Privacy Policy

• Account information: your name, email address and password (stored only as a salted hash).
• Organization information: which organizations you belong to and your role in each.
• Certificate data entered by organizations: events, signatories, and participant details such as name, salutation, gender, date of birth, assessment and issue dates, level, grade and category.
• Uploaded images, such as certificate backgrounds and signature images.
• Certificate history: each time a certificate is generated we keep a record with a unique code and a copy of the certificate details as issued. Anyone with the code (for example from the QR code on the certificate) can see the information the organization chose to show on the verification page, such as the participant's name and the date of issue.
• Technical data: session cookies, IP address, browser type and server logs.

• To provide the service: sign you in, show your organization's data and generate certificates.
• To keep the service secure, prevent abuse and diagnose problems.
• To send essential messages such as email verification and password reset.

We do not sell personal information and we do not use it for advertising.

The organization that enters participant details decides why and how they are used, and is responsible for having a lawful basis, such as consent from participants or their guardians. Edspiroid processes this data on the organization's behalf to provide Certi. Data belonging to one organization is not visible to other organizations.

We share information only with service providers that help us run Certi (for example hosting, email delivery and monitoring), under confidentiality obligations, or when the law requires it. System administrators can see accounts and organization membership in order to manage the service.

We keep information while your account or organization is active. Organizations can delete events and participants at any time, and administrators can delete accounts. Backups and logs are removed on a rolling schedule.

We use access controls, encrypted connections and hashed passwords. No system is perfectly secure, so please choose a strong password and keep it private.

You can ask to access, correct or delete your personal information. Participants should contact the organization that issued their certificate first. You can also contact us at support@edspiroid.com.

Certi uses only the cookies needed to keep you signed in. See our Cookie Policy for details.

We may update this policy and will change the date above when we do. Questions? Email support@edspiroid.com.