Privacy Policy
Certiva is built on a foundation of privacy. This policy explains what information we collect, how we use it, and the rights you have over your data.
Last updated: June 2026
Information We Collect
Certiva collects information that is necessary to verify your identity, business, or merchant status and to provide you with a verified credential. We collect only what we need — nothing more.
Account Information
When you create a Certiva account, we collect:
- Full name
- Email address
- Password (stored as a one-way hash — never in plain text)
- Phone number
- Country of residence
- Date of birth
Application Information
When you apply for a credential, we collect:
- The personal or business information required for the specific credential type (IRN, BRN, or TMV)
- Uploaded identity documents (passport, driver's license, national ID, or equivalent)
- A selfie image captured at the time of application
- Business registration documents (for BRN and TMV)
- Bank ownership documentation (for TMV only)
- Business address documentation (for TMV only)
Automatically Collected Information
When you use Certiva, we automatically collect:
- IP address
- Browser type and version
- Device type
- Pages visited and time spent on each page
- Referring website
Certiva does not collect payment card information directly. All payments are processed by a third-party payment processor. We receive only a payment confirmation — never your card details.
How We Use Your Information
We use the information we collect for the following purposes only:
- To verify your identity, business, or merchant status as part of your credential application
- To issue your IRN, BRN, or TMV credential upon successful verification
- To communicate with you about your application status, credential issuance, and account activity
- To maintain the public verification registry that allows others to verify your credential number
- To detect and prevent fraud, abuse, and unauthorized use of the Certiva platform
- To improve the Certiva platform and user experience
- To comply with applicable laws and regulations
Certiva does not use your information for advertising. We do not sell your data to third parties. We do not share your information with data brokers. Your data is used only for the purposes listed above.
How We Store Your Information
Certiva stores your information on secure, encrypted servers provided by Supabase, a trusted cloud infrastructure provider. All data is encrypted at rest and in transit using industry-standard encryption protocols.
Document Storage
Identity documents, selfie images, and business documents uploaded during the verification process are stored in private, access-controlled storage buckets. These documents are:
- Encrypted at rest using AES-256 encryption
- Accessible only to authorized Certiva verification staff during the review process
- Never publicly accessible under any circumstances
- Never shared with third parties except as required by law
Credential Data
Your issued credential data — including your credential number, credential type, and verification status — is stored in Certiva's database with row-level security enforced. Only the minimum information required for public verification is accessible via the public registry.
The public verification registry reveals only: credential number, credential type, holder's full name, verification status, and issue date. No documents, contact details, or private information are ever publicly disclosed.
Document Retention
Certiva retains your information for as long as your account remains active and your credential is valid. Specifically:
- Account information is retained for the lifetime of your account
- Application documents are retained for the duration your credential is active and for a period of up to 3 years after credential expiry or account closure for compliance purposes
- Activity logs are retained for up to 2 years
- Automatically collected browsing data is retained for up to 12 months
If you request deletion of your account and data, we will process your request within 30 days subject to any legal retention obligations that may apply.
Your Privacy Rights
Depending on your country of residence, you may have the following rights regarding your personal information:
Right to Access
You have the right to request a copy of the personal information Certiva holds about you. You can access most of your information directly through your Certiva dashboard.
Right to Correction
You have the right to request that we correct inaccurate or incomplete information we hold about you.
Right to Deletion
You have the right to request deletion of your personal information. Please note that deleting your account will result in the revocation of any active credentials, as credentials cannot exist without an associated verified account.
Right to Data Portability
You have the right to request your personal data in a structured, machine-readable format.
Right to Object
You have the right to object to processing of your personal information in certain circumstances.
To exercise any of these rights, please submit a request through our Contact page selecting Privacy & Data as your reason.
Submit a Privacy Request →Children's Privacy
Certiva is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from anyone under 18 years of age.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@certiva.space and we will take steps to remove that information from our systems.
Changes to This Policy
Certiva may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
When we make significant changes, we will:
- Update the 'Last updated' date at the top of this page
- Send an email notification to all registered Certiva users
- Display a notice on the Certiva dashboard for 30 days following the change
Your continued use of Certiva after any changes to this policy constitutes your acceptance of the updated terms. If you do not agree with the updated policy, you should discontinue use of the platform and may request deletion of your account.
Contact Us
If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:
Privacy & Data Requests
support@certiva.space
Data access, deletion, and privacy complaints
General Support
support@certiva.space
Application and credential questions
Response Time
Within 30 days
For privacy requests as required by applicable law