CERTAVENUE PRIVACY POLICY

Last Updated: 11 November, 2025

This Privacy Policy explains how CertAvenue (“we,” “us,” or “our”) collects, uses, stores, and protects information when individuals (“users,” “workers,” or “company administrators”) access or use our platform at https://www.certavenue.com.

CertAvenue is a compliance management platform that allows companies to upload, track, and maintain required documents for regulatory, licensing, onboarding, and operational purposes.

By using CertAvenue, you acknowledge that you have read and understood this Privacy Policy.

1. INFORMATION WE COLLECT

We collect only the information necessary to provide our compliance and recordkeeping services. This includes:

1.1 User Account Information

• First and last name
• Username
• Company affiliation
• Email address
• Mobile phone number (if voluntarily provided for SMS notifications)

1.2 Compliance Documents & Photos

Users may upload:

• PDFs
• Images
• Compliance documentation
• Licenses, certifications, screening results, insurance documents, and other required forms

These uploads may contain personal information such as:

• Worker photos
• Dates, certificate numbers, or licensing identifiers

Purpose: We store this information solely to support company compliance, internal recordkeeping, and to provide documentation during audits or legal proceedings if necessary.

1.3 Login & Security Metadata

To maintain security and audit integrity, CertAvenue logs:

• Tenant schema
• Username
• First and last name
• Last login time
• Last logout time
• Session key
• IP address used at login
• Browser user-agent
• Timestamp of account activity creation

Retention period: Up to six (6) years, as required for audit trails, compliance investigation, and legal evidentiary purposes.

1.4 Payment or Billing Information

Our payment or billing is processed through Stripe's secure payment gateway, billing information is handled by that provider and not stored directly on CertAvenue servers.

2. HOW WE USE INFORMATION

We use the information we collect for the following purposes:

2.1 Platform Functionality

• Maintain user accounts
• Deliver compliance reminders and notifications
• Give managers and HR professionals the tools they need to manage their drivers
• We give drivers the tools they need to remain compliant, onboard in a timely manner and remain efficient
• Allow users to upload, view, and manage required documents
• Provide customer support
• Improve and optimize our services

2.2 Security & Integrity

• Verify login attempts
• Prevent unauthorized access
• Track sessions for security audits
• Maintain logs for legal or regulatory inquiries

2.3 Compliance Recordkeeping

We store documents and login metadata for up to six (6) years to comply with:

• Company audit requests
• Insurance or legal investigations
• Regulatory or HR documentation requirements

2.4 SMS Notifications (Optional)

If a user consents, we use their mobile number to send automated renewal reminder text messages related to expiring compliance forms and similar notices.

Users may control their SMS participation by replying:

• START to opt in
• STOP to opt out
• HELP for assistance

SMS consent is optional and is not required to use CertAvenue.

3. HOW WE SHARE INFORMATION

3.1 With Your Company

Information uploaded or entered on CertAvenue belongs to the company (employer) that administers the CertAvenue environment. Authorized company administrators may access data for compliance and HR-related purposes.

3.2 With Third Parties

We do not:

• Sell personal information
• Share information with third parties for marketing purposes
• Allow third-party advertising networks to use your data

The only third parties that process user data are infrastructure providers needed to securely operate CertAvenue, such as:

• Google Cloud Platform (GCP):provides secure hosting, database storage, and file storage. Data is encrypted at rest and in transit and stored for as long as your company uses the service or as required for retention.

3.3 Legal Requirements

We may disclose information if required:

• To comply with a subpoena, court order, or other legal process
• To protect our rights, property, or the security of users
• To support an investigation involving compliance-related claims

We do not disclose data unnecessarily.

4. DATA RETENTION

Document uploads, logs, and activity records are kept for up to six (6) years to support:

• Employer compliance obligations
• Legal defense and dispute resolution
• Insurance documentation
• Mandatory audit trails

After contract termination or a verified deletion request by an authorized company administrator, data is permanently removed from our systems unless we are legally required to retain it.

5. DATA SECURITY

CertAvenue was built and is maintained using our very best programming and security protocols. We also use Google Cloud's strict Security protocols when handling user data.

While no system can be guaranteed 100% secure, we take reasonable and appropriate measures to protect your information.

6. YOUR CHOICES & RIGHTS

6.1 SMS Consent

Users control their own SMS participation. You may opt out of SMS notifications at any time by replying STOP to any message. You may reply START to opt back in, or HELP to receive assistance.

6.2 Data Access

You may request a copy of your stored information through your employer’s designated administrator or contact person, where applicable.

6.3 Data Correction

You may update your personal information within your User Profile or by contacting your administrator. In some cases, your employer may manage your profile details.

6.4 Data Deletion

Authorized company administrators may request deletion of user data. Some records may be retained for up to six (6) years if required for legal, regulatory, or audit purposes.

7. CHILDREN’S PRIVACY

CertAvenue is not intended for individuals under the age of 18, and we do not knowingly collect information from minors. If you believe that a minor has provided us with personal information, please contact us so we can take appropriate action.

8. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our services or legal requirements. When we do, we will update the “Last Updated” date at the top of this page. Continued use of CertAvenue after any changes constitutes acceptance of the revised Privacy Policy.

The current version of this Privacy Policy will always be available at: https://www.certavenue.com/privacy-policy/

9. CONTACT US

For privacy-related questions, requests, or concerns, please contact:

• CertAvenue Support
• Email: support@certavenue.com
• Website: https://www.certavenue.com