Privacy Policy

Last updated: September 13, 2026

This Privacy Policy explains how CertTrack Pro (the "Service"), operated by VKT ("we", "us"), collects, uses, stores and protects your personal data when you visit remind.annmax1983.com or use the CertTrack Pro application at app.remind.annmax1983.com.

1. Data controller

VKT operates the Service and is the controller of the personal data described below. Contact: support@annmax1983.com.

2. Data we collect

2.1 Account data

• Email address (account owners) or login name (sub-accounts)
• Password, stored only as a cryptographic hash — never in plain text
• Role, account status, subscription and billing status
• Preferred time zone and interface language

2.2 Business data you enter

Depending on your product line: worker records and their certificates (including uploaded scans/photos), equipment and maintenance records, tasks and project groups, and reminder settings. This data typically relates to your employees or subcontractors — when you enter personal data about your staff or subcontractors, you act as the data controller and are responsible for having a lawful basis for entering it; we process it on your behalf as a processor.

2.3 Billing data

Payments are processed by our payment provider Creem. We do not store full card numbers. We store your Creem customer identifier, subscription plan, billing cycle dates and payment status. If you open the customer billing portal, we request a one-time portal link from Creem using your customer identifier.

2.4 Technical data

• IP address and login timestamps, used for security and rate limiting
• Cloudflare Turnstile captcha verification results on login (verification happens on Cloudflare's servers; we receive only a pass/fail result)
• Delivery status of emails we send you
• Operational audit logs recording changes made to records in your account

During registration we process your email address, chosen product line and plan, and a temporary registration reference that expires within 24 hours if checkout is not completed.

We do not use advertising or third-party analytics trackers on this site.

3. How we use your data

• To provide the Service: account management, expiry scanning, reminder emails, reports and exports
• To process payments and manage subscriptions
• To send transactional emails (registration password, password reset, expiry reminders)
• To secure the Service and prevent abuse
• To comply with legal obligations

We do not sell your data and we do not use it to train AI models.

4. Legal bases (EEA/UK users)

Where the GDPR applies: performance of a contract (Art. 6(1)(b)) for providing the Service; legitimate interests (Art. 6(1)(f)) for security and abuse prevention; consent (Art. 6(1)(a)) where required, e.g. for optional communications.

5. Email communications

Email is sent from the domain annmax1983.com (e.g. from CertTrack Pro <remind@annmax1983.com>) via the transactional email provider Resend. We send only transactional email:

• account creation (your initial password) and password resets;
• expiry reminder emails tied to your data, up to the monthly alert quota of your plan (500 emails/month on all current plans). If the quota is exhausted, reminder sending pauses until the next billing cycle — all other features keep working. Reminder delivery respects your configured time zone and quiet hours (no reminders between 00:00 and 07:00 local time).

We do not send marketing email. You can reduce reminder volume in your reminder settings, or cancel your subscription to stop reminders entirely.

6. Data sharing and processors

We share data only with the processors necessary to run the Service:

• Cloudflare — hosting, CDN, DDoS protection, object storage for uploaded attachments (Cloudflare R2), and captcha (Cloudflare Turnstile)
• Creem — payment processing and customer billing portal
• Resend — transactional email delivery

We may disclose data if required by law, or as part of a merger or asset sale, with notice where permitted.

7. International transfers

Our processors operate globally (Cloudflare and Resend may process data outside your country of residence). Where required, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses implemented by our processors.

8. Retention

• Account and business data are retained while your subscription is active, and remain readable for 90 days after subscription expiry or cancellation, after which they may be permanently deleted. After a refund, write access is frozen immediately and the same read-only period applies.
• Reminder/sending logs are retained for up to 12 months for deduplication and audit purposes.
• Operational audit logs are retained as append-only records for account activity history.
• You can export your data (CSV) at any time while your account is active. Uploaded attachments (certificate scans, maintenance reports, task photos) are stored in Cloudflare R2 object storage; the account owner should download and archive any attachments they need before the retention period ends.

9. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection regarding your personal data, and withdraw consent. To exercise these rights, email support@annmax1983.com. EEA/UK users may also lodge a complaint with their local supervisory authority.

10. Security

We protect data with encryption in transit (TLS), hashed passwords (the initial registration password is generated randomly and emailed once; it is never stored in plain text), tenant isolation (each account's data is segregated by account ID, and business data is physically isolated per product line), JWT-based session control, captcha-protected login, and Cloudflare-managed infrastructure. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

11. Children

The Service is intended for business use and is not directed at children under 16. We do not knowingly collect data from children.

12. Changes to this policy

We may update this Privacy Policy. Material changes will be announced on the site or by email. The "Last updated" date above reflects the current version.

13. Contact

VKT — support@annmax1983.com