Privacy notice

Last updated 27 September 2026

Who we are

Duke Security, Inc. (trading as Jestr), see the imprint. Contact: support@jestr.ai.

The free generator

What you type is sent to our server only to build the PDF and is not stored. Your draft is kept in your own browser (local storage) until you clear it. We record that a PDF was made, the certificate type and the number of register rows, not the content.

Accounts

We store your email, company and name, and the sites, certificates and client details you enter, so we can provide the service (contract). Data is stored with Amazon Web Services in Frankfurt (eu-central-1). We don't sell data or send your clients anything.

Client portal

Anyone with a site's portal link can see that site's certificates. Share it only with your client.

Usage statistics

We count page views and button clicks with a daily-changing pseudonymous id (a hash of IP address and browser, salted per day). No cookies are used for this and no third-party analytics. A session cookie is set only when you sign in.

Retention and your rights

Account data is kept while your account is open and deleted within 30 days of a request. Under UK GDPR you can ask for access, correction, deletion or a copy, and complain to the ICO (ico.org.uk). Server logs are kept for 30 days and pseudonymous usage events for 13 months.