Privacy Policy

Account Information: When you sign up, we collect your name, email address, and profile picture (via Google OAuth or email/password registration).

Organization Information: Organization name, logo, website, and brand colors you configure in your account settings.

Recipient Data: CSV uploads containing names, emails, and custom fields, used solely to generate certificates.

Usage Data: Pages visited, features used, and certificate view counts to help us improve the product.

Payment Information: Payments are processed by Razorpay. We only store transaction metadata (payment ID, plan, amount). We never store your card details.

• Create and manage your account and organization
• Generate, store, and deliver certificates
• Send transactional emails (certificate delivery, account verification)
• Process payments and manage subscriptions
• Provide customer support
• Improve and maintain the platform
• Comply with legal obligations

We do not sell, rent, or trade your personal data.

We use the following third-party providers to operate the service. Each provider accesses only the data necessary to perform its function:

• Supabase: Database and file storage
• Vercel: Hosting and deployment
• Resend: Email delivery
• Razorpay: Payment processing
• Google: OAuth login

• Data is stored on Supabase servers in the Mumbai region, India
• Row-level security is enforced at the database level
• Passwords are hashed and never stored in plain text
• HTTPS is enforced across all endpoints

While we take reasonable measures to protect your data, no system is 100% secure. We recommend using strong, unique passwords for your account.

Recipient data uploaded via CSV is used solely to generate certificates. We do not contact recipients independently or use their data for marketing purposes.

Recipients may view their certificates through a public verification link that includes a unique verification ID.

You have the right to:

• Access, correct, or delete your personal data
• Request deletion of your organization and all associated data

To exercise these rights, contact us at hello@certpie.com. We will respond within 30 days.

We use essential cookies for authentication (Supabase session management). We do not use third-party advertising or tracking cookies.

CertPie is not intended for users under the age of 13. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. When we do, we will notify users via email or an in-app notice. Continued use of the service after changes are posted constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, please contact us:

• Email: hello@certpie.com
• Website: certpie.com