Privacy Policy

Certifik8, operated by Certifik8, is committed to protecting the privacy of its users. This policy describes the data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR).

We collect the following data as part of the platform's operation:

• Identification data: email address, username, password (hashed with Argon2)
• Ownership data: digital passports, transfer history, proofs of ownership
• Technical data: IP address (for security and rate limiting), connection logs
• Merchant data: company name, website, Shopify domain, logo (for merchants only)

• Creating and managing your user account
• Issuing and managing digital product passports
• Secure ownership transfers between users
• Protection against fraud and theft (reports, anti brute-force)
• Email communications (transfers, activations, password resets)

Your data is stored securely:

• Hosting: servers located in Europe (OVH, France)
• Encryption: HTTPS connections (TLS), passwords hashed with Argon2, secure tokens (256-bit)
• Access: restricted to authorized administrators only

Your data is retained as long as your account is active. Upon account deletion, your personal data is removed within 30 days. Anonymized passport history may be retained to ensure product traceability.

Under the GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate data
• Right to erasure: request deletion of your data
• Right to portability: receive your data in a structured format
• Right to object: object to the processing of your data

Certifik8 only uses essential technical cookies required for the service (authentication, theme and language preferences). We do not use any advertising tracking cookies or third-party analytics tools.

For any questions regarding your personal data, contact us at contact@certifik8.app.