Privacy Policy for Organizations

This policy explains how VEC Digital handles information for organizations, institutions, training providers, businesses, and their authorized users who issue, manage, verify, or administer digital certificates through the platform.

Information We Collect

• Organization profile information, including organization name, contact details, domain, billing details, verification documents, and settings.
• Authorized user information, including names, emails, phone numbers, roles, permissions, signatures, security status, and activity logs.
• Certificate data, templates, signatory assignments, learner or recipient details, certificate metadata, issuance records, revocation records, and verification events.
• Billing, subscription, invoice, promotion, and payment provider metadata.
• API, webhook, email delivery, support, audit, device, IP, and usage logs required to operate and secure the platform.

How We Use Information

• To onboard, verify, and administer organization accounts.
• To issue, sign, store, verify, revoke, and manage certificates.
• To manage templates, roles, permissions, signatures, API tokens, webhooks, billing, and platform settings.
• To provide support, service updates, security alerts, and operational notifications.
• To detect fraud, prevent unauthorized access, protect credential integrity, and enforce platform rules.
• To improve performance, reporting, product quality, and security.

Organization Responsibilities

Organizations are responsible for having a lawful basis to upload, process, and issue certificates containing personal data. Organizations must ensure recipient data, signatory data, templates, documents, and certificate content are accurate and uploaded with proper authorization.

Sharing of Information

We may share information with authorized organization users, certificate recipients, verification viewers, payment processors, infrastructure providers, communication providers, analytics and security tools, and authorities where legally required. Public verification pages may expose limited certificate information for authenticity checks.

Retention and Deletion

Organization records are retained as needed for service delivery, billing, compliance, security, dispute resolution, and certificate authenticity. Deletion requests are reviewed against contractual, legal, audit, and credential integrity obligations.

Security and Access Controls

VEC Digital provides role-based access controls, account verification, audit logs, secure connections, and operational monitoring. Organizations should assign permissions carefully, protect API tokens, review users regularly, and promptly revoke access for users who no longer need it.

Contact

For privacy or data protection requests, contact support@vec.digital.