Privacy

Controller

Killian Paulic (EI), 21 AV Germaine Tillion 35136 Saint-Jacques-de-la-Lande. For anything about your data: hello@certseven.com.

What we keep

Your email address, to sign you in and write to you about your documents.

Your dossiers: your answers, and what you enter about your products, their manufacturers, their tests and the rules you certify to.

Your details as certifier and, if you give them, those of whoever keeps the test records.

Your products, their certificates and the Product Registry identifiers you enter.

Your exchanges with the assistant, kept with the dossier so you find them again, and for each answer how many tokens were processed and what it cost - not its text.

The state of your purchases and subscriptions as Creem reports it (plan, status, period) - never card details.

Before an account exists, a dossier is tied to an anonymous identifier kept in a cookie in your browser.

Why

To provide the service you ask for: preparing, keeping and updating your documents. We sell no data and use none for advertising.

With whom

Hosting and database: Hostinger, on a server located in Germany. Sign-in and notification emails: Resend. Payment: Creem, merchant of record, which collects what payment and invoicing require. Analytics: PostHog, hosted in the European Union, and Umami, on our own server. Assistant in the journey: Anthropic (the Claude model), which receives the messages you write to the assistant and a summary of your dossier, without any email address, phone number or postal address.

Some of these providers are based in the United States; transfers rely on the safeguards they offer.

Analytics

Measured events carry counts, yes/no flags and values from a closed list (a verdict kind, a step number). They never carry what you type: no product name, address, manufacturer or laboratory. Links that contain a certificate are redacted before anything is sent.

We also record how visits unfold (pages viewed, clicks, scrolling) to see where the journey stalls. Whatever you type into a field is masked before it is sent, and so is your own information wherever a page shows it: in the journey from step 3, the catalogue, the account and the assistant. Nothing is recorded on the certificate checker or on a certificate page.

Once you are signed in, these measurements are tied to your account's internal identifier, never to your email address.

These measurements pass through our own domain before reaching PostHog; our sign-in and journey cookies are never forwarded. The journey's key steps (a dossier started, a verdict, a step saved, a payment) are also measured from our server, under the same rules.

We also count visits with Umami, running on our own server: pages viewed, referring site, country and device type. It uses no cookie, records neither how a visit unfolds nor what you type, and ties nothing to an account. Links that contain a certificate are redacted there the same way.

Checking a certificate

The free checker runs entirely in your browser: pasted text is never sent to our servers. You can confirm this in your browser's network panel; the only requests are analytics events carrying counts.

How long

Your data is kept for as long as your account exists. An anonymous dossier never attached to an account holds no identity data.

Public certificate pages depend on no stored data: their content is in their link. Deleting your account therefore does not make them unreadable to whoever holds the link.

Your rights

From the Account page you can download all your data (JSON export) and delete your account. To correct something, change it in your dossier; for anything else, write to us.

You can also complain to a data protection authority, in France the CNIL.