Privacy Policy
Who we are
CertProve ("we", "us", "our") provides the CertProve platform for aerospace certification. We are the controller of the personal information described here. For anything in this policy, including to exercise your rights, contact us at info@certprove.com.
Information we collect
We collect only what we need to provide and secure the platform:
- Account information you provide directly, such as your name, email address, company and role, when you request access or create an account.
- Usage and diagnostic information, such as pages visited, features used and error reports, used to keep the platform reliable and to improve it.
We do not collect special-category data, and we do not buy personal information about you from third parties.
Your engineering data is yours
The requirements, system models, analyses, tests and certification artefacts you create are your engineering data. We process it solely to provide the service to you. We never sell it, never use it to train models, and never use it to improve the product for anyone else. Access is restricted to your account and the team members you authorise.
How we use information, and our legal bases
We use your information to operate and improve the platform, to communicate with you about your account and access, to provide support, to keep the service secure, and to meet our legal obligations. Where the UK GDPR or EU GDPR applies, we rely on:
- Performance of a contract, to give you the service you signed up for.
- Legitimate interests, to secure, maintain and improve the platform, balanced against your rights.
- Consent, for optional analytics, which you can give or decline and withdraw at any time.
- Legal obligation, where the law requires us to keep or disclose information.
Cookies
We use a single strictly-necessary cookie to keep you signed in and secure your session; it is exempt from consent and the platform cannot work without it. We do not use advertising or third-party tracking cookies. If we introduce optional analytics, we ask for your consent first, and declining removes no functionality.
Sharing and sub-processors
We do not sell your information. We share it only with service providers who help us run the platform, under contract and only as needed:
- Google Cloud Platform, for hosting and database services.
- Our email delivery provider, to send account and service messages.
We may also disclose information where we are required to by law.
International transfers
Where information is processed outside your region, we rely on appropriate safeguards, such as standard contractual clauses, to protect it.
How long we keep it
We keep your information for as long as your account is active. After your account is closed we delete or anonymise your personal information within 90 days, unless we are required to keep it for legal reasons. You can export your engineering data from the platform at any time.
Data security
We apply appropriate technical and organisational measures to protect your information, including encryption in transit, access controls scoped to your account and team, protected sessions, rate-limited authentication and optional multi-factor authentication.
Your rights
You can access, correct, export or delete your personal information, object to or restrict processing, and withdraw consent, at any time. Contact info@certprove.com and we will respond within one month. If you are in the UK or EU, you also have the right to complain to your data protection authority.
Changes to this policy
We may update this policy from time to time. We will post any changes here and update the date above, and we will notify you of significant changes.
Contact
For any privacy question, contact us at info@certprove.com.