Privacy Policy
Last updated: September 20, 2026
1. Introduction
CertTracker ("we," "our," or "us") operates the getcerttracker.com website and CertTracker application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
2. Information We Collect
Account Information: When you create an account, we collect your name, email address, company name, and industry.
Employee Data: You may input employee names, email addresses, phone numbers, job titles, locations, and employee IDs into the platform.
Certification Data: You may input certification types, issue dates, expiry dates, and upload certification documents (PDFs, images).
Usage Data: We automatically collect information about how you interact with our service, including IP address, browser type, pages visited, and timestamps.
Payment Information: Payment processing is handled by Paddle. We do not store your credit card details on our servers.
3. How We Use Your Information
We use your information to:
- Provide and maintain our certification tracking service
- Send automated expiry reminder notifications via email and SMS
- Generate compliance reports on your behalf
- Process payments and manage your subscription
- Communicate with you about service updates and support
- Improve our service and develop new features
4. Data Storage & Security
Application data is stored using Supabase and protected with controls that include:
- HTTPS/TLS encryption for data in transit
- Managed cloud encryption at rest
- Row-level security policies ensuring data isolation between companies
- Role-based application access
- Restricted administrative access for support and operations
Our current controls, subprocessors, and compliance scope are described on the Security & Trust page.
5. Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your information only with:
- Payment Processor: Paddle processes payments on our behalf
- Infrastructure: Vercel and Supabase host the website, application, and database
- Email/SMS Providers: Resend and Twilio deliver messages when those features are used
- Analytics: Google Analytics helps us understand website usage
- Legal Requirements: When required by law, subpoena, or government request
6. Your Rights
You have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and associated data
- Export: Download your data in CSV format from the Reports section
- Opt-out: Unsubscribe from marketing communications at any time
7. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt-out of the sale of personal information. We do not sell personal information.
8. Cookies
We use essential cookies to maintain authentication and Google Analytics cookies to understand website usage. We do not use advertising or retargeting cookies. See our Cookie Policy for details.
9. Data Retention
We retain your data for as long as your account is active. Upon account deletion, we remove your personal data and employee records within 30 days. Anonymized usage data may be retained for analytics purposes.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date.
11. Contact Us
If you have questions about this Privacy Policy or your data, contact us at:
Email: support@getcerttracker.com
Website: getcerttracker.com