Privacy Policy

Committed to transparency, integrity, and protecting your data

Last Updated: May 30, 2026

Your privacy is very important to us. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services. By accessing or using our website, you agree to this Privacy Policy.


1. Information We Collect

We collect only the information necessary to provide our services, process transactions, and improve your experience. This includes:


2. How We Use Your Data


3. Your Rights (GDPR & CCPA)

If you are based in the European Union or California, you have the following rights:

We respond to all requests within 30 days. To exercise your rights, email us at support@clevercertificates.com.


4. Data Security

We use SSL encryption, secure hosting, and access controls to protect your data. While no system is 100% secure, we take every reasonable measure to safeguard your personal information.


5. Cookie Policy & Consent

We use cookies and similar technologies to enhance your experience and analyze website performance. Cookies fall into the following categories:

Non-essential cookies are only placed on your device after you provide explicit consent through our cookie consent banner. You can withdraw consent or adjust preferences at any time in your browser or via the banner.

Browser Storage (localStorage)

To improve your editing experience, our Free Design Editor automatically saves your in-progress certificate design to your browser's local storage (localStorage). This allows you to resume editing later without losing your work, even if you close the tab or navigate away.

The following data may be stored locally on your device:

Important points:


6. IP Address Collection for Security, Verification & Refund Compliance

When you access our Live Demo Editor or open a purchased template in the editor, we automatically log your IP address, browser details, and the date/time of access. This data is collected for the following purposes:


7. Legal Basis for Processing (GDPR)

We process personal data only when we have a valid legal basis under the GDPR, including:


8. Data Retention

We retain personal data only as long as necessary to fulfill orders, comply with legal obligations, or resolve disputes. For example:

For Academy Subscription holders, we additionally collect records of certificates issued through the Issuer Dashboard, including recipient names, issue dates, and certificate codes. This data is used solely for the purpose of QR code verification, account management, and support. This data is retained for the duration of the subscription plus 30 days, after which it is permanently deleted unless legally required to be kept longer.

Draft design data stored in your browser's local storage is retained for up to 7 days and is automatically deleted thereafter. This data never leaves your device unless you choose to proceed to checkout.


9. Third-Party Services

We use trusted third-party services to operate and improve our website. These providers only receive the minimum information necessary to deliver their services and process your data under their own privacy policies:


10. International Data Transfers

We operate globally, which means your information may be transferred to and processed in countries outside of your place of residence.

If you are located in the EEA or UK, this may include transfers to countries that do not provide the same level of protection as your home country. To safeguard your information, we rely on:

By using our services, you acknowledge that your data may be transferred internationally, subject to these protections.


11. Changes to This Policy

This policy may be updated periodically. The “Last Updated” date at the top of this page reflects the latest version. Continued use of our website indicates your acceptance of these changes.


12. Contact Us

If you have questions about this Privacy Policy, data practices, or your rights, please contact us:

We are committed to responding to all privacy-related inquiries within 30 days.

13. Analytics & Third-Party Service Providers

We use third-party analytics tools to understand how visitors interact with our website and to improve our services. These tools may collect information such as your IP address, browser type, pages visited, time spent on the site, and referring URLs. Visitor data collected through these services may be shared with and processed by the respective third-party providers under their own privacy policies.

The analytics services we currently use include:

Google Analytics — policies.google.com/privacy
PostHog — posthog.com/privacy

You can opt out of analytics data collection at any time using the Cookie Preferences option in the footer of our website. If you choose to reject analytics cookies, no data will be sent to these third-party providers. PostHog is used for product analytics, session insights, and A/B experimentation to improve the site experience. It is active for all visitors and does not require consent as it is used for functional improvement purposes. Data processed by PostHog is subject to