This notice explains how Agilecode uses information in Certificates, available at certificates.agilecode.co.ke. Contact info@agilecode.co.ke about this notice or your information.
Information you provide
We store account details such as your name and email address, a protected password record, project settings, uploaded logos and signatures, recipient information, and certificate records. We also store credit balances and payment references needed to operate your account.
When you upload a recipient list, you are responsible for having an appropriate reason and permission to use the information. Only include the information needed for the certificate. Do not put identity document numbers, health details or other sensitive information in certificate wording.
Why we use information
We use account and project information to save your work, create certificates, maintain verification records, process credit purchases, protect accounts and respond to support requests. If you choose to email a certificate, the recipient email address is used to deliver its verification and download link. Technical logs may record request details, IP addresses and errors to help operate and secure the service.
Public certificate verification
When you issue a certificate, its verification link or certificate number allows someone to view the public certificate details and status, and download the certificate PDF while it is valid. These details include the recipient name, issuer, award information and dates. The PDF includes any logo and signature artwork used in that issued certificate. Recipient email addresses are not displayed on the verification page. Verification pages are not included in the public sitemap and are marked to discourage search engine indexing, but someone with a link can still share it.
A verification record remains available when a certificate is expired or revoked, including any public reason the issuer provides for revocation. Contact us if a record contains incorrect information or if you need help with a privacy request.
M-Pesa payments
M-Pesa payments are processed through the configured payment provider and Safaricom’s M-Pesa service. Your payment number, amount and reference are used to request and confirm payment. Enter your M-Pesa PIN only in the prompt on your phone. Certificates does not ask for or store your M-Pesa PIN.
Cookies and storage
The service uses cookies and browser storage needed for sign-in, session security and interface preferences. These allow you to stay signed in and submit forms securely. Blocking necessary cookies may prevent parts of the service from working.
Service providers and disclosure
Information is processed using the hosting, email and payment services needed to provide Certificates. We do not sell your recipient lists. We may disclose information where needed to respond to lawful requests, investigate misuse or protect the service and its users.
Retention and your requests
Account, project and certificate records are kept to provide your saved work and certificate verification. Payment and security records may need to be retained for operational or legal reasons. Backups may retain earlier copies for a limited operational period after a record is removed.
You can contact us to request access to or correction of your information, to object to processing, to request account deletion, or to ask how recipient information can be removed. You can also read about your rights and raise a privacy concern with Kenya’s Office of the Data Protection Commissioner. We may need to verify your identity and explain how a request affects issued certificates or records that must be retained.
Security
We use access controls and encrypted HTTPS connections to protect the service. Keep your password private, use an email address you control and tell us if you suspect unauthorised access to your account.
Changes to this notice
We may update this notice as the service changes. The effective date at the top shows when this version took effect. For questions, contact info@agilecode.co.ke.