Privacy Policy

ISSUVIA is a platform for organizations to create, issue, deliver, manage, and verify digital certificates. ISSUVIA is currently operated by Abdullahi Mohammed, an individual based in Nigeria, under the ISSUVIA brand.

Questions about this Privacy Policy, personal information, or a privacy-related request can be sent to support@issuvia.com. Please do not include passwords or other sensitive account secrets in your email.

This policy explains how information is handled when people visit issuvia.com, create or use ISSUVIA accounts and workspaces, receive certificates, use public verification, contact support, or participate in ISSUVIA's early-tester activities

Organizations that use ISSUVIA may independently determine which recipients they certify and what recipient information they upload. For those recipient records, the issuing organization is generally responsible for deciding why the information is processed, while ISSUVIA provides the service and handles it on the organization`'`s behalf. ISSUVIA separately determines certain processing needed for its own account security, platform operations, support, and legal obligations. Exact responsibilities depend on the circumstances and applicable law.

Depending on how someone uses the service, the information may include:

• Account and organization information: names, email addresses, authentication credentials stored in a protected form, organization names, user roles, invitations, account and workspace status, and related settings.
• Recipient and certificate information:information uploaded or entered by issuing organizations, such as recipients`'` names and emails, programs or courses, issue dates, certificate numbers, verification identifiers, issuance status, and certificate files.
• Templates and assets: designs, branding, logos, authorized signatures, images, and other materials submitted for certificate issuance.
• Billing and credit records: selected packages, transaction references, payment status and amounts, credit balances, credit ledger entries, and related audit records. When paying through Paystack, payment details are processed by Paystack; ISSUVIA does not need to collect full card details to allocate certificate credits.
• Technical and security records: service requests, device or browser information made available through requests, authentication events, error logs, verification activity, and information needed to investigate misuse or maintain reliability.
• Communications: information provided in emails, support messages, and early-tester submissions.

We process information where appropriate to:

• create and administer accounts and organizational workspaces;
• import recipient information and create, issue, deliver, manage, revoke, and verify certificates;
• manage credits, payments, purchase history, operational audits, and disputes;
• secure the service, prevent abuse, resolve errors, and maintain operational records;
• respond to support, privacy, or legal requests; and
• comply with applicable legal duties.

Depending on the activity and applicable law, the legal basis may include performing a contract, complying with legal obligations, legitimate interests such as protecting the service, or consent where it is required or separately requested. ISSUVIA does not automatically enroll certificate recipients or early testers in marketing solely because their information is used to issue a certificate.

An ISSUVIA certificate may have a publicly accessible verification record. Such records can display the recipient`'`s name, the issuing organization, the certificate title or program, certificate number, relevant dates, and verification or revocation status, as configured and supported by the service.

Recipient email addresses are not intended to appear publicly by default. Before using ISSUVIA to issue certificates, issuing organizations should give recipients appropriate notices and ensure they are authorized to disclose the information needed for issuance and verification.

Because certificate verification may be used to establish authenticity, some record details may need to be retained even after a workspace or account changes status. Requests to correct, restrict, or remove information will be assessed in light of applicable law, the issuing organization`'`s instructions, and the integrity of legitimate verification records.

We share or make information accessible as needed for certificate recipients, authorized members of the relevant issuing organization, public verification visitors viewing authorized verification details, and service providers supporting ISSUVIA.

Service providers may include hosting and deployment, database services, media and PDF storage, email delivery, and payment processing. Providers supporting the platform include Vercel, Prisma Postgres, Cloudflare R2, Cloudinary, Resend, and Paystack.

We do not claim that we sell recipients`'` personal information to advertisers. If our data-sharing practices change materially, this policy will be updated as required.

ISSUVIA serves organizations and recipients who may be in different countries, and infrastructure or service providers may process data outside Nigeria. Where cross-border processing occurs, we will assess applicable legal requirements and appropriate safeguards. This statement does not imply that all service data is hosted in Nigeria.

We use technical and organizational measures intended to protect accounts, workspaces, certificate records, and operational information, including access controls appropriate to organization roles and measures for monitoring and responding to system errors. No online system can guarantee absolute security.

If you believe an ISSUVIA account or certificate record has been compromised, contact support@issuvia.com promptly.

We retain information only for purposes such as providing contracted services, maintaining reliable certificate verification, recording payments and credit movements, preventing misuse, resolving disputes, and meeting legal obligations. Different categories of information may have different retention periods.

An organization or individual may request deletion or other changes. Depending on the information and circumstances, some records may need to remain for lawful retention or valid certificate verification.

Depending on the law applicable to you, you may have rights to receive information about processing, request access, correction or deletion, object to or restrict certain processing, request portability, withdraw consent when consent is the basis for processing, and complain to an applicable data protection authority.

For information entered by an issuing organization, we may need to coordinate your request with that organization. Send requests to support@issuvia.com with enough information for us to identify the relevant record safely; we may need to verify your identity before acting.

People in Nigeria may also contact the Nigeria Data Protection Commission concerning concerns within its jurisdiction.

ISSUVIA may use session or similar technical mechanisms needed for authentication, account security, and website functionality. If optional analytics or marketing trackers are deployed, this section and the relevant notice/consent interface must reflect them.

If you choose to participate in ISSUVIA`'`s early-tester program, the information you submit is used to manage participation, communicate about the activity, and issue or deliver any associated certificate and verification record. Participation alone does not mean you have opted into unrelated marketing.

We may update this Privacy Policy as the service, applicable law, or processing practices change. We will update its effective date and provide additional notice of material changes when required.

ISSUVIA Privacy and Support
Email: support@issuvia.com
Operator: Abdullahi Mohammed, Nigeria