This policy explains what CertifyMyWatch (operated by [Company Legal Name]) collects, how we use it, and your choices.
1. Information we collect
When you request authentication we collect your name, email, phone, and mailing address; details and photos of your watch; the value you declare; and your account login (email). Payments are handled by our payment provider — we receive confirmation of payment but do not store your full card number.
2. How we use it
To provide the service: process your request, arrange insured shipping, perform and document the authentication, issue and verify your certificate, send you status and result emails, and provide customer support.
3. Service providers we share with
We use trusted processors to run the service: Supabase (database, login, and secure file storage), Resend (transactional email), our payment provider (payments), ParcelPro / UPS Capital (insured shipping), and Vercel (hosting). They process data only to provide these functions.
4. What's public vs. private
A certificate's public verification page shows watch facts (brand, model, reference, partial serial, result, date) so a buyer can confirm authenticity. It does not display your name, contact details, or address. Your personal information stays private to your account and our staff.
5. Retention
We keep authentication records and certificates as part of our permanent verification database so certificates remain verifiable over time. You may request deletion of your personal account information (subject to records we must retain).
6. Your choices
You can access or update your information by signing into your portal, or by emailing us. You may request a copy or deletion of your personal data.
7. Security
We use access controls, encryption in transit (HTTPS), and database-level security to protect your information. No system is perfectly secure, but we take reasonable measures to safeguard your data.
8. Cookies & analytics
We use only essential cookies needed to keep you signed in. If we enable privacy- friendly analytics, it measures aggregate traffic without tracking you across sites.