Privacy Policy

Welcome to EveryCRED, the platform dedicated to simplifying the credential verification process. Your privacy and the security of your information are of utmost importance to us. 

Your privacy and security of your data is our pledge and that is why this privacy policy will help you in understanding how we collect, use, and protect your data when you visit and use stg.everycred.com

We reserve the total rights for any changes or modifications in the policy at any given time and you will be updated with the changes by visiting the site.   

Information We Collect and keep it sub rosa: 

  1. Technical Information: 
    • Full Name
    • Contact information (email address, phone number) 
    • User profile picture
    • Issuer logo
    • User profile
    • Holder profile or logo
    • Subject details
    • Credential information
    • Identification documents
  2. Technical Information:
    • IP address 
    • Device information 
    • Browser type 
    • Cookies (refer to Cookie Policy)

Use of Information: 

We collect and use information for the sole purpose of verifying credentials as requested by users and issuers. 

  • Delivery of services: Services and products offered on this site may require the use and collection of personal data. We use this data, together with data from third party sources authorized to provide data on your behalf such as your organization or administrator to provide the same. 
  • Providing requested support: We may collect information if necessary to help enable requests by users such as resolving queries, enquiries and providing resolution to bug reports. 

We rely on the following basis to collect Personal Data. 

  • Consent: We may rely on the consent that you provide at the time of data collection to process data. 
  • Legitimate interests: We may rely on the legitimate interests we pursue to process your personal data provided that our interests are not overridden by your interests, fundamental rights, or freedoms.  
  • Performance of Contract: Processing of your data to provide requested service or for the use of our products.   
  • Compliance with legal obligations: Where necessary for us to comply with a legal obligation arising under an applicable law to which we are subject, we may be required to process or disclose data to external authorities, including audit organizations, regulatory bodies, and law enforcement agencies. 

Single Sign-On (SSO): 

We offer secure Single Sign-On (SSO) options, such as login through LinkedIn, Google, and Microsoft, to enhance the security of your account. 

Sharing of Information: 

  • Users can share their verified credentials with designated parties. 
  • Holders can share their credentials and information with third parties.  
  • Issuers may share credential information with users and other authorized entities. 

However, it will be the sole responsibility of the Holder for any unauthorized use  

Storage and Security of Information: 

Information is securely stored in our database and cloud services, utilizing industry-standard security measures. 

The security and privacy of your information is the top thought in our minds. We do not directly store any personal data on the blockchain as our services rely on hash functions and only store the hash data on the blockchain network.  

Your personal data provided for the purpose of creating a credential remains stored and protected in your mobile wallet where you have full control of your own data. 

Please note however that you are also responsible for protecting your own information and maintaining security of the devices used to access our services. 

Our platform employs advanced cryptographic techniques and security measures to ensure the confidentiality and integrity of your credentials. 

User Rights/Duties: 

Under applicable data protection law, depending on the country you reside in, you have a number of rights with regard to your personal data.   

  • You have the right to know what personal information we maintain about you  
  • If your personal information is incorrect or incomplete, you have the right to ask us to update it  
  • You can also ask us to delete or restrict how we use your personal information, but it might restrict your access to some of our services.  
  • You can have the right to access your personal information  
  • Issuers can revoke credentials they have issued for explainable reasons.   
  • You have a right to object to processing of your personal information where it is so conducted by automated means and involves any kind of decision-making   
  • Further, you have the option to file a complaint for suspected or actual violations of your data protection rights with the relevant authority as per the data protection law of the country  
  • You have the right to withdraw your consent at any time with effect for the future under the individual conditions of the consent. This will not affect the legality of the processing conducted prior to the withdrawal.