Privacy Policy

• Interpretation and Definitions
• Collecting and Using Your Personal Data
• Types of Data Collected
• Use of Your Personal Data
• Product Analytics
• Domain Registration Data
• Abuse Reports
• Retention of Your Personal Data
• Transfer of Your Personal Data
• Delete Your Personal Data
• Disclosure of Your Personal Data
• Security of Your Personal Data
• Children's Privacy
• Links to Other Websites
• Changes to this Privacy Policy
• Contact Us

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

Account means a unique account created for You to access our Service or parts of our Service.

Affiliate means an entity that controls, is controlled by or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.

Application refers to CertPing, the web application provided by the Company.

Company (referred to as either “the Company”, “We”, “Us” or “Our” in this Agreement) refers to SeAIONL Inc., 8 The Green, Ste B, Dover, DE 19901, USA.

Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.

Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.

Personal Data is any information that relates to an identified or identifiable individual.

Service refers to the Application or the Website or both.

Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.

Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

Website refers to CertPing, accessible from https://www.certping.com/

You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Depending on the features You use, it includes the following, which We use for the purpose given with each:

• Account data: Your email address, Your name and Your password, which We store only hashed and encrypted, or, if You sign in with another provider such as Google or Microsoft, the profile that provider shares with Us, such as Your name, email address, account identifier and profile picture. We use it to create, secure and manage Your Account.
• Referral attribution: the partner or referral code in a link You followed before signing up, which We record with Your Account so that the partner can be credited.
• Billing data: payments are processed by Stripe. You enter card details on pages hosted by Stripe, and We never receive or store Your card number. We give Stripe Your email address and Your organization’s identifier, and We keep Stripe’s identifiers for Your customer record, subscriptions, payments and invoices, their amounts and status, and the payment events Stripe sends Us. To tell You which card will pay a renewal, We read its last four digits and expiry date from Stripe. We use billing data to charge, invoice and refund You.
• Domain registration data: the registrant contact details described under Domain Registration Data, used to register and manage Your domain names.
• Trademark applications: the trademark owner’s name, entity type and address, a contact name, email address and phone number, the mark, its design image, the goods or services it covers and Your website, and the record of Your electronic signature: Your name, IP address, browser user agent, session identifier and the time You signed. We put them into an application document, store it with the design image, and email it to the independent attorney You choose, so that the attorney can prepare and file Your application. When You search for a trademark, We search Our own copy of the USPTO’s data; if it cannot answer, We send Your search term to a trademark data provider.
• DNS and email data: the DNS records of domains You host on CertPing’s nameservers, which Our secondary DNS provider also holds so that Your domains keep resolving; DMARC aggregate reports sent to the reporting address CertPing gives You, which contain the IP addresses and domains that sent email as Your domain and how many messages each sent; and the forwarding addresses You set up for a domain’s email, which We pass to the registrar that forwards the email. We do not store forwarded email. We use this data to serve Your DNS, show You who sends email as Your domains, and forward Your email.
• Certificates: the domain names, certificate requests and certificates We issue, renew or monitor for You. If CertPing manages a certificate’s private key for You, the key is kept in a key vault; if You choose to hold the key yourself, We give it to You once and do not keep it. Credentials You give Us to install certificates or to manage DNS with another provider are also kept in a key vault. We use them to issue, renew and install Your certificates.
• Monitoring and security checks: the websites You monitor and the email address that receives their alerts, and the domains You check for look-alikes, whose registration details We look up through public registration data services and a WHOIS data provider. We use them to alert You and to show You possible impersonation.
• AI assistant: the questions You type into the CertPing assistant, and the domain names in some look-alike scans, are sent to Microsoft’s Azure OpenAI Service, which answers them. Microsoft may process them in any region where it runs the service. We do not store Your conversations with the assistant. We use the assistant to answer Your questions about Your account.
• Support and contact requests: what You send through the contact form, which is emailed to Our team, and support tickets and their attachments, which We keep in Atlassian’s Jira Service Management. We use them to answer You.
• Emails We send: Your email address and the subject and content of each email We send You. We use them to send You account, renewal and security emails. Our email service provider records whether each email was delivered, and these delivery events help confirm that important messages reach You. The provider also records open and click events, such as whether an email was opened or a link in it was clicked. We do not use them to build a profile of You.
• Integrations: the addresses and secrets of the services You connect, such as Slack or Microsoft Teams webhook addresses and PagerDuty routing keys; the secrets are kept in a key vault. We use them to send Your alerts and incidents there.
• Rewards: when We issue You a gift card reward, We send Your email address to Tango Card, or show Giftbit’s reward page, which receives what Your browser sends it. We use them to deliver Your reward.
• Security and audit logs: the IP address and browser user agent of actions taken in Your Account, which We use to keep the Service secure and to show Your organization what was done.
• Usage Data, described below.

