Privacy Policy

CertLock Technologies LLC ("Briely," "we," "us," or "our") provides software that helps individuals and organizations manage certifications, licenses, credentials, supporting documents, renewal dates, reminders, audit records, and optional public verification pages.

This Privacy Policy applies to information processed through the Briely website, application, account system, customer support communications, and related services.

The information we collect depends on how you use Briely. It may include:

• ✓Account information such as your name, email address, password credentials, account role, and company name
• ✓Optional mobile phone numbers and SMS consent records
• ✓Employee, professional, certification, license, credential, training, and compliance information entered by authorized users
• ✓Credential numbers, issuing organizations, issue dates, expiration dates, renewal information, notes, and status information
• ✓Documents and files uploaded to support credential records
• ✓Billing, subscription, transaction, and plan information processed through Stripe
• ✓Customer support communications and information you provide when contacting us
• ✓Technical and usage information such as IP address, browser type, device information, login activity, and feature interactions
• ✓Public verification settings and information selected by an account owner for public display

We collect information from several sources, including:

• ✓Directly from you when you create an account, start a trial, subscribe, update settings, upload records, or contact us
• ✓From account owners and administrators who enter employee or workforce credential information into Briely
• ✓Automatically through the operation, security, and technical functioning of the platform
• ✓From service providers that support payments, communications, hosting, storage, authentication, and platform operations

We may use information to:

• ✓Provide, operate, maintain, and secure the Briely service
• ✓Create and manage user, personal, and company accounts
• ✓Organize credential records, documents, expiration dates, and account activity
• ✓Send service-related emails, reminders, security notices, and account communications
• ✓Send optional SMS reminders and service-related notifications when a user has consented
• ✓Process subscriptions, billing, payments, cancellations, and plan changes
• ✓Provide customer support and respond to requests
• ✓Enable optional public verification pages controlled by account owners
• ✓Prevent fraud, misuse, unauthorized access, and security incidents
• ✓Diagnose technical issues and improve platform reliability, usability, and performance
• ✓Comply with legal obligations and enforce our agreements

Organizations using Briely may enter information about employees, administrators, contractors, or other professionals. The organization or account owner determines what information is added and how that information is used within the account.

Account owners and authorized administrators are responsible for ensuring that they have an appropriate legal basis and authority to enter, manage, upload, and share information relating to other individuals.

When Briely processes this information on behalf of a customer, the customer controls the underlying records and Briely processes the information to provide the requested service. Individuals with questions about records entered by their employer or another organization should generally contact that organization first.

SMS notifications are optional and are not required to create an account, start a trial, subscribe to Briely, or use Briely's core features. Users may use Briely without providing a mobile phone number or consenting to SMS messages.

If you choose to enable SMS notifications in your account settings, Briely may use your mobile phone number to send notifications related to your account, including certification expiration reminders, license renewal reminders, compliance alerts, and other service-related messages.

Providing a mobile phone number alone does not enroll you in SMS notifications. Enrollment requires a separate opt-in action, including enabling SMS reminders, reviewing the SMS disclosure, and checking the SMS consent checkbox.

You may opt out at any time by replying STOP to a message or by disabling SMS reminders in your account settings. Message frequency varies based on account activity, upcoming expiration dates, and compliance events. Message and data rates may apply. Reply HELP for assistance.

Briely does not sell mobile phone numbers or share SMS consent information with third parties for their own marketing purposes.

Briely includes an optional public verification feature that allows company account owners to share selected certification and license information through a public-facing page. When enabled, information displayed on that page may be viewed by anyone with access to the verification link.

The account owner controls whether public verification is enabled and is responsible for the accuracy, authorization, and appropriateness of information made publicly available. Public verification can be disabled by the company owner.

Users should not publish sensitive personal information, private documents, government identification numbers, financial information, or other information that is not necessary for the intended verification purpose.

Briely may use cookies and similar technologies that are necessary to authenticate users, maintain sessions, remember account preferences, protect the platform, and support core application functionality.

Browser settings may allow you to block or delete cookies. Disabling cookies that are necessary for authentication or account functionality may prevent parts of Briely from working properly.

