Privacy

What we collect

• What you enter in our forms: name, work email, company, role, vendor count and how you track certificates today.
• Certificates you upload for a free audit, and the information we read from them.
• A scrambled code made from your IP address, used only to stop abuse. We do not store the address itself, and the code cannot be turned back into it.
• Anonymous page statistics from Cloudflare Web Analytics, which uses no cookies.

Why

To run the audit you asked for, to contact you about it and about the pilot, and to keep the service safe from abuse. We do not sell your data or use it for advertising.

Who processes it for us

• Railway: application hosting.
• Supabase: database and encrypted file storage.
• Cloudflare: the security check on our forms (Turnstile) and page statistics.
• Google (Gemini API, paid tier): reads scanned certificates that our other methods cannot. Under Google's paid-service terms this data is not used to train their models. Every value read this way is checked by a person.

How long we keep it

Uploaded certificates and everything read from them are deleted 30 days after upload. We keep your contact details until you ask us to delete them.

Security

Uploads are virus-scanned, stored encrypted and seen only by us to prepare your report. We never write certificate contents to our logs.

Your choices

To see, correct or delete your data, email [email protected]. We reply within 5 business days.