1. Introduction

Certyze ("we", "our", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our certification body management platform ("Service").

2. Information We Collect

We collect the following types of information:

• Account Information — Name, email address, phone number, company name, and role
• Certification Data — Audit records, certificates, competency records, and related documents
• Usage Data — Login activity, feature usage, and browser information
• Payment Information — Invoice and billing details (processed securely through our payment providers)

3. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Process certifications, audits, and related workflows
• Generate invoices and manage billing
• Send important notifications about your account and audits
• Improve and develop new features
• Ensure security and prevent unauthorized access

4. Data Storage and Security

Your data is stored securely using industry-standard encryption and security measures. We use Amazon Web Services (AWS) for data storage and implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

5. Data Sharing

We do not sell your personal data. We may share your information with:

• Your Certification Body — Data related to your audits and certifications is shared with the relevant CB admin
• Service Providers — Trusted third-party services that help us operate the platform (hosting, email, payment processing)
• Legal Requirements — When required by law or to protect our rights

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Export your data in a portable format
• Withdraw consent for optional data processing

7. Cookies

We use essential cookies for authentication and session management. These are necessary for the Service to function and cannot be disabled. We do not use tracking or advertising cookies.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Certification records may be retained longer to meet accreditation and legal requirements. You may request deletion of your account and associated data by contacting us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or your personal data, contact us at support@certyze.com.