Legal bases

Where the GDPR or a similar law applies, We rely on the following legal bases:

• Performance of a contract with You: account data, billing data, domain registration data, trademark applications, DNS and email data, certificates, monitoring and security checks, the AI assistant, integrations, rewards, the emails We send about Your Account and orders, and support and contact requests.
• Compliance with Our legal obligations: the domain registration data that the law, ICANN and registries require Us to collect, keep or publish, and the billing records We must keep for tax and accounting purposes.
• Our legitimate interests in securing the Service, preventing fraud and abuse, crediting Our referral partners, measuring Our audience without cookies, and knowing whether Our emails reach You: security and audit logs, referral attribution, cookieless audience measurement, and email delivery and engagement events. You may object to this processing by contacting Us at privacy@certping.com, and to audience measurement with Privacy choices in the website footer. You can limit email open tracking by turning off automatic image loading in Your email client.
• Your consent: analytics cookies and similar storage where the law requires consent, as described under Audience Measurement and Product Analytics. You may withdraw Your consent at any time with Privacy choices in the website footer.

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When You access the Service from a mobile device, We may collect the type of device, its operating system and the browser You use. We may also collect information that Your browser sends whenever You visit our Service.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze Our Service. The technologies We use may include:

• Cookies or Browser Cookies. A cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of our Service. Unless you have adjusted Your browser setting so that it will refuse Cookies, our Service may use Cookies.
• Web Beacons. Certain sections of our Service and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity).

Cookies can be "Persistent" or "Session" Cookies. Persistent Cookies remain on Your personal computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close Your web browser.

The cookies and browser storage We use, what each is for and how long it lasts are listed in our Cookie Policy.

You can change your analytics choices at any time with Privacy choices in the website footer.

We use PostHog as a Service Provider to measure how the Website and the CertPing application are used. How it works depends on where You are, which We infer from Your browser's time zone, not from Your IP address.

Outside Europe. If Your browser’s time zone is outside Europe, PostHog analytics runs from Your first page view. It stores an analytics identifier in a cookie and in Your browser’s local storage, so that Your later visits are recognised, and records the pages You view, how long You stay on a page and how far You scroll, page load performance, the referring site, the campaign parameters of the link You arrived on (utm_source, utm_medium, utm_campaign, utm_content and utm_term), and a partner or referral code if the link carried one. On the Website and on the application’s sign-in, sign-up and pricing pages it also records which link, button or form You select. You can turn analytics off at any time by choosing Reject all in Privacy choices in the website footer. If Your browser sends Global Privacy Control or Do Not Track, We use only cookieless measurement and never set an analytics cookie.

In Europe. If Your browser’s time zone is in Europe, or does not show a region, PostHog runs without cookies until You choose Accept all. It records the same pages, actions and campaign information, but no cookie or other analytics identifier is placed in Your browser and no profile of You is created. PostHog combines Your IP address and browser user agent with a secret that changes every day into a server-side hash, so that the pages of one visit on one day can be counted together. In this mode PostHog removes Your IP address before the event is stored, and Your approximate location is taken from Your browser's time zone instead. When You follow a link from the Website to sign up, sign in or see pricing, the campaign parameters of the page You arrived on are added to that link so the visit keeps its campaign; nothing is stored in Your browser for this. You can object to this measurement at any time with Privacy choices in the website footer, and Reject all also turns it off. If Your browser sends Global Privacy Control or Do Not Track, We use only cookieless measurement and never set an analytics cookie.

IP address and location. When analytics runs with cookies (outside Europe, or after You choose Accept all), PostHog receives Your IP address, uses it to estimate Your approximate location (country, region and city), and stores the IP address with each analytics event. For Your first visit and Your most recent visit from another site, We record the campaign, the referring site and the landing page. If the link You arrived on carried an advertising click identifier, We record which kind it was (for example, a Google Ads click) but never its value. After sign-in, We associate events with an internal user identifier and organization identifier.

We also record named actions, such as starting a domain search, choosing a search result, running a look-alike check, viewing pricing, selecting a sign-up or other call-to-action link, searching the help center, opening a help answer, creating a monitor or requesting a certificate. These records carry categories, counts and the domain ending only, never a domain name or other text You type. When You send the contact form, We record that it was sent, whether it was delivered, and its topic, not its content.

We do not use PostHog session replay. When We record a selected link, button or form, We record its visible label and where it leads, never what You type into a field, and We do not record selections in places that repeat what You typed, such as domain search results. Before analytics events are sent, the Application removes URL fragments and unapproved query parameters and redacts properties that could contain passwords, authentication tokens, private keys, secrets, email addresses, or user-entered identifiers.

