Legal

Privacy Policy

Last updated: 1 December 2025

What we collect

When you look up a certificate, we process the certificate ID you enter and, for security purposes, standard technical information such as your IP address and browser type. We don't ask for or require your name, date of birth, or contact details to run a lookup.

How we use it

Lookup data is used to return a verification result and to protect the service against abuse, such as automated scraping or excessive repeated requests. We don't sell certificate lookup data, and we don't use it for advertising.

Data from partner institutions

Certificate records themselves (holder name, course, issue date, and status) are owned and maintained by the partner institution that issued the credential. Certyvault queries that record at the time of a lookup rather than storing a separate copy of each partner's full registry.

Data retention

Lookups aren't linked to a personal account. Technical logs used for abuse prevention and rate-limiting are retained only as long as needed for that purpose and are then deleted.

Contact form data

If you reach out through our contact page, we use the name, email address, and message you provide solely to respond to your inquiry.

Your rights

If you believe a certificate record associated with you is inaccurate, contact the issuing partner institution directly, or reach out to us and we'll help route the request.

Questions

For questions about this policy, contact us at privacy@certyvault.com.