Privacy notice

1. Who is responsible

EduChain Inc. operates ClassCore. We decide how account registration, security, support and our direct communications are handled. An issuer normally decides why it creates an award and which learner information it includes. For that issuer-controlled information, we provide the service on its instructions, subject to the applicable agreement. A learner’s own account and Academic Passport choices are separate from an issuer’s award decision.

For a question about an award’s accuracy or the issuer’s reason for issuing it, contact the issuer. For your ClassCore account or our own processing, contact privacy@classcore.io. We will help route verified requests when responsibilities overlap.

2. What we process and where it comes from

We receive names, email addresses, country, organisation details, role, login and consent records from account holders and applicants. Issuers provide recipient details, achievement text, dates, certificate artwork, optional evidence and document-request data. Learners may provide profile, acceptance, support and sharing choices. We also process delivery events, verification views, IP addresses, browser details, security logs and support messages. Some information comes from an institution or an integration it authorises.

3. Why we process it

We use this information to create and protect accounts, review issuer authority, run trials and usage limits, issue and sign credentials, deliver email, provide the learner’s Academic Passport, show public verification, answer support requests, detect abuse, meet legal duties and keep audit records. Depending on the activity and location, the basis may be the service contract, the issuer’s instructions, a legal duty, a legitimate interest in service security or consent where required. We do not sell learner information or use education records for targeted advertising.

4. What a public credential reveals

A person with a public credential link can see the recipient’s name, award, issuer, issue and expiry dates, current status and downloadable certificate. The certificate and signed credential file may contain more issuer-supplied information. A shared link or preview may be copied or cached by others. We do not publish recipient email addresses on the ordinary verification summary. Issuers must avoid sensitive public fields and give learners the notices and choices required by law.

5. Who receives information

Authorised users at the relevant issuer can see information permitted by their role. Learners can see records linked to them. Public verifiers see only the public credential view. We use Hetzner for application infrastructure, AWS for cryptographic key operations, Postmark for transactional email and Cloudflare Turnstile for signup-abuse checks. These providers receive only the information needed for their task: for example, Postmark receives delivery addresses and message content, while Turnstile receives browser and network signals. No payment gateway is active in this release. We may also disclose information when required by valid legal process or necessary to protect the service and users.

6. Countries and transfers

People in many countries can apply to use ClassCore. Information may be processed outside their country by us or our providers. A country choice on a form is not a promise of local data hosting, accreditation or legal availability. A specific hosting region or transfer arrangement must be agreed for an institutional deployment when required. We will use safeguards required by applicable law for international transfers.

7. Retention and credential continuity

We keep account and issuer records while needed to provide the service, meet legal duties and resolve security or support issues. A trial or subscription ending pauses new issuance but does not automatically delete valid issued credentials: we retain the minimum record needed to keep their hosted status and verification available. An authorised correction, revocation or valid deletion request is different and can change or remove the public record. Verification links and copies already shared with others cannot always be recalled. Protected backups rotate under the applicable retention schedule; audit or legal records may be retained where required. Institutional agreements can set more specific return and deletion rules.

8. Cookies, security and rights

Essential cookies maintain sign-in and application sessions; a local browser preference remembers display theme. We use request logs and Turnstile to protect public forms. We do not use advertising trackers in this service. We use access controls, encrypted transport, signing keys, audit records and backups, but no online service is risk-free.

Depending on where you live, you may ask to access, correct, export or delete your information, object to or restrict some uses, or complain to a regulator. We may need to confirm your identity. For issuer-controlled award data, we may refer your request to the issuer and help it respond; for ClassCore-controlled account data, contact us directly. A valid deletion request can end hosted verification, but cannot erase copies another person already downloaded.

9. Children and schools

Independent self-service issuers must be adults and may issue only to adult learners. Schools use a separate institution-approval process; they must establish the required authority, notices, safeguarding and minor-data controls before live student data is processed. A school account or learner access for a minor does not remove the school’s legal duties. Children should not use independent-issuer signup.

10. Changes and contact

We will update this notice when the service or its data practices materially change and show the new effective date. Questions and rights requests go to privacy@classcore.io. See the service terms and ClassCore website privacy notice for the wider ClassCore services.