Privacy Policy
Last updated: 1 December 2025
What we collect
When you look up a certificate, we process the certificate ID you enter and, for security purposes, standard technical information such as your IP address and browser type. We don't ask for or require your name, date of birth, or contact details to run a lookup.
How we use it
Lookup data is used to return a verification result and to protect the service against abuse, such as automated scraping or excessive repeated requests. We don't sell certificate lookup data, and we don't use it for advertising.
Data from partner institutions
Certificate records themselves (holder name, course, issue date, and status) are owned and maintained by the partner institution that issued the credential. Certyvault queries that record at the time of a lookup rather than storing a separate copy of each partner's full registry.
Data retention
Lookups aren't linked to a personal account. Technical logs used for abuse prevention and rate-limiting are retained only as long as needed for that purpose and are then deleted.
Contact form data
If you reach out through our contact page, we use the name, email address, and message you provide solely to respond to your inquiry.
Your rights
If you believe a certificate record associated with you is inaccurate, contact the issuing partner institution directly, or reach out to us and we'll help route the request.
Questions
For questions about this policy, contact us at privacy@certyvault.com.