Privacy Policy

Your privacy matters to us. This Privacy Policy explains what information we collect, how we use it, and your rights as a user of CertificationData.com.

1. Information we collect

Account information

• Email address
• Authentication data handled by our authentication provider (passwords are not stored in plain text)

Profile information

• Name or nickname you provide for onboarding
• Country you provide for your profile

QR Tag information

• Tag label (printed under the QR)
• Owner display name (optional)
• Description (optional)
• Public contact fields you choose to publish (for example phone, email, WhatsApp, website, social links)

Technical data (scan & security logs)

When someone scans a QR tag or visits a public tag page, we may collect basic technical data for security, abuse prevention, and reliability.

• IP address (or a truncated/hashed form where feasible)
• Approximate device and browser information (user agent)
• Timestamps and requested pages (for example a tag page visit)
• Basic performance/security signals (to detect abuse)

We do not store message content because we do not provide an in-app messaging system.

Billing information

Billing and payment details are handled directly by Stripe. We do not store full card numbers or complete payment details on our servers.

2. How we use your data

We use your information to:

• Provide and maintain the QR Tag service and dashboard.
• Display your public tag page when a QR tag is scanned or visited.
• Send essential account, security, or billing notifications.
• Improve system performance, security, reliability, and fraud prevention.
• Comply with legal obligations where applicable.

We do not sell or rent your personal data to third parties.

3. Public information & controls

Only the fields you choose to publish appear on your public tag page. You can edit or remove public fields at any time from your dashboard. Changes apply immediately.

Your onboarding profile details (name/nickname and country) are not intended to be displayed on the public tag page.

4. Data retention

• Scan & security logs: typically retained for up to 90 days to help detect abuse, troubleshoot incidents, and improve reliability.
• Account and tag data: retained while your account remains active, or as needed to provide the Service.
• Billing records: handled by Stripe and may be retained as required for accounting, tax, and compliance.

Retention periods may be extended if needed to comply with legal obligations, resolve disputes, or enforce agreements.

5. Data security

We take reasonable technical and organizational measures to protect your data, including:

• Secure authentication and sessions.
• HTTPS (TLS) for data in transit.
• Access controls and least-privilege practices.
• Row-Level Security (RLS) policies for user data where applicable.

No online service can guarantee 100% security, but we work continuously to protect your information.

6. Cookies

We use cookies and similar technologies to:

• Keep you logged in and maintain session state.
• Improve site functionality and security.

We do not use third-party advertising cookies or ad network tracking pixels.

7. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your account and associated data (where applicable).
• Request a copy of your data in a portable format, where applicable.

To submit a request, contact us at support@certificationdata.com.

8. Third-party services

We rely on trusted providers to operate the Service, including:

• Supabase (authentication, database, and storage)
• Stripe (billing and payments)
• Hosting/CDN providers for secure delivery

These providers process data on our behalf under their own security and privacy commitments.

9. Changes to this policy

We may update this Privacy Policy to reflect changes in the Service or legal requirements. When we make significant changes, we may notify users through the dashboard or by email where appropriate.

10. Contact

If you have questions about this Privacy Policy, contact us at support@certificationdata.com.