Version 2026-11-06
Privacy policy
Who we are
Veridyne Certifications (certifications.veridyne.eu) is run by VERIDYNE SOLUTIONS S.R.L. (CUI 51635423, Trade Register J2025027184005), Str. Guliver nr. 13, Bucharest, Romania. We are the controller of the data described here. Contact: certifications@veridyne.eu.
What we collect
- Your account: name, email address, sign-in identifier, your company, when you joined and when you last signed in. Your password and two-step sign-in are held by Auth0, not by this app.
- Your agreement: which version of the terms you accepted and when.
- Vouchers: how many you have, what they are for, their use-by dates, and who added them.
- Exams: which certification you started, when, and the result.
- Certifications: each certification's code, the issue and expiry dates, and whether it was revoked and why.
- Your public profile setting: on or off, and the address of your profile page.
What is public
A certification only means something if others can check it. So:
- Anyone with a certification code can see, on the verify page and through our verify API: the holder's name, the certification, the issue and expiry dates, and whether it is valid, expired or revoked. The API also returns a one-way fingerprint of the holder's email (a SHA-256 hash). It lets Veridyne's own systems, such as the employee Benefits page, match a certification to its holder without the address being shown.
- Your public profile, while it is on, shows your name and every certification you hold or held, with codes and dates. It is on by default so you can share one link, and you can turn it off from your Home page.
- Your email address, your company and your exam attempts are never public. Public pages ask search engines not to index them, but anyone you share a link with can see the page, and may copy or share it.
Why, and on what basis
We run your account, vouchers and exams, and issue certifications, because you asked for them and accepted the terms (performance of a contract, GDPR Art. 6(1)(b)). We keep the verify page and API public so that anyone you show a certification to can trust it. That is part of what a certification is, and it is also in our legitimate interest in preventing fake certifications (Art. 6(1)(f)). The public profile is a choice you make, and you can turn it off at any time. We keep the service secure as a legitimate interest. We do not sell data or show ads.
How long we keep it
- Your account, vouchers and exams: while you use the service. Once you ask us to delete your account, we delete them within 30 days.
- Certifications: for as long as they can be checked, and for two years after they expire or are revoked. That way an employer who checks a certification later still gets a true answer. When you delete your account, we keep only what that check needs (your name, the certification, its code and dates), unless you ask us to remove those as well. In that case the code then answers "not found".
Who processes it
| Subprocessor | Purpose | Location |
|---|---|---|
| Vercel Inc. | Hosting and running the app | Frankfurt, EU (fra1) |
| Neon (Databricks) | Database | Frankfurt, EU |
| Okta Inc. (Auth0) | Sign-in, two-step sign-in and the terms you accept at sign-in | EU |
| Cloudflare Inc. | Turnstile bot check on the sign-in page at auth.veridyne.eu | United States |
| Resend Inc. | Sending emails about vouchers and certifications, and sign-in emails | United States (SCCs) |
Where a subprocessor is outside the EEA, transfers rely on the EU–US Data Privacy Framework or Standard Contractual Clauses.
Your rights
You can access, correct, export or delete your data, object to processing, and complain to the Romanian supervisory authority (ANSPDCP, dataprotection.ro). Write to certifications@veridyne.eu.
Cookies
One encrypted session cookie keeps you signed in. The sign-in page at auth.veridyne.eu sets Auth0's own cookies, which are needed to sign you in. There are no analytics or advertising cookies.