1. Overview & Data Philosophy
CertiSecure ("we", "our", or "us") is engineered with an unyielding commitment to data privacy, zero long-term retention, and security. This Privacy Policy governs the manner in which CertiSecure collects, uses, maintains, and discloses information collected from users of our bulk certificate generation platform.
2. Information We Collect
We collect minimal required information strictly necessary to provide service and maintain security:
- Account Information: Name, email address, password hash, and active subscription details when you register an account.
- Uploaded Assets: CSV lists containing participant names and temporary image templates provided during a batch session.
- Security & Device Logs: IP address, browser type, device fingerprints, and timestamps collected solely for rate limiting, 2FA, and audit logging.
3. How We Process Batch Data
When you process a certificate batch, recipient data is processed strictly in-memory using our high-speed GD rendering engine. Data is never sold, licensed, or shared with third parties for marketing purposes.
4. Data Storage & Encryption
All stored user credentials and session data are protected using industry-standard AES-256 encryption at rest and TLS 1.3 in transit. Payment data is processed entirely by Razorpay; CertiSecure never stores credit card numbers or banking secrets.
5. Cookies & Tracking
We use essential HTTP-only cookies required for session authentication, CSRF defense, and security integrity. We do not use intrusive third-party tracking pixels or behavioral ad trackers.
6. Contact Privacy Team
If you have questions regarding this Privacy Policy or wish to exercise data subject rights, please submit an inquiry via our Contact Support Page.