1.Information we collect
Your privacy matters to us. This Privacy Policy explains how CertPie ("we", "us", or "our"), operated at certpie.com, collects, uses, and protects your information when you use our platform.
- Account information
- Your name, email address, and profile picture (through Google sign-in or email and password), the mobile number and country code you give us during setup, whether you chose to receive WhatsApp or marketing messages, and the time you accepted our Terms.
- Workspace information
- The workspace name, logo, website, signature, and brand colors you set in your account settings.
- Recipient data
- Names, email addresses, and custom fields in the files you upload, used solely to generate and deliver certificates.
- Certificate views
- When someone opens a certificate verification page, we record the time, the IP address, the browser and device information, and the page they came from.
- Usage data
- Pages visited, features used, and performance measurements, collected with Google Analytics and Vercel Speed Insights to help us improve the product.
- Payment information
- Payments are processed by Dodo Payments. We store only transaction details (payment ID, plan, and amount). We never store your card details.
- Messages
- Emails you send to hello@certpie.com and the support questions you ask us.
2.How we use your information
- Create and manage your account and workspace.
- Generate, store, and deliver certificates.
- Send transactional emails, such as certificate delivery, verification codes, and account notices.
- Send community updates, tips, or marketing only if you chose to receive them.
- Process payments and manage subscriptions.
- Provide customer support.
- Protect the service from abuse, including automated sign-ups.
- Improve and maintain the platform.
- Comply with legal obligations.
4.Data storage and security
- Data is stored on Supabase servers in the Mumbai region, India.
- Row-level security is enforced at the database level.
- Passwords are hashed and never stored in plain text.
- HTTPS is enforced across all endpoints.
While we take reasonable measures to protect your data, no system is 100% secure. We recommend using a strong, unique password for your account.
5.Certificate recipient data
Recipient data uploaded by an organization is used to generate and deliver that organization's certificates. Certificate emails are sent to recipients on the issuing organization's behalf. We do not use recipient data for our own marketing.
Recipients may view their certificates through a public verification link that includes a unique verification ID.
7.Your rights
You have the right to:
- Access, correct, or delete your personal data.
- Request deletion of your workspace and all associated data.
- Stop receiving marketing or WhatsApp messages at any time.
To exercise these rights, email hello@certpie.com. We will respond within 30 days.
8.Children's privacy
CertPie is not intended for users under the age of 13. We do not knowingly collect personal data from children.
9.Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will notify users by email or an in-app notice. Continued use of the service after changes are posted constitutes acceptance of the updated policy.
10.Contact us
For questions about this Privacy Policy, email hello@certpie.com or visit certpie.com.