1. About TestCert

TestCert is a cloud-based SaaS platform for managing industrial test certificates — including Mill Test Certificates (MTCs), Certificates of Conformance, NDE reports, and related quality documents — developed and operated by Techgate Solutions Pvt Ltd ("Techgate", "we", "us", or "our"), with offices in India and the USA. Our website is testcert.co.

2. Information We Collect

We collect information you provide when you register and use TestCert:

Account details: name, business email address, company name, role
Organisation and supplier profile data
Certificate documents, material test records, NDE reports, and related technical data you upload
Audit log entries generated by your activity on the platform
Usage data: pages visited, actions taken, timestamps
Device and browser information for security purposes

We use email OTP (one-time password) for authentication. We do not store passwords.

3. How We Use Your Information

To provide, operate, and maintain the TestCert platform
To authenticate users and enforce role-based access controls
To maintain audit trails as required by your industry standards
To send transactional emails (OTP codes, notifications)
To improve platform functionality and diagnose technical issues
To comply with applicable law and regulatory requirements

We do not sell your data to third parties. We do not use your certificate data for advertising purposes.

4. Data Retention

Certificate records for structural, pressure, and safety-critical equipment are retained for a minimum of 25 years in accordance with applicable industry standards (ASME, EN, API, and related codes). Other account and usage data is retained for as long as your account is active or as required by law. You may request deletion of non-regulatory data by contacting us.

Website analytics data is retained for a fixed period instead — see section 9.

5. Data Security

All data is encrypted in transit using TLS 1.3 and at rest using AES-256. Access is controlled by a five-role permission model (Super Admin, Org Admin, Quality Manager, Inspector, Read-Only Viewer). Every data access and modification generates an immutable audit log entry. We apply tenant isolation — your organisation's data is never accessible to another organisation.

6. Sharing of Information

We may share your information only in the following circumstances:

With cloud infrastructure providers (hosting, storage, email delivery) under strict data processing agreements
With your authorised users and supplier/buyer counterparts as directed by your account administrators
When required by law, court order, or governmental authority
In connection with a merger, acquisition, or sale of business assets (with prior notice to users)

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of data not subject to regulatory retention requirements
Object to or restrict certain processing activities
Receive a portable copy of your data

To exercise these rights, contact us at privacy@testcert.co.

8. Cookies

Inside the TestCert application we use only essential cookies required for authentication and session management. We do not use tracking or advertising cookies there.

Our public marketing website (testcert.co) is different: it loads Google Tag Manager, which sets Google Analytics cookies. Section 9 explains what is measured, by whom, and for how long.

9. Website Analytics

We measure how our public website is used, so that we can see which pages people read and which calls to action work. Two systems are involved.

Our own log-based analytics.A program we host on our own servers reads the web server's request log. Nothing is sent to a third-party analytics provider. For each request it records the page requested, the time, the response status, the referring page, the browser, and the visitor's IP address.
Full IP addresses are retained. We keep the complete IP address of a visitor, not a shortened or hashed one, for up to 395 days. It is used to count unique visitors, to work out their country and city, and to detect abuse. When that period ends the address is deleted.
No cookies, no cross-site tracking. This system sets no cookies, builds no profile of you, and does not follow you to other websites.
In-page events.Button clicks and form interactions are recorded by a small script served from our own domain and sent back to our own server. These events are kept for up to 400 days. The script records nothing from a browser that has "Do Not Track" or "Global Privacy Control" switched on.
Google Analytics.The marketing website also loads Google Tag Manager, which sends page-view and campaign measurement data to Google Analytics (measurement ID G-07Q0S6L90P). That tag also carries Google's advertising attribution settings, so advertising signals may be shared with Google's advertising services. Google processes that data under its own privacy terms.

Alongside the IP address, our own analytics keeps a keyed hash of it, so that a returning visitor can be recognised for 30 days, and groups the pages of a single visit for 7 days. Neither is tied to a TestCert account.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users by email and display a notice on login. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

11. Contact

Techgate Solutions Pvt Ltd
Email: privacy@testcert.co
Website: testcert.co