Last updated: September 2026
We collect account information (name, email), organization data, certificate content you create, and usage analytics. Payment information is handled by Razorpay/Stripe and never stored on our servers.
We use your data to provide and improve CertKing, process certificate issuance and delivery, send service communications, and ensure platform security.
Certificate recipient names and emails are stored in your organization's workspace. Public certificate data (name, issue date, status) is accessible via the verification page. You control visibility settings.
Data is stored in Google Cloud (Firestore/Storage) with encryption at rest. We use TLS for all transit. Access is controlled via authenticated API calls and role-based permissions.
We do not sell or share your personal data with third parties except as required by law, or with service providers who assist in operating CertKing (hosting, email delivery, payments).
Account data is retained while your account is active. Upon deletion, we remove your data within 30 days except where retention is required by law.
You can export your data, delete your account, and request correction of inaccurate information. Under GDPR and India's DPDP Act, you have the right to access, rectify, and erase your data.
CertKing uses essential cookies for authentication and session management. Analytics cookies are optional and require your consent.
Privacy inquiries: privacy@certking.dpdns.org