Privacy Policy

Last updated: 2026-03-02

ILIEV CONSULTING LLC is the data controller responsible for the processing of personal data in connection with the CertAvert service (the “Service”).

This Privacy Policy explains how personal data is collected, used, retained, and deleted when you use the Service.

1. Information We Collect

• Name and email address
• Account and authentication metadata
• Domains and configuration data you submit for monitoring
• Monitoring results, timestamps, and alert history
• Support conversations and messages
• Usage logs, security logs, and IP addresses

2. Purpose of Processing

Personal data is processed to operate, secure, maintain, and improve the Service, perform SSL/TLS monitoring, deliver alerts, provide customer support, prevent abuse, and comply with legal or regulatory obligations.

3. Legal Basis (GDPR)

For users in the European Economic Area, data is processed based on one or more of the following legal bases: performance of a contract, legitimate interests in operating and securing the Service, or compliance with legal obligations.

4. Data Sharing

Personal data is not sold. Data may be shared only with infrastructure, hosting, email, and monitoring providers strictly necessary to operate the Service, or when required by law.

5. Data Retention and Deletion

Domain Deletion

When you delete a monitored domain, the domain is removed from active monitoring immediately. Related data, including monitoring results, alert history, and logs, is retained for up to 30 days for security, audit, troubleshooting, and abuse-prevention purposes.

If the same domain is re-added within this 30-day period, the domain and its related monitoring data may be restored. After the 30-day retention period expires, all data associated with the deleted domain is permanently deleted.

Account Deletion

When you delete your account, access to the Service is disabled immediately and monitoring activities stop. Account data, including domains, support conversations, and related records, is retained for up to 30 days for security, audit, abuse-prevention, and legal purposes.

After this retention period, all account data is permanently deleted and cannot be recovered. During the retention period, you will not be able to log in or access the Service.

Support Conversations

Support conversations and related messages may be retained after resolution or deletion to ensure service quality, maintain audit trails, prevent abuse, and comply with legal obligations.

Support conversations are retained for up to 90 days after the last activity and are then permanently deleted.

6. Security

Reasonable technical and organizational measures are used to protect personal data against unauthorized access, disclosure, alteration, or destruction. No system can be guaranteed to be completely secure.

7. Your Rights (GDPR & CCPA)

Depending on your jurisdiction, you may have certain rights regarding your personal data, including the right to:

• Request access to personal data held about you
• Request correction of inaccurate or incomplete data
• Request deletion of personal data, subject to applicable retention requirements
• Request restriction of or object to certain processing activities
• Receive a copy of personal data in a portable format, where applicable

Requests may require identity verification and may be limited where data must be retained for security, audit, fraud prevention, or legal compliance. Requests are handled within the timeframes required by applicable law.

The Service does not sell personal data as defined under the California Consumer Privacy Act (CCPA).

8. Changes to This Policy

This Privacy Policy may be updated from time to time. Continued use of the Service after an update constitutes acceptance of the revised policy.

9. Contact

Privacy and data protection inquiries may be submitted through the Support section of the application.

© 2026 ILIEV CONSULTING LLC. All rights reserved.