Privacy policy

Last updated: October 22, 2026

What we collect

Account information you provide (name, company, email), billing details processed by our payment provider (Stripe — we never store full card numbers), vendor contact details you enter, and the certificate files you or your vendors upload, along with the data we extract from them.

How we use it

To provide the service: storing and reading certificates, checking them against your requirements, and sending the emails you configure (verification, certificate requests and reminders). Certificate files are processed by our AI provider solely to extract their contents. Files uploaded to the free public ACORD 25 checker are processed the same way and are not stored.

Sharing

We share data only with service providers that run Certy (hosting, email delivery, payments, AI processing) and when required by law. We don't sell personal information.

Retention and deletion

Deleting a vendor or certificate removes its files. You can close your account at any time by contacting us; we delete account data within a reasonable period, except where we must retain records by law.

Contact

Questions about privacy: [email protected]