We do not sell personal information. We may share information only as reasonably necessary in the following circumstances:

• ✓With service providers that help us operate hosting, databases, storage, payments, email, SMS, authentication, analytics, security, and customer support
• ✓With authorized users within the same company or account according to their assigned roles and permissions
• ✓Through a public verification page when the company owner has enabled that feature
• ✓When required to comply with law, legal process, court order, or a valid government request
• ✓When reasonably necessary to investigate fraud, security threats, misuse, or violations of our agreements
• ✓In connection with a merger, financing, acquisition, sale of assets, reorganization, or similar business transaction, subject to appropriate confidentiality protections
• ✓With your direction, authorization, or consent

Briely relies on trusted third-party providers to operate the service. These providers may process limited information on our behalf according to their services and contractual terms.

• ✓Supabase for database and document storage infrastructure
• ✓Stripe for subscription billing and payment processing
• ✓Twilio for SMS message delivery
• ✓Resend and Google Workspace for email delivery and business communications
• ✓Vercel for website and application hosting

Payment card details are submitted to and processed by Stripe. Briely does not directly store complete payment card numbers.

We retain information for as long as reasonably necessary to provide the service, maintain account and transaction records, comply with legal obligations, resolve disputes, prevent fraud, enforce agreements, and support legitimate business operations.

Retention periods may vary depending on the type of information, the status of the account, legal requirements, security needs, and the purpose for which the information was collected.

When an account or company is scheduled for deletion, Briely may provide a limited recovery period before permanent deletion is completed. Some information may remain in secure backups or legal and transaction records for a limited period where reasonably necessary or required by law.

Briely uses administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These measures include access controls, authentication, restricted storage, and trusted infrastructure providers.

No method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we take reasonable steps designed to protect the information entrusted to us.

Users are responsible for maintaining the confidentiality of account credentials and for promptly notifying Briely of suspected unauthorized access.

Depending on your location and applicable law, you may have rights concerning your personal information. These may include the right to request access, correction, deletion, restriction, portability, or information about how personal information is used and shared.

• ✓Update certain account information through your account settings
• ✓Disable optional SMS reminders or reply STOP to opt out
• ✓Control whether a company public verification page is enabled, if you are the company owner
• ✓Request account or company deletion through available account controls
• ✓Contact Briely to ask questions or submit a privacy request

We may need to verify your identity and authority before completing a request. Certain information may be exempt from a request or retained where permitted or required by law.

Briely will not discriminate against you for exercising a privacy right provided by applicable law.

California residents may have additional rights under applicable California privacy law, including rights to know, access, correct, or delete certain personal information and to receive information about how personal information is collected, used, and disclosed.

Briely does not sell personal information and does not share personal information for cross-context behavioral advertising. Briely also does not knowingly sell or share the personal information of individuals under 16 years of age.

Whether a particular California privacy law applies may depend on legal thresholds and the circumstances of the processing. Eligible requests may be submitted using the contact information below.

Briely is operated from the United States. If you access Briely from outside the United States, your information may be processed and stored in the United States or other locations where our service providers operate.

Privacy laws in those locations may differ from the laws in your country. Where required, we will use appropriate measures for international data processing and transfers.

Briely is intended for businesses, professionals, and adults and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13.

If you believe a child has provided personal information to Briely without appropriate authorization, contact us so we can review and address the request.

You are responsible for ensuring that information you enter into Briely is accurate, appropriate, and lawfully obtained. You must have the right and authority to store, manage, upload, and share employee, contractor, credential, or professional information.

You are also responsible for configuring user permissions, protecting login credentials, reviewing public verification settings, and removing information that should no longer be retained or displayed.

We may update this Privacy Policy from time to time to reflect changes to Briely, our practices, service providers, or legal requirements. When we make changes, we will update the "Last updated" date shown at the top of this page.

If changes are material, we may provide additional notice through the platform, by email, or through another appropriate method. Continued use of Briely after an updated policy becomes effective is subject to the revised policy.

Questions, privacy requests, and concerns regarding this Privacy Policy may be sent to: