Legal

Privacy Policy

Last updated: April 2026

This Privacy Policy explains how KeepCert ("we", "us") collects, uses, and protects information when you use keepcert.net and our related services. We aim to keep this straightforward: we only collect what we need to run the service, and we don't sell your data.

Information We Collect

  • Account details — your name, email address, and password.
  • Company information — company name, address, phone number, and team size.
  • Technician and credential data you add to your account, including uploaded credential documents (licenses, certifications, training records).
  • Billing information processed by our payment provider (we do not store full card numbers).
  • Basic usage and device information needed to keep the service secure and reliable.

How We Use Your Information

  • To provide the service — tracking credentials, generating verification links, and supporting your team.
  • To send expiration alerts and notifications by email and SMS.
  • To process subscription payments and manage billing.
  • To respond to support requests and improve the product.

Data Storage & Security

KeepCert's application and database are hosted on Supabase. Data is encrypted at rest and in transit (TLS). Uploaded credential files are stored in secure cloud storage with access controlled by row-level security rules tied to your account. Access to production systems is limited to authorized personnel.

Sharing

We do not sell your data. We share limited information only with the service providers required to operate KeepCert:

  • Stripe — to process subscription payments.
  • Twilio — to deliver SMS alerts.
  • Resend — to deliver email alerts and account notifications.
  • Supabase — to host the application database and file storage.

We may also disclose information if required by law or to protect the rights, safety, or property of KeepCert or our users.

Cookies

KeepCert uses minimal cookies — primarily session-based authentication cookies required to keep you signed in. We do not use advertising or cross-site tracking cookies.

SMS & Mobile Messaging

KeepCert may send SMS text messages to technicians and account administrators for credential expiration alerts, upload link delivery, and account notifications. By providing a mobile phone number and opting in to SMS notifications, you consent to receive these messages.

Message frequency varies based on your alert settings and credential expiration dates. Message and data rates may apply depending on your mobile carrier and plan.

You can opt out of SMS messages at any time by replying STOP to any message or by updating your notification preferences in your account settings. Reply HELP for support information.

We collect mobile phone numbers solely to deliver service-related notifications. We do not sell, rent, share, or trade mobile phone numbers or any information collected through SMS messaging with third parties for promotional or marketing purposes. Mobile phone numbers and SMS opt-in data will not be shared with any third parties for their own marketing use under any circumstances.

SMS messages are transmitted through our messaging provider, Twilio. Twilio processes message delivery only and does not use your phone number or message content for any purpose other than delivering your messages.

For questions about SMS messaging, contact support@keepcert.net.

Data Retention

We retain your data while your account is active. If you cancel or request deletion, we will delete your account data within a reasonable period, except where we are required to retain certain records (for example, billing history) by law.

Your Rights

You can access, correct, export, or delete the data associated with your account at any time by contacting us. We'll respond to verified requests promptly.

Changes to This Policy

We may update this policy from time to time. If we make material changes, we'll notify you by email or through the application.

Contact

Questions about this Privacy Policy or your data? Email support@keepcert.net or visit our contact page.