Privacy Policy

Last updated: January 2025

1. Information We Collect

Watheeq collects information to provide secure blockchain certificate verification services:

Account Information

Organization name, administrator details, email addresses, and authentication credentials.

Certificate Data

Subject names, categories, issuance dates, and other certificate metadata required for verification.

Technical Information

IP addresses, browser information, device identifiers, and usage analytics for security and service improvement.

2. How We Use Your Information

Your information is used exclusively for:

  • Providing certificate issuance and verification services
  • Maintaining platform security and preventing fraud
  • Communicating important service updates
  • Improving platform functionality and user experience
  • Complying with legal obligations and regulatory requirements

3. Blockchain and Data Immutability

Certificate hashes are permanently recorded on blockchain networks for verification purposes. This data cannot be modified or deleted once recorded. Only cryptographic hashes (not personal information) are stored on the blockchain, ensuring privacy while maintaining verification integrity.

4. Data Sharing and Disclosure

Watheeq does not sell or rent personal information. We may share data only in these circumstances:

  • With your explicit consent
  • To comply with legal obligations or court orders
  • To protect our rights, property, or safety
  • With trusted service providers under strict confidentiality agreements
  • In connection with business transfers (mergers, acquisitions)

5. Data Security

We implement comprehensive security measures:

  • End-to-end encryption for data transmission
  • Secure authentication and access controls
  • Regular security audits and vulnerability assessments
  • SOC 2 compliance and industry-standard certifications
  • Incident response procedures and breach notification protocols

6. Data Retention

We retain personal information only as long as necessary for service provision and legal compliance. Account data is deleted upon termination, but blockchain-recorded hashes remain permanently for verification purposes. Users can request data deletion subject to legal and operational requirements.

7. Your Privacy Rights

Depending on your jurisdiction, you may have rights to:

  • Access and review your personal information
  • Correct inaccurate or incomplete data
  • Request data deletion (subject to limitations)
  • Object to certain data processing activities
  • Receive data in a portable format
  • Withdraw consent for optional data processing

8. International Data Transfers

Watheeq may process data in multiple jurisdictions to provide global services. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and adequacy decisions where applicable.

9. Cookies and Tracking

We use essential cookies for platform functionality and security. Optional analytics cookies help improve user experience. You can control cookie preferences through your browser settings, though disabling essential cookies may affect platform functionality.

10. Children's Privacy

Watheeq is designed for institutional use and does not knowingly collect personal information from children under 13. If we discover such collection, we will promptly delete the information and terminate the associated account.

11. Policy Updates

We may update this Privacy Policy to reflect service changes or legal requirements. Users will be notified of material changes via email or platform notifications. Continued use after updates constitutes acceptance of the revised policy.

12. Contact Information

For privacy-related questions, data requests, or concerns, contact our Data Protection Officer at privacy@watheeq.com or through our support channels. We will respond to inquiries within 30 days.