Privacy Policy
Last Updated: 30/06/2026
Webprofusion Pty Ltd, operators of the certifytheweb.com service are committed to providing quality services to you and this policy outlines our ongoing obligations to you in respect of how we manage your Personal Information. We have adopted the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (the Privacy Act). The National Privacy Principles govern the way in which we collect, use, disclose, store, secure and dispose of your Personal Information. A copy of the Australian Privacy Principles may be obtained from the website of The Office of the Australian Information Commissioner at www.aoic.gov.au
This privacy policy relates to:
- the
https://certifytheweb.comandhttps://dash.certifytheweb.comservice - the
https://api.certifytheweb.comAPI - the Certify Certificate Manager, Certify Management Agent and Certify Management Hub applications.
- the Certify Dashboard service
- the Certify DNS service
Note: The applications make use of the services provided by Certificate Authorities (e.g. Let's Encrypt - https://letsencrypt.org) and their privacy policy applies if you use this software to request certificates through their service. You may also choose to use other Certificate Authority services and each service will require you to agree to their own terms and conditions.
What is Personal Information and why do we collect it?
Personal Information is information or an opinion that identifies an individual. Examples of Personal Information we may collect include: names, addresses, email addresses, and phone numbers.
This Personal Information is obtained in many ways including correspondence, by telephone, by email, via our website certifytheweb.com, from other publicly available sources and from third parties. We do not guarantee website links or privacy policies of authorised third parties.
We collect your Personal Information for the primary purpose of providing our services to you and marketing. We may also use your Personal Information for secondary purposes closely related to the primary purpose, in circumstances where you would reasonably expect such use or disclosure. You may unsubscribe from our mailing/marketing lists at any time by contacting us in writing.
When we collect Personal Information we will, where appropriate and where possible, explain to you why we are collecting the information and how we plan to use it. During the normal use of the Certify The Web.com services (Certify Certificate Manager and related products), Webprofusion Pty Ltd (via the service/app) may also collect the following information:
-
Managed Certificate status reports (dashboard reporting). The default setting of the app is to send these reports to our API as part of the normal certificate request process, this setting can be disabled within the app. They contain information about your Server Name, Operating System, App Version, .Net Version, a unique instance ID and the Managed Certificate details for the certificate being renewed. This information includes the Primary Contact Email used when registering your account with the Certificate Authority. We primarily use these reports to notify you of failed renewals, to provide you with technical support and to present summary information to you in the certifytheweb.com Dashboard dashboard feature. Status Reports are periodically deleted from our reporting database, aggregated information may be retained for reporting purposes.
-
If the Config Check Proxy API is enabled in the app, the availability and configuration of your site is tested by sending a request to our server to see if it can access your site. This helps avoid unnecessary rate limiting for failed domain validations.
-
Background service crash reports are sent to us automatically. These may share your Primary Contact Email address with us so we are able to alert that there may be a problem.
-
You may also optionally share UI crash reports and feedback with us when prompted. This may include your email address if you provide it.
-
The IP address of the server you use the app on may be indirectly sent to us as part of status reports, proxy API calls.
-
We keep standard web server logs, these report accesses to our API and website.
In addition, if enabled via the in-app setting, telematics (app event reporting) may report app startup and UI events to us via the Microsoft Application Insights system. These reports include your IP address, Operating System version, .Net Framework version.
When making calls to our API from the app or browsing our website the traffic may be sent through Cloudflare services, this in turn means your public IP address is shared with them as well as any http requests to our API etc proxied through their service.
If you register a profile on https://certifytheweb.com using our reporting dashboard feature, to purchase a license key or begin a cloud licensed subscription, we collect the following information (some of which is optional):
- First Name
- Last Name
- Organisation (optional)
- Country
- Phone Number (optional)
- Email Address
- Password for your certifytheweb.com account. We cannot decrypt this and store this as a "salted"+hashed value (HMACSHA256, PBKDF2)
If you create a cloud managed license subscription (e.g. via Microsoft Azure etc) we will store the basic information about the cloud subscription (provider, subscription identifier) and associate it with your license key information.
Storage and Security of Personal Information
The data collected during creation of your certifytheweb.com account is held in a private database, access to this database is strictly limited within our organisation. No data from this database is communicated with any third parties. Data is physically stored on services operated by Amazon Web Services in Australia.
Your Personal Information is stored in a manner that reasonably protects it from misuse and loss and from unauthorized access, modification or disclosure. When your Personal Information is no longer needed for the purpose for which it was obtained, we will take reasonable steps to destroy or permanently de-identify your Personal Information. Most of the Personal Information is or will be stored and kept by us for a minimum of 7 years in order to meet our financial reporting requirements as a company.
Third Parties
Where reasonable and practicable to do so, we will collect your Personal Information only from you. However, in some circumstances we may be provided with information by third parties. In such a case we will take reasonable steps to ensure that you are made aware of the information provided to us by the third party.
Disclosure of Personal Information
Your Personal Information may be disclosed in a number of circumstances including the following:
- Third parties where you consent to the use or disclosure; and
- Where required or authorised by law.
We do not share your information with third parties other than through the normal use of the app services stated above (Let's Encrypt and other ACME CAs you use, Microsoft [Application Insights], Cloudflare).
We reserve the right to include your Company Name on our website to promote which customers use our service.
Access to your Personal Information
You may access the Personal Information we hold about you and to update and/or correct it, subject to certain exceptions. Edits can be made through the certifytheweb.com portal or requested in writing. We will not charge any fee for your access request, but may charge an administrative fee for providing a copy of your Personal Information. In order to protect your Personal Information we may require identification from you before releasing the requested information.
Maintaining the Quality of your Personal Information
It is important to us that your Personal Information is up to date. We will take reasonable steps to make sure that your Personal Information is accurate, complete and up-to-date. If you find that the information we have is not up to date or is inaccurate, please advise us as soon as practicable so we can update our records and ensure we can continue to provide quality services to you.
Policy Updates
This Policy may change from time to time and is available in the Trust Center published on our website.
Privacy Policy Complaints and Enquiries
If you have any queries or complaints about our Privacy Policy, or the information we collect and why, please contact us.