The Company may use Personal Data for the following purposes:

• To provide and maintain our Service, including to monitor the usage of our Service.
• To manage Your Account: to manage Your registration as a user of the Service. The Personal Data You provide can give You access to different functionalities of the Service that are available to You as a registered user.
• For the performance of a contract: the development, compliance and undertaking of the purchase contract for the products, items or services You have purchased or of any other contract with Us through the Service.
• To contact You: by email or telephone about updates or informative communications related to the functionalities, products or contracted services, including the security updates, when necessary or reasonable for their implementation.
• To provide You with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless You have opted not to receive such information.
• To manage Your requests: To attend and manage Your requests to Us.
• For business transfers: We may use Your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by Us about our Service users is among the assets transferred.
• For other purposes: We may use Your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Service, products, services, marketing and your experience.

We may share Your personal information in the following situations:

• With Service Providers: We may share Your personal information with Service Providers to monitor and analyze the use of our Service, to contact You. The Service Providers that process customer data for Us are listed on our Subprocessors page.
• For business transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company.
• With Affiliates: We may share Your information with Our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include Our parent company and any other subsidiaries, joint venture partners or other companies that We control or that are under common control with Us.
• With business partners: We may share Your information with Our business partners to offer You certain products, services or promotions.
• With other users: when You share personal information or otherwise interact in the public areas with other users, such information may be viewed by all users and may be publicly distributed outside.
• With Your consent: We may disclose Your personal information for any other purpose with Your consent.

When You register or transfer a domain name through CertPing, We collect the registrant contact details the domain needs: name, organisation, postal address, email address and phone number. We share them with the registrar and, through the registrar, with the registry for that domain ending, because ICANN's policies and the registry's rules require it.

Registration data is published through RDAP as ICANN's rules require. Where privacy is available for a domain ending, Your personal contact details are redacted from the public record; where a registry does not allow privacy, they may be published. See our RDAP terms for how CertPing’s registration data service works for domains for which CertPing is the registrar of record.

Once CertPing is accredited by ICANN as a registrar, for domains for which CertPing is the registrar of record, We will also deposit a copy of the registration data with a data escrow agent approved by ICANN, DENIC Services GmbH & Co. KG in Germany, as ICANN requires. The escrow agent stores it encrypted and releases it only to ICANN, so that Your domain can move to another registrar if CertPing can no longer serve it.

We keep registration data for as long as the registrar and ICANN's rules require, which can continue after a domain is deleted or transferred away.

When You report abuse, We keep what You send Us: Your name and contact details, the report and any attachments. We use them to investigate the report, to reply to You, to keep a record of what We did, and to meet Our legal obligations.

We may share the report with the registrar, the registry or law-enforcement authorities when that is needed to act on it. We do not give Your name or contact details to the domain's registrant unless You agree or the law requires it. We keep reports for as long as these purposes need and the law requires.

We retain Personal Data only for as long as is necessary for the purposes described in this Privacy Policy, including to provide the Service, to comply with Our legal, tax, accounting and regulatory obligations, to resolve disputes and to enforce Our agreements. To decide how long that is, We consider the nature of the data, the purpose for which We hold it, whether Your Account or the related domain name, certificate or order is still active, and the periods the law, ICANN or a registry requires.

When Personal Data is no longer required for those purposes, We delete or anonymise it or, where that is not yet possible, We keep it securely and do not use it for any other purpose.

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to-and maintained on-computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of Your jurisdiction.

Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.

The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.

Depending on where You live, You may have the right to access, correct, receive a copy of or delete the Personal Data We hold about You.

To exercise any of these rights, please contact Us at privacy@certping.com. We will assist You with Your request and respond within the period required by applicable law. We may need to verify Your identity before We act on a request.

An organization that holds a registered domain name cannot be closed until that domain name has been transferred to another registrar or is no longer registered.

We may retain certain information where We are required or permitted by law to do so, for example to complete an active domain registration, to meet Our legal, tax or accounting obligations, or to resolve disputes.

Business Transactions

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Other legal requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of the Company
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of Users of the Service or the public
• Protect against legal liability

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers.

If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent's consent before We collect and use that information.

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

If you have any questions about this Privacy Policy, You can contact us:

CERTPING® is a federally registered trademark of SeAIONL Inc. in the United States. The CertPing logo and other CertPing marks are trademarks of SeAIONL Inc. Other names and marks belong to their respective owners.

CertPing is a service of SeAIONL Inc., a Delaware corporation authorized to conduct business in Texas.

Use of this website and CertPing services is subject to our Terms and Conditions, including acceptable use of domains and DNS, our Privacy Policy and applicable product-specific agreements. By accessing or using the website or services, creating an account, or placing an order, you agree to the applicable terms. Personal information is handled as described in the Privacy Policy.

Some features are beta features: those labelled Beta, Preview or Available on request, and those available to an account only on request, as the Terms and Conditions define them. Availability may vary by account, plan, location, registry, integration, or third-party provider. CertPing may modify, limit, suspend, or discontinue beta features as described in the Terms and Conditions. Beta features are provided “as is” and “as available” to the fullest extent permitted by law. Warranty disclaimers and limitations of liability are contained in the Terms and Conditions.

To report abuse of a domain or DNS hosted by CertPing, see Report abuse.