Privacy Policy

Certivos operates certivos.com, a public registry of compound verification certificates. Verifying a certificate does not require an account, and we collect as little information as the service needs to run. This policy explains what that information is and how it is handled.

1. Information we collect

Certificate lookups

When you search for a certificate ID, open a verification page, scan a certificate QR code or download a certificate PDF, the request is handled by our servers. We do not ask for, and do not record, your name or contact details to do this.

Server logs

Like most websites, our web server automatically records technical details of each request: IP address, date and time, the page or file requested, the referring page, and your browser and operating system as reported by your browser. We use these logs only to operate, secure and troubleshoot the service. They are retained for approximately 30 days and then deleted.

Administrative access

The Certivos administration area is used only by authorised Certivos staff. Signing in sets a session cookie (see section 3). Failed sign-in attempts are counted by IP address, in memory only, to protect the account from password guessing.

Partner inquiries

If you submit the inquiry form on our partners page, we collect the details you enter (company name, website, your name, email address and, if you provide them, phone number, plan interest, expected volume and message) together with the date, time and IP address of the submission. We use this only to respond to your inquiry and discuss our services with you, and we send you one confirmation email. Inquiry details are passed to our team by email and by a private Telegram notification. They are kept for as long as needed to handle the inquiry and any resulting business relationship; you can ask us to delete them at any time (see section 6).

Purchases and customer accounts

When you buy a Certivos plan, payment is handled by Stripe on its own checkout page. Stripe collects your card details; Certivos does not receive or store them. From Stripe we receive your company name, email address, billing country or address, the plan purchased and the payment status, together with Stripe’s customer and subscription references. We use this to set up and manage your account, deliver the service, send service and billing emails, and keep business and tax records for as long as the law requires.

Certificate of analysis submissions

If you submit a certificate of analysis through certivos.com/submit, we collect your company name, email address, the compound, stated dosage and batch number you enter, the file you upload, and the date, time and IP address of the submission. We use these to verify and publish your certificate and to contact you about it. The submission is passed to our team by email (with the file attached) and by a private Telegram notification.

Correspondence

If you email us, we receive your email address and whatever you include in your message, and use it only to respond to you.

Certificate content

Certificates record analytical data about a product batch and the company it was issued to. They are not designed to contain personal information about individuals.

2. How we use information

We use the information described above to:

• deliver certificate verification pages, PDFs and badges;
• keep the service secure, detect abuse and diagnose faults;
• respond to enquiries.

We do not sell, rent or trade personal information. We do not use it for advertising, and we do not build profiles of visitors.

3. Cookies

The public pages of certivos.com set no cookies. We use two session cookies, each strictly necessary for signing in: one for the customer portal, set when a customer signs in with an emailed link and expiring after 7 days or at sign-out, and one for the administration area, which expires after 12 hours or at sign-out. Both are marked secure and HTTP-only. Because they are set only for people who sign in and are essential to the service, no cookie banner is shown to visitors.

4. Third parties

We use Umami, a privacy-focused analytics tool, to understand how visitors use our site. Umami does not use cookies, does not collect personal information, and does not track visitors across websites. All data is aggregated and anonymous. No individual visitor data is stored or shared with third parties.

The Umami script is loaded from our own analytics server at analytics.victoriarealestate.ca; the customer portal is not included in analytics. Fonts, other scripts and images are served from certivos.com. We do not use advertising or social media tracking.

Payments are processed by Stripe, Inc. and its affiliates, which handle the payment information you give them under their own privacy policy; see stripe.com/privacy. Leaving certivos.com for Stripe’s checkout page happens only when you choose to pay.

The site runs on servers operated by our hosting provider, which processes server traffic on our behalf and under our instructions.

We may disclose information where required by law or to protect the security of the service.

5. International users

Certivos is available worldwide. Our servers may be located in a different country from yours, and information is processed where those servers are located.

If you are in the European Economic Area, the United Kingdom or Switzerland, we process server log data on the basis of our legitimate interest in operating and securing the service, and correspondence on the basis of responding to your request. Where information is transferred outside your region, we rely on appropriate safeguards recognised by applicable law.

6. Your rights

Depending on where you live, you may have the right to access, correct or delete personal information we hold about you, to object to or restrict its processing, and to receive it in a portable format. To make a request, contact us at the address below. You may also lodge a complaint with the data protection authority in your country.

7. Security

All traffic to certivos.com is encrypted with HTTPS. Access to administrative functions and server logs is restricted to authorised staff.

8. Children

The service is intended for professional and research use and is not directed to children. We do not knowingly collect information from anyone under 16.

9. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised.

10. Contact

Questions or requests about privacy can be sent to info@certivos.com.