1. Information We Collect
CertiGen collects necessary information to facilitate digital certificate generation, bulk email delivery, and public verification services:
- Account Credentials: Organization name, administrator email address, password hash, and billing details.
- Event Roster Data: Recipient full names, email addresses, certificate titles, and issue dates uploaded by account administrators.
- Technical Logs: IP address, browser headers, and verification request timestamps for anti-abuse and security auditing.
2. How We Use Your Information
We process recipient data strictly to execute your requested certificate generation workflows. We never sell, rent, or monetize recipient roster lists to third-party advertisers or data brokers.
3. Cryptographic Storage & Security Measures
All sensitive information transmitted to and from CertiGen is encrypted in transit using Transport Layer Security (TLS 1.3). Certificate verification hashes are computed using SHA-256 standards, preventing unauthorized alteration or tamper attempts.
4. GDPR & Bahrain PDPL Compliance
CertiGen adheres strictly to the EU General Data Protection Regulation (GDPR) and the Kingdom of Bahrain Law No. 30 of 2018 (Personal Data Protection Law / PDPL). Users retain full control over recipient records stored within their organization dashboard.
5. Cookie & Analytics Policy
We use essential session cookies to keep administrators securely authenticated and maintain active user sessions. No third-party tracking or advertising cookies are utilized across our portal.
6. Your Data Rights & Contact Information
You have the right to request access to, correction of, or permanent deletion of your personal data at any time. For data privacy inquiries or formal compliance requests, please email our Data Protection Officer at dpo@certigen.io.