Privacy notice

How Validicate handles data

Validicate is operated by Acadasco. It exists to let anyone check a learning credential and to let the people who earned credentials keep and share them.

What we hold and why

• Credential records, pushed by issuers: the holder's name and email address, the title, the issuer, the dates, the evidence summary (completion date, hours, lessons) and the issuer's signature. The issuer is the controller for the fact of issuance; Validicate holds the record so it can be verified independently.
• Holder accounts: your email address, the name, handle and headline you enter, and which credentials you chose to show. You create an account by signing in with a magic link; there is no password.
• Technical logs for security and reliability, kept for a short period.

What is public

• A verification page is reachable by its code, which carries 80 random bits and is not listed anywhere. It shows the holder's name, the title, the issuer, the dates and the evidence, never the email address.
• A profile is unlisted until its holder publishes it, and shows only the credentials the holder marked visible.

Your rights

You can hide any credential from your profile or unpublish the profile at any time. To delete your account, or to ask about a credential record, write to the operator at privacy@acadasco.com. Removing a credential record itself is a decision of the issuer, since it is the issuer's statement; revoked and expired credentials stay verifiable as such.

Where

Data is stored in the European Union. Sign-in emails are sent through Acadasco's email service.