: your name and email address. Your name is printed on any certificate you earn.
• Purchases: what you bought, when, and how much. Card details go directly to our payment processor, Stripe; we never see or store your card number.
• Learning records: units completed, practice quiz scores, assignment answers, exam answers and results, and the credentials issued to you.
• Marketing sign-ups: if you take the designation quiz, ask for our guide, join a waitlist, or start a checkout, we keep your email and what you asked for so we can send the short email sequence you signed up for.
• Affiliate details: if you join the affiliate program, your referral code, payout email, referral clicks and the sales attributed to you.
• Technical data: your IP address and browser, used briefly for security (rate limiting and abuse prevention). We store a one-way hash of your IP for these purposes, not the address itself.

Cookies and similar technology

• __Host-aci_session keeps you signed in (30 days, or 12 hours for staff). Essential.
• __Host-aci_login_challenge ties a sign-in code to the browser that asked for it (10 minutes). Essential.
• aci_ref remembers which affiliate referred you, for 30 days, so they are credited if you buy.
• Analytics: when enabled, Google Analytics sets cookies to measure which pages help visitors. In the European Economic Area, the United Kingdom and Switzerland these are off until you allow them, and we honour the Global Privacy Control signal everywhere. Your choice is stored in your browser.

How we use it

• To provide what you bought: course access, exam marking, certificates and the public verification page.
• To run your account: sign-in codes, receipts, renewal reminders and account emails, which you cannot opt out of while you hold an account.
• To send marketing email you signed up for. Every marketing email has a one-click unsubscribe.
• To keep the service secure and to prevent fraud.
• To meet our legal and accounting obligations.

The public credential register

Verifiable credentials are the point of what we do, so when you earn a designation your name, the designation, its verification ID, and its dates and status are visible to anyone who enters that ID at agentcertificationinstitute.com/verify. We do not publish a searchable list of holders; a credential can only be looked up by its ID.

Who we share it with

• Stripe processes payments and subscriptions.
• Cloudflare hosts the site, the database and certificate files, and sends our email.
• Google Analytics measures site usage, only with consent where consent is required.
• Affiliates see that a sale was referred and its value, never who bought it.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

How long we keep it

Account and learning records are kept while your account is open. Purchase records are kept for as long as tax and accounting law requires, which is at least seven years. Marketing sign-ups are kept until you unsubscribe or no longer engage. Security logs are kept for a short period.

Your choices and rights

• Update your name and email from your account page.
• Close your account from the same page. Closing it removes your name and email, revokes your credentials on the public register and cancels any renewal. Purchase records stay for our accounts, without your contact details.
• Ask for a copy of your information, or for anything else, by emailing support@agentcertificationinstitute.com. Depending on where you live (for example California, the EEA, the UK or New Zealand) you may have further rights, including to object to processing or to complain to a regulator. We will not treat you differently for using them.

Security

There are no passwords to leak: sign-in is a one-time code sent to your email. Sessions are signed and can be revoked; payments are handled by Stripe; staff access is limited, time-boxed and logged.

Children

Our designations are for working real estate professionals. We do not knowingly collect information from anyone under 18.

Changes

We will update the date above when this policy changes, and email account holders about any material change.