Privacy notice

CertLedger collects contact inquiries, client account details, vendor contacts, certificate documents, policy dates, service notes, and activity records to provide administrative document tracking.

How information is used

We use these records to run the service, send authorized renewal requests and account messages, answer inquiries, maintain security logs, and support customer exports and deletion requests. Documents are stored in a private Cloudflare R2 bucket; account records are stored in Cloudflare D1. Authorized team members and the relevant client can access records according to their role.

Service providers

Cloudflare hosts the application and storage. If enabled, Resend sends email and Stripe handles subscription checkout. Payment details are entered on Stripe hosted pages, not stored by CertLedger. These integrations remain disabled until configured.

Retention and deletion

A proposed retention schedule is in the customer agreement and operational runbook. Uploaded files can be deleted from the portal. Tenant data can be exported and vendor records erased by an authorized administrator. Backups may retain data for a limited recovery period. Final periods must be agreed with the client and reviewed by counsel before production.

Contact and rights

For access, export, correction, or deletion, contact [LEGAL CONTACT EMAIL]. The identity of the data controller, business address, jurisdictional rights, and retention terms require legal review.

This draft is for staging review only. It is not a finalized legal policy.