Privacy Policy

This Privacy Policy explains how Kredmark (“Kredmark”, “we”) collects, uses, and shares information when you use Kredmark (the “Service”). By using the Service you agree to this Policy.

1. Information we collect

• Account data: your email address and authentication credentials (e.g., passkeys).
• Profile data: name, professional contact details, photos, biography, social links, and your chosen public handle.
• Credential data: the licenses and certifications you record — including type, number, issuing authority, jurisdiction, issue and expiration dates, and any document images you upload.
• Identity verification data: if you use optional identity verification, a third-party provider collects and processes your government-issued ID and a selfie. Kredmark receives only a minimal result (such as pass/fail, name match, and date) and does not store your ID document.
• Payment data: processed by our payment processor (Stripe). We do not store full card numbers.
• Usage and device data: log data, IP address, and basic analytics needed to operate and secure the Service. We use cookies/local storage only as needed for sign-in sessions and core functionality.

2. How we use information

• To provide, operate, secure, and improve the Service.
• To display your public profile as you configure it.
• To send transactional messages, including sign-in links and renewal reminders you have enabled.
• To process payments and provide any physical products you order.
• To comply with law and enforce our terms.

3. What is public

Your public profile and the information you choose to publish (which may include your name, photo, social links, credential claims, and redacted credential images) are visible to anyone with the link or QR code, and may be indexed by search engines. You control which fields are public; contact details such as phone are hidden unless you opt in. Credential images shown publicly are automatically redacted, but we cannot guarantee complete removal of sensitive details — only upload what you are comfortable publishing.

4. How we share information

We do not sell your personal information. We share it only with service providers who process it on our behalf, under contract:

• Fly.io: Application hosting and database (United States).
• Tigris: Encrypted image / object storage.
• Resend: Transactional email delivery.
• Stripe: Payments and subscription billing.
• Identity verification provider: Optional government-ID verification (stores the ID document; returns a pass/fail result to Kredmark).

We may also disclose information to comply with law, enforce our terms, or protect rights and safety, and in connection with a merger or acquisition.

5. Retention

We retain your information for as long as your account is active or as needed to provide the Service, then delete or anonymize it within a reasonable period, except where we must retain it to comply with law, resolve disputes, or enforce agreements. You can delete your account at any time, which removes your profile and associated content.

6. Security

We use measures including encryption in transit, encrypted storage, access controls, and automated redaction of public credential images. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

7. Your rights

Depending on your location (including under GDPR and the CCPA/CPRA), you may have rights to access, correct, delete, port, or restrict processing of your personal information, and to object or withdraw consent. To exercise these rights, contact privacy@kredmark.com. We will not discriminate against you for exercising them.

8. International users

The Service is operated and data is stored in the United States. If you use the Service from outside the United States, you consent to the transfer and processing of your information in the United States, which may have different data-protection laws than your country.

9. Children

The Service is not directed to anyone under 18, and we do not knowingly collect their information.

10. Changes

We may update this Policy; material changes are indicated by the “Last updated” date above.

11. Contact

Privacy questions: privacy@kredmark.com.