Privacy & Data Ownership

1. Who owns what

• Students retain rights of access, use, and sharing over credentials issued to them.This means personal data rights under applicable law — not authority to alter or revoke official records.
• Institutions retain authority over issuance, accuracy, revocation, and lifecycle of credentials they issue.
• AcadCert is a custodian and verification provider. We do not claim ownership over academic credentials.

2. What students can do

• View and download credentials issued to them
• Verify authenticity using cryptographic validation
• Share credentials with employers or third parties of their choosing

Only authorised institutional issuers or platform administrators may modify, revoke, or supersede credentials.

3. What institutions can do

Institutions may issue, revoke, and supersede credentials, manage issuers and email domains, and view credentials under their authority.

They must ensure accuracy, maintain access controls, comply with data protection regulations, and provide students access to credentials issued in their name.

4. What AcadCert does

• Securely stores credentials and cryptographic materials
• Maintains verification service availability and integrity
• Provides audit logs for security and compliance
• Enforces role-based access controls
• Does not claim ownership or authority over academic credentials

5. Data we collect

6. How we use it

To provide credential issuance and verification, maintain security, generate audit trails, and support legitimate institutional requests. We do not sell or rent personal information.

Data is shared only with the issuing institution, when students choose to share, as required by law, or with service providers under strict confidentiality.

7. Contact

Questions about this policy? Contact your institution’s credential administrator or reach us at our contact page.

We may update this policy. Material changes will be communicated via email and posted within the platform.