Back to home
Privacy

Privacy Policy

Last updated: October 2026

This is a plain-English version of our privacy policy. We don't hide behind legalese. If something here is unclear, email us and we'll explain it.

1. Who we are

ProofMyCert is an independent project that helps professionals gather and verify their online certificates in a single public profile. When we say "we" in this policy, we mean the people who build and operate ProofMyCert.

2. What data we collect

We collect the minimum amount of data needed to run the service:

  • Account data: your email, username, and password (hashed, never stored in plain text).
  • Profile data: your name, bio, avatar, country, availability status, and any certificates you add.
  • Certificate URLs: the links you submit so we can verify them.
  • Usage data: anonymous, aggregated analytics about how the platform is used (page views, feature interactions). We hash IP addresses and never store them in plain text.
  • Technical data: browser type, user agent, and timestamps for security purposes.

3. What we don't collect

  • We don't use tracking pixels or third-party analytics that follow you across the web. We use self-hosted analytics only.
  • We don't collect financial information. Payment processing (when available) is handled by a third-party provider; we never see your card details.
  • We don't store your browsing history outside our platform.
  • We don't collect biometric or sensitive personal data.

4. How we use your data

Your data is used to:

  • Show your public profile to people who visit your link.
  • Verify the certificates you submit.
  • Let recruiters (if you allow it) discover your profile.
  • Send you transactional emails (account verification, notifications about your profile).
  • Improve the platform based on aggregated, anonymous usage patterns.

We never sell your data. We never share it with advertisers. We never use it to train AI models.

5. Who can see your data

  • Your public profile (name, bio, avatar, availability, verified certificates) is visible to anyone with your link.
  • Your email is only shown to recruiters who have unlocked your profile on our platform.
  • Our internal team can access your data to provide support, resolve disputes, or investigate fraud.
  • Legal authorities may access your data if required by law. We'll notify you unless legally prohibited.

6. Your rights

You have full control over your data:

  • Access: you can see everything we know about you in your dashboard.
  • Export: you can request a full copy of your data at any time.
  • Delete: you can delete your account and all your data instantly.
  • Correct: you can edit your profile information whenever you want.
  • Object: you can opt out of non-essential communications at any time.

7. Data retention

When you delete your account, we permanently delete your data within 30 days. Backups containing your data are automatically purged within 90 days. We keep aggregated, anonymized statistics indefinitely, but they can't be traced back to you.

8. Security

We use industry-standard security practices: HTTPS everywhere, hashed passwords, rate limiting on sensitive endpoints, and encrypted backups. We don't claim to be perfect, but we take security seriously and fix issues quickly when they're reported.

9. Cookies

We use essential cookies only: session cookies to keep you logged in, and CSRF tokens for form security. We don't use marketing cookies, tracking cookies, or third-party cookies.

10. Changes to this policy

If we change this policy significantly, we'll email you and post a notice on the platform. The "last updated" date at the top will always reflect the current version.

11. Contact

Questions about privacy? Email us at hola@proofmycert.com. We respond to every message.

This policy applies to all users of ProofMyCert, including those in the European Union (GDPR), California (CCPA), and other jurisdictions with data protection laws.