Privacy Policy

We collect various types of information to provide and improve our Service:

Personal Data: Name, email address, phone number, and billing information when you register. User Content: Data you upload for certificate generation, such as recipient names, emails, and course details. Usage Data: Information on how you access the Service, including IP address, browser type, device information, and pages visited.

We use your data for the following purposes:

• Service Delivery: To generate certificates, process payments, and send emails as requested by you.
• Improvement: To analyze usage patterns and improve platform performance.
• Communication: To send you account updates, invoices, security alerts, and support responses.
• Security: To detect and prevent fraud, abuse, or security incidents.

As a platform user, you act as the "Data Controller" for the recipient data you upload (e.g., student lists). CertTrigger acts as the "Data Processor". We process this data solely on your instructions to generate and deliver certificates. We do not use your recipient data for our own marketing purposes.

We do not sell your personal data. We may share data with:

• Service Providers: Trusted third parties who assist us in operating our website, processing payments (e.g., Stripe), or delivering emails (e.g., SMTP providers).
• Legal Compliance: If required by law, subpoena, or legal process.
• Business Transfers: In connection with a merger, sale of assets, or acquisition.

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. You can instruct your browser to refuse all cookies, but some portions of our Service may not function properly without them.

We retain your personal data and User Content only for as long as is necessary for the purposes set out in this Privacy Policy. You may delete your account and associated data at any time via the dashboard settings.

We implement industry-standard security measures, including SSL encryption, secure servers, and access controls, to protect your data. However, mere transmission of information over the Internet is never 100% secure, and we cannot guarantee absolute security.

Depending on your location (e.g., GDPR, CCPA), you may have the right to:

• Access copies of your personal data.
• Rectify inaccurate information.
• Request deletion of your data ("Right to be Forgotten").
• Restrict or object to processing. To exercise these rights, please contact us at privacy@certtrigger.com.

Your information may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ. We ensure appropriate safeguards are up in place for such transfers.

CertTrigger offers optional sign-in with Google and Microsoft. When you use one of these, we receive only the basic profile information needed to create and secure your account — your name, email address, and profile picture. We request the minimum permissions (scopes) required to sign you in and never request access to your emails, files, contacts, or other private data. Signing in never requests permission to send email. The Google gmail.send and Microsoft Mail.Send permissions are requested only if you separately connect a sending mailbox (a paid feature) so certificates are sent from your own address — they are used solely to send your certificates and can be revoked at any time.

Google: CertTrigger's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not sell it or transfer it to third parties except as necessary to provide the service, to comply with the law, or as part of a merger or acquisition. Google's own handling of your data is described in the Google Privacy Policy. You can review or revoke CertTrigger's access at any time from your Google Account permissions.

Microsoft: When you sign in with Microsoft, that sign-in is also governed by the Microsoft Privacy Statement and the Microsoft Services Agreement. We receive only the basic profile information needed to authenticate you, and you can revoke access from your Microsoft account privacy settings.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

If you have any questions about this Privacy Policy, please contact us:

CertTrigger Privacy Team Email: privacy@certtrigger.com