Privacy policy

Template - adapt to your actual data processing register before going to production (GDPR).

Data collected

• Account: email address, password (hashed), preferred language.
• Certificates: title, recipient name, free text, optional logo — provided by you.
• Subscription: Stripe customer id (no card data is ever stored on our servers).
• Newsletter: email address, confirmation status.

Purpose

This data is used to provide the service (creating and exporting certificates), manage your account and subscription, and contact you if you subscribed to the newsletter.

Retention

Account data is kept as long as the account is active. You may request deletion of your account and data at any time.

Your rights

Under GDPR, you have the right to access, rectify, erase and port your data. To exercise it, use our contact page.

Security

Passwords are hashed (Argon2id/bcrypt), traffic is encrypted (HTTPS), and access to data is strictly limited to your own account.