Privacy Policy

Last updated: October 9, 2026

The short version: We collect only what we need to track your team’s Credentials. We don’t collect Social Security numbers. Credential images are used only to provide the service. We don’t sell your data, and our website has no third-party trackers.

1. Who we are

This policy explains how Aaron Rogers (“CertsDue,” “we”) handles personal information on certsdue.com and in the CertsDue service. Questions? Email hello@certsdue.com.

2. What we collect

From Managers and Founding Members

Your name, work email, company name, and account settings.
Messages you send us.
Payment information is collected and stored by Stripe. We receive limited details such as your name, email, billing address, the last four digits of your card, and payment status.

About Staff Members

Managers add this information, or Staff Members send it through their personal upload link:

Name and any contact details the Manager chooses to add, such as an email address.
Credential images (photos or PDFs) and the details read from them: the Credential type and expiry date.

A Credential image may show other details printed on the card, such as a photo or license number. We store the image as uploaded so you can see it, but we read only the Credential type and expiry date from it.

Collected automatically

Basic technical information needed to run and secure the service, such as IP address, browser type, and server logs.
On our website we may use Cloudflare Web Analytics to count visits. It doesn’t use cookies and doesn’t track you across other sites.

3. What we don’t collect

We don’t ask for or store Social Security numbers. Please don’t upload documents that show one; if it happens, tell us and we’ll help you delete it. We don’t store full payment card numbers (Stripe handles payments).

4. How we use information

To provide the service: store your roster, read Credential images, show statuses, send reminder emails, build reports, and let Staff Members upload renewed cards.
To bill you and manage your subscription.
To answer your questions and support requests.
To keep the service secure, prevent abuse, and fix problems.
To send service emails about your account, billing, and launch. We send marketing emails only where the law allows, and each one includes an unsubscribe link.

Credential images are used only to provide the service to you. We don’t use them for advertising, we don’t sell them, and we don’t use them to train AI models.

5. AI card reading

To read a Credential image, we send it to an AI provider that processes it on our behalf and returns the Credential type and expiry date. We use providers whose terms don’t allow them to train their models on our customers’ data.

6. Who we share information with

We don’t sell personal information or share it for advertising. We share it only with:

Service providers that help us run CertsDue, such as hosting and database (Cloudflare, Supabase), payments (Stripe), email delivery, and AI card reading (Anthropic). They may use it only to provide their services to us.
Authorities, when the law requires it or to protect people’s rights and safety.
A buyer or successor if the business is sold or reorganized, who must keep protecting it as this policy describes.

7. Security

Data is encrypted in transit and at rest. We limit access to the people and systems that need it, and each company’s data is visible only to its own Managers. No system is perfectly secure; if a breach affects your personal information, we’ll notify you as the law requires.

8. How long we keep it

We keep your data while your account is active. If you close your account, we delete your roster, Credential images, and reports within 30 days, except records we must keep for legal, tax, or accounting reasons, such as payment records.

9. Your choices and rights

You can ask to access, correct, export, or delete your information by emailing hello@certsdue.com. Depending on where you live (for example, California and other states with privacy laws), you may have additional rights. We won’t treat you differently for using them.

Staff Members: your employer decides which Credentials are tracked in CertsDue. For requests about your information, please contact your employer first. You can also email us, and we’ll work with them to respond.

10. Children

CertsDue is a business tool and isn’t directed to children under 13. We don’t knowingly collect their personal information.

11. Changes to this policy

We’ll post updates here and change the date at the top. For significant changes, we’ll email account holders before they take effect.

12. Contact

Aaron Rogers, a sole proprietor in Illinois. Email: hello@certsdue.com.