Privacy Policy – LogCerts

Last updated: March 2026

1. Introduction

LogCerts ("we", "our", or "us") is a certificate management application operated by Nautcore Systems. Protecting your privacy is a core priority. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use the LogCerts mobile application and web platform.

By creating an account or using LogCerts, you agree to the practices described in this policy. If you do not agree, please do not use the service.

2. Information We Collect

Account Information: When you create an account, we collect your email address and, optionally, your full name.

Certificate and Document Information: We store information about your certificates including names, issue and expiry dates, document numbers, and notes. Uploaded document images are processed in memory for data extraction and are not permanently stored on our servers.

Device Information: We collect device identifiers (such as push notification tokens) to deliver push notifications to your device.

Diagnostic and Usage Data: We collect crash reports, error logs, and anonymous usage statistics to improve service reliability and performance.

3. How We Use Information

We use the information we collect for the following purposes:

• Account authentication and security
• Certificate tracking and management
• Expiry reminders and notifications
• Push notification delivery
• Service improvement and performance optimisation
• Platform security and fraud prevention

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following lawful bases:

• Performance of a Contract: Processing necessary to provide the LogCerts service to you, including account management and certificate tracking.
• Legitimate Interests: Processing necessary for service improvement, security monitoring, and diagnostic analysis, where these interests are not overridden by your rights.
• Legal Obligations: Processing required to comply with applicable laws and regulations.
• Consent: Where you have given explicit consent, such as opting in to push notifications or marketing communications. You may withdraw consent at any time.

5. Data Storage and Security

We take the security of your data seriously. Your information is protected using the following measures:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher.
• Encryption at Rest: Stored data is encrypted using AES-256 encryption.
• Secure Cloud Infrastructure: We use industry-leading cloud infrastructure with SOC 2 compliance.
• Row Level Security (RLS): Database-level policies ensure that each user can only access their own data.
• Restricted Access Controls: Administrative access is limited and audited. Authentication tokens are stored securely and never cached in service workers.

6. Third-Party Services

We use the following third-party services to operate LogCerts:

• Cloud Infrastructure Provider: Database hosting, authentication, and secure data storage.
• Resend: Transactional email delivery for reminders, verification emails, and account notifications.
• Google Cloud Vision API: Optical character recognition (OCR) for document scanning. Document images are processed in memory and are not retained by our servers after extraction.
• Apple Push Notification Service (APNs): Push notification delivery for iOS devices.
• Firebase Cloud Messaging (FCM): Push notification delivery for Android devices and web browsers.

We do not sell, trade, or rent your personal information to any third party. Data is shared with these providers only as necessary to operate the service, subject to their respective privacy policies and our confidentiality agreements.

7. Push Notifications

LogCerts uses push notifications to alert you about important events, including upcoming certificate expirations, expiry reminders, and account-related updates. Push notifications are delivered via Apple Push Notification Service (APNs) on iOS and Firebase Cloud Messaging (FCM) on Android.

You can enable or disable push notifications at any time through your device settings or within the LogCerts application. Disabling push notifications will not affect the core functionality of the application.

8. Data Retention

We retain your personal data for as long as your account is active and as needed to provide the service. Upon account deletion, all personal data, certificates, and uploaded documents are permanently removed from our systems within 30 days. Minimal records (such as anonymised audit logs) may be retained for a limited period to comply with legal obligations or resolve disputes.

9. User Rights (GDPR)

If you are located in the EEA or the United Kingdom, you have the following rights under the General Data Protection Regulation:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Data Portability: Request your data in a structured, commonly used format (e.g., CSV export).
• Right to Erasure: Request deletion of your account and all associated personal data.
• Right to Restrict Processing: Request that we limit the processing of your data in certain circumstances.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your country of residence.

To exercise any of these rights, please contact us at support@logcerts.com.

10. Account Deletion

Users can delete their LogCerts account at any time directly within the mobile application.

Steps to delete your account:

1. Open the LogCerts app
2. Go to Profile → Account Settings
3. Tap "Delete account"
4. Confirm deletion

When an account is deleted:

• All personal data is permanently removed
• All certificates and uploaded documents are deleted
• Access to the account is immediately revoked
• Some minimal records may be retained temporarily for legal or security reasons

If you need assistance with account deletion, contact us at support@logcerts.com.

11. Cookies and Tracking

We use only essential cookies for authentication and session management. We do not use third-party tracking cookies, advertising trackers, or analytics cookies that track you across other websites or applications.

12. Children's Privacy

LogCerts is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at support@logcerts.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised policy on this page and update the "Last updated" date at the top. We encourage you to review this policy periodically. Continued use of LogCerts after changes constitutes acceptance of the updated policy.

14. Contact Information

If you have questions about this Privacy Policy, our data practices, or wish to exercise your rights, please contact us at support@logcerts.com.

Operator: Nautcore Systems