How CertDrop handles order, delivery, payment, and support data.

Information we collect

• Order details: email address, device UDID, order ID, payment provider, order status, delivery status, and timestamps.
• Support details: messages, screenshots, error descriptions, and replies sent through support or email.
• Delivery email records: whether an order email was sent successfully or failed, so support can troubleshoot missing delivery emails.
• Payment status: payment confirmation, invoice identifiers, checkout status, and provider references.
• Security records: basic checkout and server logs used to prevent fake orders, payment abuse, and service attacks.

How we use information

• Process orders and verify payment status.
• Prepare and deliver certificate-related files.
• Send delivery, support, warranty, and order emails.
• Help customers troubleshoot install or delivery issues.
• Detect fake details, repeated unpaid checkout attempts, abuse, fraud, or security problems.
• Improve checkout, support, and site reliability.

Payment and third-party providers

CertDrop may use payment, email, hosting, security, and infrastructure providers to operate the service. These providers process data needed for checkout, delivery, support, security, and reliability.

Card details are processed by the card payment provider. Crypto checkout details are processed by the crypto payment provider. CertDrop stores payment status and provider references, not full card details.

UDID and certificate delivery data

Your device UDID is used to prepare certificate profile files for the submitted device. Because this is necessary for delivery, orders cannot be processed without a valid UDID.

Delivery links and files may be protected, rotated, expired, or restricted to prevent unauthorized access and abuse.

Website improvement

CertDrop may use basic website measurements to understand whether checkout, support, and delivery pages are working correctly. CertDrop does not sell customer order data.

Retention and deletion

CertDrop keeps order, delivery, support, and payment records as long as needed for service operation, warranty handling, fraud prevention, legal/accounting needs, and dispute resolution.

You may contact support to ask about your order data. Some records may need to be retained when required for payment records, abuse prevention, chargeback handling, or security logs.

Security

CertDrop uses HTTPS, access controls, private server administration, provider security features, and limited operational logs to protect the service. No online service can guarantee perfect security, but we aim to keep access limited to what is needed to operate and support the product.