Privacy & Data
Governance Policy.

01. Institutional Purpose

Trainnel is an enterprise capacity-building, proctored evaluation, and credential verification platform developed by the DevAxle. Our infrastructure enables governments, accredited training organizations (CSOs), and healthcare institutions to automate cohort onboarding, organize syllabus resources, administer anti-cheat examinations, and issue cryptographically verifiable certificates for both Google Classroom Synced and Native training programs.

02. Google Workspace API Integration & Scope Usage

Trainnel accesses Google APIs exclusively to automate training management on behalf of authorized organization administrators. We request the following single OAuth 2.0 scope:

Trainnel does not read, access, or store personal Google Drive files, private emails, search histories, or contacts. All Google API interactions are confined strictly to the metadata required to provision course shells and generate enrollment links.

03. Proctored Evaluation & Anti-Cheat Telemetry

During timed assessments in the Trainnel Arena, our system utilizes the browser-standard Page Visibility API to detect window blur and tab switching. This telemetry is processed entirely in real-time to enforce a 3-strike anti-cheat threshold. Proctoring telemetry is never used for background device tracking, biometric recording, or cross-site monitoring.

04. Artificial Intelligence & Devai Assistant

Trainnel features Devai, an in-app AI learning tutor powered by Google Gemini. Devai operates under zero-retention parameters:

• Trainee questions and lesson excerpts are used solely in real time to generate contextual tutoring responses.
• User queries and uploaded document context are never used to train public or proprietary foundation models.
• All AI operations run over encrypted transport layer security (TLS 1.3).

05. Verifiable Public Credential Registry

When a trainee passes a comprehensive final examination, Trainnel generates an immutable cryptographic hash (e.g. /verify/[hash]). This public ledger record contains only the verified student legal name, course title, completion date, score cadre (Distinction, Merit, Pass), and issuer organization to enable third-party verification by employers and regulatory bodies.

06. Data Retention, Soft-Delete & Account Erasure

Users and enterprise administrators retain complete sovereignty over their data:

• Self-Service Account Erasure: Users can initiate permanent data deletion directly from their account settings. Personal data enters a 30-day soft-delete grace period before an automated Google Cloud Tasks worker permanently scrubs all associated records from Firestore.
• Immediate Permission Revocation: Administrators can revoke Trainnel's Google Workspace OAuth access at any moment via Google Account Security Settings. Revocation immediately halts all Google Classroom provisioning links.

07. Contact & Data Protection Officer

For privacy inquiries, compliance verification, or formal data erasure requests, contact our Data Protection Officer at: