Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Email address and contact information
• Domain names for SSL monitoring
• Billing and payment information (processed by Stripe)
• Technical stack information for service optimization
• Support communications and correspondence

2. How We Use Your Information

We use the information we collect to:

• Monitor your SSL certificates and send expiration alerts
• Process payments and manage subscriptions
• Provide customer support and respond to inquiries
• Send service updates and important notifications
• Generate compliance reports for your account
• Improve and optimize our services

3. Information Sharing

We do not sell, trade, or rent your personal information. We may share your information with:

• Service Providers: Stripe for payment processing, Resend for email delivery, Supabase for data storage
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger or acquisition
• With Your Consent: When you authorize us to share information

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption in transit and at rest, secure API keys, and regular security assessments. However, no method of transmission over the Internet is 100% secure.

5. SSL Certificate Monitoring

To provide our monitoring services, we periodically check the SSL certificates of domains you've registered. These checks are performed using industry-standard protocols and do not access any content on your websites. Certificate data collected includes expiration dates, issuer information, and certificate validity status.

6. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. When you cancel your subscription, we retain basic account information for tax and legal compliance purposes but delete monitoring data within 90 days.

7. Your Rights

You have the right to:

• Access and receive a copy of your personal information
• Correct inaccurate or incomplete information
• Request deletion of your personal information
• Object to or restrict processing of your information
• Withdraw consent where processing is based on consent
• Data portability (receive your data in a structured format)

8. Cookies and Tracking

We use essential cookies to maintain your session and preferences. We do not use advertising or tracking cookies. Third-party services like Stripe may set their own cookies subject to their privacy policies.

9. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 18, we will delete that information promptly.

10. California Privacy Rights

California residents have additional rights under the CCPA, including the right to know what personal information is collected, used, shared, or sold. We do not sell personal information. For CCPA requests, contact us using the information below.

11. International Data Transfers

Your information may be transferred to and processed in the United States. By using our services, you consent to the transfer of information to countries outside your country of residence.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through our service. Your continued use after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions or to exercise your rights, contact us at:
Email: support@certprotector.com
Phone: (248) 793-5067

Data Protection Officer:
Email: privacy@certprotector.com