Privacy Policy
Effective 27 August 2026 · How TenXPros handles applicant, participant, and operational data.
What we collect
We collect application details, account information, diagnostic responses, program submissions, dossier content, support tickets, payment status records, signed-in account activity, and operational analytics.
How we use data
We use data to review applications, deliver the program, personalize paths, provide feedback, manage certification, operate support, and improve TenXPros.
Confidentiality and what not to submit
TenXPros is designed around professional confidentiality. Do not submit confidential client, employer, patient, regulated, or other third-party data unless you have the right to use it. Use redacted or fictionalized examples in your application and dossier.
Public visibility
Directory profiles and credential verification pages are public only when a participant or admin action makes the relevant record public.
AI Role X-Ray public-source research
For AI Role X-Ray, we record limited business-facing information from public role pages: organization, role, location, public source URL and identifier, review date, status visible at review, and short editorial notes or paraphrases. Source briefs do not collect candidate data or publish recruiter names, contact details, screenshots, or full job descriptions. A private source copy is retained only where that is actually documented and approved; the legacy Edition 03 record does not claim an immutable source copy or content hash.
Corrections and rights requests
If you contact us about a factual correction, rights concern, employer response, or accessibility issue, we use the contact details and evidence you provide to review and answer the request. Send only the minimum necessary information and do not email confidential personal or company documents.
Essential service telemetry
Before you make an analytics choice, and whenever you choose Essential only, browser telemetry is limited to service reliability, security, error, and connectivity events. These records can include the affected safe route, event time, a coarse browser/device category, a short-lived session identifier, a country code when supplied by a trusted hosting edge, and a daily rotating one-way IP hash. When you are signed in, the account identifier and role may be associated where needed to secure or diagnose the service. Essential telemetry does not include a persistent analytics visitor identifier.
Signed-in account activity
When you are signed in to the admin, partner or participant areas, we keep a server-side record of your sign-ins (time, coarse browser and device category, and a daily rotating one-way hash of the network address), the pages you open in those areas with the visible time and scroll depth reported by your browser, the actions you perform there, and Partner Academy learning events. Record identifiers in page addresses are masked. This record exists independently of the analytics choice below because it is necessary to operate the program you joined, including partner activation, scorecards, certification, support, security investigations and fair follow-up when an account has gone quiet. It is available to authorized TenXPros administrators, is never sold or used for advertising, and is retained for 13 months by default alongside the browser analytics records described below; failed sign-in attempts and audit entries follow the audit-trail retention. It does not contain passwords, typed values, page content or full IP addresses.
Optional product analytics
If you choose Allow analytics, we additionally measure page views, navigation, maximum page depth, visible time, stable button or section identifiers, external destination hostname, form start/submission outcomes, and Core Web Vitals. A random pseudonymous visitor ID lets us understand repeat visits, and a session is shared across tabs until 30 minutes of inactivity. First-touch attribution is limited to the external referrer hostname and strictly sanitized utm_source, utm_medium, and utm_campaign labels; we never store the full referring path or a full URL query string. If you submit an application or partner application while analytics remains allowed, the server links the journey only after it finds the exact consented page view and derives attribution from previously recorded events in that session. Hidden form attribution values are not trusted. Authorized administrators can then understand the route to that outcome; telemetry still does not receive the values typed into the form.
What telemetry never records
Telemetry does not copy passwords, authentication tokens, form-field values, search or free text, uploaded files, dossier or ticket content, precise device characteristics, keystrokes, screen recordings, or full IP addresses. Dynamic account and record identifiers in routes are masked. We do not use browser or device fingerprinting to recognize visitors.
Your analytics choice
Analytics is off until you explicitly allow it. Global Privacy Control and Do Not Track signals default to Essential only. Your choice is stored as a necessary local setting for up to six months. You can reopen Analytics choices in the site footer at any time; withdrawing permission removes the analytics visitor ID, shared analytics session, and pending analytics outbox from your browser. Essential service records already received may be retained where needed to secure and operate the service.
Analytics retention, access and reporting
Raw first-party browser analytics and browser operational telemetry are retained for 13 months by default, after which bounded cleanup removes them. Aggregate analytics are available to authorized TenXPros administrators; individual pseudonymous event and session timelines are restricted further to configured super administrators. These records are used to improve the service, investigate reliability, and understand journeys. Privacy-minimized operational events and failures are retained in a restricted admin log for investigation and are not emailed. Daily management reports use aggregated statistics and do not include visitor identifiers, IP hashes, names, email addresses, or account-level timelines.
Legal basis and your rights
Optional analytics is processed on the basis of your consent; you may withdraw it at any time through Analytics choices in the footer without affecting earlier lawful processing. Essential security and reliability records are processed as necessary to provide and protect the service and for our legitimate interests in secure operation. Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection, and may complain to your data-protection authority. Contact support@tenxpros.com. Because a browser identifier is pseudonymous, include only information reasonably needed for us to locate a record; we may be unable to connect an identifier to you unless it was linked to an account or submitted record.
Transactional business emails are used for application, enrollment, review, support, payment confirmation, and certification workflows. Marketing messages are handled separately from the browser analytics choice and include the applicable unsubscribe controls.
Contact and official communication
TenXPros is operated by Naprolity OÜ, the legal operating company responsible for this service. Acceptance and payment instructions are sent only from hello@tenxpros.com, and secure payments are processed by Stripe. For privacy questions, data requests, or support, contact support@tenxpros.com.