Privacy Policy

Introduction

Welcome to EveryCRED (“we,” “our,” or “us”). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital trust ecosystem and services at everycred.com and related applications (collectively, the “Platform”).

Information We Collect

Personal Information

We collect the following types of personal information:

  • Full name and contact details (email address, phone number)
  • Professional information (organization affiliation, job title)
  • User profile information and images
  • Credential-related information
  • Identification documents (when required for verification)
  • Organization details (for issuers)

Technical Information

We automatically collect certain information when you use our Platform:

  • IP address and device information
  • Browser type and settings
  • Usage data and interaction metrics
  • Cookies and similar tracking technologies (as detailed in our Cookie Policy)

EveryCRED Verifier Mobile App

The EveryCRED Verifier mobile app is a standalone tool for checking whether a credential is authentic. This section explains, in plain terms, how the app handles your information.

Camera and Photos

  • The app uses your device camera solely to scan and read QR codes.
  • If you choose to verify from an image already saved on your device, the app reads the QR code from that image locally.
  • Scanned images and photos are not uploaded to our servers and are not stored by the app. They are processed on your device and discarded once the QR code has been read.

No Account Required

  • You can use the Verifier app without creating an account, signing in, or providing any personal details.
  • We do not require your name, email address, or phone number in order to verify a credential.

What Leaves Your Device

To complete a verification, the app checks the credential against authoritative sources. When you scan a credential, the following may be sent from your device:

  • A lookup request to the EveryCRED verification service, containing the credential identifier or the data encoded in the QR code.
  • Checks against the issuer’s published keys and revocation status, to confirm that the credential is genuine and has not been revoked.
  • A request to a public blockchain explorer, only if you choose to view the on-chain record of a credential.
  • Basic verification analytics, such as whether a verification took place and whether it succeeded. This is collected only when you actively use the app to verify a credential.

No Advertising or Third-Party Tracking

  • The app does not display advertisements.
  • The app does not include third-party advertising or tracking SDKs.
  • We do not sell or share information from the app with data brokers or advertising networks.

How We Use Your Information

Core Service Delivery

  • Issuing and managing digital credentials
  • Verifying credential authenticity
  • Managing user accounts and profiles
  • Providing customer support and service updates

Platform Improvement

  • Analyzing platform usage and performance
  • Enhancing security and fraud prevention
  • Improving user experience and features
  • Developing new services and capabilities

Communication

  • Sending service notifications and updates
  • Responding to your inquiries and requests
  • Providing important security alerts
  • Sharing relevant product information

We process your information based on:

  • Your consent
  • Contractual necessity
  • Legal obligations
  • Legitimate business interests

Data Security

We implement robust security measures to protect your information:

  • Industry-standard encryption protocols
  • Regular security audits and updates
  • Secure cloud infrastructure
  • Advanced access controls
  • No direct storage of personal data on blockchain (only hash data)

Data Sharing and Disclosure

Authorized Sharing

  • With credential holders and issuers as part of the verification process
  • With service providers who assist in platform operations
  • With third parties when explicitly authorized by you

Legal Requirements

  • When required by law or regulation
  • To protect our legal rights
  • To prevent fraud or abuse
  • To comply with legal processes

Your Rights and Choices

You have the right to:

  • Access your personal information
  • Request corrections to your data
  • Delete your account and associated data
  • Opt-out of marketing communications
  • Withdraw consent for data processing
  • Export your data in a portable format
  • Object to certain data processing activities

International Data Transfers

When we transfer data internationally, we ensure appropriate safeguards are in place through:

  • Standard contractual clauses
  • Data processing agreements
  • Compliance with regional data protection laws

Data Retention

We retain your information for as long as:

  • Your account remains active
  • Required to provide our services
  • Necessary for legal compliance
  • Needed for legitimate business purposes

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes through:

  • Platform notifications
  • Email communications
  • Website announcements

Contact Us

For privacy-related inquiries or to exercise your rights:

  • Email: admin@everycred.com 
  • Address: Avdhesh House, 303, opp. Gurudwara, Bodakdev, Ahmedabad, Gujarat 380054

Additional Information

Cookie Policy

Please refer to our separate Cookie Policy for detailed information about how we use cookies and similar technologies.

Children’s Privacy

Our services are not intended for users under 16 years of age. We do not knowingly collect information from children.

Special Categories of Data

We only process special categories of personal data when explicitly authorized and necessary for our services.