Privacy Policy

CredKeep ("we," "us," or "our") operates the credential and certification compliance tracking platform available at https://credkeep-inky.vercel.app (the "Service"). This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service.

By using CredKeep, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

Account & Personal Information

When you create an account, we collect your name, email address, and password. If you manage employees through CredKeep, you may also provide employee names, email addresses, phone numbers, and job titles.

Credential & Certification Data

We store details about professional credentials, licenses, and certifications — including license numbers, issuing authorities, expiration dates, and renewal requirements. You may also upload supporting documents such as PDFs or images of licenses and certificates.

Payment Information

Paid subscriptions are processed through Lemon Squeezy. We do not directly collect, store, or have access to your full credit card number or payment credentials. Lemon Squeezy handles all payment processing and is PCI-compliant. We receive only confirmation of your subscription status and basic transaction details (plan type, billing dates).

Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, browser type, device information, IP address, and referring URLs. This data helps us understand how CredKeep is used and where we can improve.

Cookies & Similar Technologies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze site traffic. You can control cookie settings through your browser, though disabling cookies may affect the functionality of the Service.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the CredKeep platform
• Track credential expirations and send automated renewal reminders via email
• Process subscription payments and manage your account
• Communicate with you about your account, updates, and support requests
• Improve and develop new features based on usage patterns
• Detect and prevent fraud, abuse, or security issues
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your credential data for advertising purposes.

3. Data Storage & Security

Your data is stored using industry-standard cloud infrastructure:

• Database: All structured data (account details, credential records) is stored in a PostgreSQL database hosted by Supabase on servers located in the United States. Data is encrypted at rest and in transit.
• Document Storage: Uploaded files (PDFs, images of licenses and certificates) are stored in Cloudflare R2 object storage with encryption at rest.
• Access Controls: We use row-level security policies to ensure that your data is only accessible to authorized users within your organization.

While we implement commercially reasonable security measures to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

4. Third-Party Services

We rely on trusted third-party providers to operate the Service. Each provider has its own privacy policy governing how they handle data:

• Vercel — Application hosting and deployment
• Supabase — Database hosting, authentication, and backend services
• Cloudflare R2 — Secure file and document storage
• Resend — Transactional email delivery (renewal reminders, account notifications)
• Lemon Squeezy — Subscription billing and payment processing
• Google Analytics — Website traffic and usage analytics

We only share the minimum information necessary for each service to function. We do not share your credential data with any third party for marketing or advertising purposes.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will remove your personal data and credential records within 30 days, except where we are required to retain data for legal, accounting, or compliance purposes.

Uploaded documents will be permanently deleted from Cloudflare R2 storage within 30 days of account deletion. Anonymized or aggregated data that cannot identify you may be retained indefinitely for analytics and product improvement.

6. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct any inaccurate or incomplete information.
• Deletion: Request that we delete your account and all associated data.
• Export: Request a portable copy of your data in a standard format (CSV or JSON).
• Opt Out: Unsubscribe from non-essential emails at any time using the unsubscribe link in our emails or by contacting us directly.

To exercise any of these rights, contact us at babu232442@gmail.com. We will respond to your request within 30 days.

7. Children's Privacy

CredKeep is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at babu232442@gmail.com.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by updating the "Effective Date" at the top of this page and, where appropriate, by sending an email notification. We encourage you to review this policy periodically.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us: