Legal
Credential Sharing and Verification Notice
Effective
Current website and YSUITS ID users, people asking about planned YCertificate services, and the conditions that apply before a YSUITS credential-sharing or verification service is introduced. This notice does not announce an available credential product.
All privacy documents and request options
Current scope and contact
YSUITS is the name used for the website and services. YCertificate and YSUITS-hosted credential issuance, public credential profiles, and credential verification are not currently offered. A description of a planned service does not create a credential record or make a credential publicly searchable.
This notice explains the current position and the privacy conditions for introducing those services. It does not represent that profile visibility settings, sharing controls, verification pages, or withdrawal controls are already available. For a question or privacy request, contact support@ysuits.com.
Authority and responsibilities before issuance
Before introducing a credential service, the applicable service information must identify who issues the credential, who determines the purpose of the underlying record, what information is needed, and what authority permits its use and disclosure. A service account, an upload, or membership in an organization does not by itself authorize public disclosure.
An issuer may be responsible for the source record, accuracy, validity, expiration, and revocation of a credential. Those responsibilities must be distinguished from the handling of a holder account or an optional public profile. The relevant service terms and privacy information must explain that distinction before the service is used.
Minimum disclosure and sharing
Any future public sharing or verification must have appropriate authorization and a defined purpose. The service must explain the exact information disclosed, the audience, and how access is authorized before publication. Disclosure must be limited to the information necessary for the approved purpose, such as an authorized holder name, issuer, credential description, relevant dates, and validity status.
Government identifiers, birth dates, private contact details, underlying assessments, and account credentials must not be included in public proof merely because they appear in an issuer record. A link that is difficult to guess is not the same as confidential access. Any future offering must explain its access restrictions, search visibility, and available correction or withdrawal process accurately.
Correction, withdrawal, and integrity records
A request to correct a source record, revoke an award, or withdraw public sharing can have different effects. Before a credential service is introduced, its information must explain who can authorize each action and any records that must remain for a lawful issuance, dispute, or integrity purpose.
Removing public access cannot guarantee removal of copies, screenshots, or records already held independently by a recipient. Privacy withdrawal must not be described as proof that a qualification was revoked, and revocation must not be described as erasure of all personal information.
Student records and other protected information
A school-supplied credential or other protected record requires the applicable authority for its use and disclosure. A general privacy acknowledgement or a label describing information as directory information is not permission to publish every educational record. Required institutional instructions, notices, permissions, and restrictions must be resolved before the relevant service is enabled.
Do not send student records, government identifiers, assessment files, or other confidential credential evidence through ordinary support email to seek issuance or verification of a service that is not offered.
Requests about information already provided
Contact support@ysuits.com if you believe YSUITS has received credential information without the required authority, or to ask about information associated with an existing YSUITS account. Describe the relevant service and requested action without including unnecessary sensitive documents. We review the information, verify identity and authority as appropriate, and coordinate with the responsible organization where needed.
Receipt of a message begins review; it does not confirm credential verification, withdrawal, correction, or deletion. The applicable website, account, product, and retention notices also apply to information actually handled through those services. Any future credential offering must identify its effective privacy information before use.