Privacy Policy

Your privacy is our priority

Last Updated: October 2025

Contents

→ Introduction→ Information We Collect→ How We Use Your Information→ Data Storage and Security→ Data Sharing and Disclosure→ Your Rights and Choices→ Data Retention→ Cookies and Tracking→ Third-Party Services→ International Data Transfers→ Children's Privacy→ Changes to This Privacy Policy→ Contact Us
1

Introduction

Certana ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our content authenticity platform. By using Certana, you agree to the collection and use of information in accordance with this policy.
2

Information We Collect

Account Information

When you create an account, we collect your email address, full name, and password (securely hashed).

Content Data

We collect and process the digital assets (images) you upload to our platform, including associated metadata such as EXIF data, TIFF metadata, and C2PA manifests.

Usage Data

We automatically collect information about your interactions with our service, including upload counts, verification requests, storage usage, and feature usage patterns.

Technical Data

We collect IP addresses, browser types, device information, and access logs for security and service optimization purposes.

Blockchain Data

When you use blockchain features, we record transaction signatures, wallet addresses, and commitment hashes, which are publicly visible on the blockchain.

3

How We Use Your Information

We use the collected information for the following purposes:
  • Providing and maintaining our services
  • Processing your digital assets with watermarking and fingerprinting
  • Creating blockchain commitments and NFTs
  • Managing your account and authentication
  • Enforcing usage quotas and limits
  • Improving our services and developing new features
  • Communicating with you about service updates
  • Detecting and preventing fraud or abuse
  • Complying with legal obligations
4

Data Storage and Security

Encryption

Original uploaded assets are encrypted using AES-256 encryption before storage. Encryption keys are derived from your content and stored securely.

Decentralized Storage

We store original assets on IPFS and optionally on Filecoin for permanent decentralized storage. Watermarked versions may be stored on our secure servers or cloud storage.

Database Security

Metadata and account information are stored in secure databases with encryption at rest and in transit. We implement industry-standard security measures to protect your data.

Blockchain Immutability

Data committed to the blockchain (Solana) is permanent and publicly accessible. This includes content hashes, Poseidon hashes, and transaction records.

5

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
  • With service providers who assist in operating our platform (cloud storage, blockchain networks)
  • When required by law or legal process
  • To protect our rights, property, or safety
  • With your explicit consent

Note: Blockchain data is inherently public and visible to anyone with access to the blockchain network.

6

Your Rights and Choices

You have the following rights regarding your personal information:

Access: You can view and download your account information and uploaded assets.

Correction: You can update your profile information at any time.

Deletion: You can delete your account, which will remove your personal information from our active databases. Note that blockchain commitments cannot be deleted.

Data Portability: You can export your data in machine-readable formats.

Opt-out: You can opt out of non-essential communications.

7

Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. After account deletion:
  • Account information is permanently deleted within 30 days
  • Uploaded assets stored on our servers may be deleted
  • Assets stored on IPFS/Filecoin may persist due to the decentralized nature of these networks
  • Blockchain commitments remain permanently on the blockchain
  • Usage logs and analytics may be retained in anonymized form
8

Cookies and Tracking

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze service usage. You can control cookie settings through your browser, though disabling cookies may affect service functionality.
9

Third-Party Services

Our platform integrates with third-party services including:
  • IPFS and Filecoin for decentralized storage
  • Solana blockchain for commitments and NFTs
  • Cloud storage providers for watermarked assets

These services have their own privacy policies, and we encourage you to review them.

10

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
11

Children's Privacy

Certana is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have collected information from a child, we will delete it immediately.
12

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through prominent notices on our platform. Your continued use of Certana after changes constitutes acceptance of the updated policy.
13

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us through our support channels or email (contact@certana.net). We are committed to addressing your privacy concerns promptly.

By using Certana, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.

Back to Home