Privacy Policy

1. Who we are

Creadefy is a credential platform: organisations design templates, issue PNG certificates and badges, and let others verify them. The legal entity is HelpingGeeks, India. Contact us by email. The registered address of HelpingGeeks is a legal address only, not a staffed office.

When an organisation uses Creadefy to issue credentials, that organisation is typically the controller of recipient and credential data. We act as their processor under our DPA. For accounts, billing, security, and our own site analytics, we act as an independent controller.

2. Scope

This policy covers visitors to creadefy.com, people who create accounts, organisation members, and people whose details appear on credentials issued through Creadefy.

3. Data we collect

• Account data: name, email, hashed password or OAuth identifiers (Google or GitHub), profile image, role, and login times.
• Organisation data: organisation name, members, roles, and settings.
• Credential data: templates, events, recipient name and email, PNG files, unique IDs, QR/verification URLs, and verification logs.
• Billing data: plan, GST details you provide, and Razorpay payment identifiers. We do not store full card numbers.
• Support and feedback: messages, attachments, and Intercom chat if you use Messenger.
• Technical data: IP address, browser/device, logs, reCAPTCHA signals, and Sentry error reports (Session Replay may run on the dashboard).

4. How we use data

We use data to run Creadefy: accounts, issuance, storage, email delivery, public verification, payments, support, security, and product improvement. Legal bases include performance of a contract, legitimate interests (security and improvement), legal obligations (tax), and consent where the law requires it for certain emails.

5. How we share data

We do not sell personal data. We share it with the providers on our Subprocessor List, with other users in your organisation, with anyone who opens a public verification link the issuer created, with advisers or authorities when required, and if the business is sold. Optional Unsplash search sends only the search terms you type.

6. Public verification

Issued credentials can be verified on a public page. Only include information you are willing to make verifiable. Issuers are responsible for what they put on credentials.

7. Cookie Policy

Necessary cookies handle sign-in and security. We also use Google Analytics on the marketing site and Intercom for support chat. Details, names, and durations are in the Cookie Policy.

8. International transfers

We are based in India. Credential files are stored in India. Other vendors may process data in the United States or elsewhere. Where GDPR requires a transfer tool, we rely on Standard Contractual Clauses or equivalent vendor terms. See the DPA.

9. Retention

Account data is kept while the account is active and for a reasonable period after. Credential data is kept so verification can continue, unless the issuer deletes it and law allows deletion. Billing records are kept as required for tax. Backups rotate on vendor cycles.

10. Your rights

You can update account details in the dashboard. Depending on where you live, you may request access, correction, deletion, export, restriction, or objection. You can control cookies in your browser. Certificate recipients should usually contact the issuing organisation first. You can also email us. We may refuse a request where law or security requires us to keep records.

In India, rights under the Digital Personal Data Protection Act, 2023 apply when that law is in force for our processing. In the EEA/UK you may complain to a supervisory authority.

11. Children

Creadefy is not directed at children under 16. We do not knowingly collect their data except where an organisation (for example a school) is the controller and has a lawful basis. Contact us if you believe we hold a child’s data unlawfully.

12. Changes

We may update this policy. The date at the top will change. Material changes may also be announced on the Service or by email.

13. Contact