Privacy Policy

1. Introduction

CredaiCO ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our services. By accessing and using CredaiCO, you acknowledge that you have read, understood, and agree to be bound by all the provisions of this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide to us, including:

• Account information (name, email address, password)
• Profile information (address, phone number)
• Credit reports and financial documents you upload
• Payment information (processed securely through Stripe)
• Communications and support requests
• Survey responses and feedback

2.2 Information Collected Automatically

When you use our services, we automatically collect certain information:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, features used)
• Cookies and similar tracking technologies
• Location information (if permitted)
• Log data (access times, pages viewed, referral sources)

2.3 Information from Third Parties

We may receive information about you from third parties, including:

• OAuth providers (Google, GitHub) for authentication
• Payment processors (Stripe) for transaction information
• Analytics providers for usage patterns

3. How We Use Your Information

We use the information we collect for various purposes:

• Providing and improving our services
• Processing transactions and sending related information
• Sending promotional communications (with your consent)
• Responding to your inquiries and providing customer support
• Analyzing usage patterns and improving user experience
• Detecting, preventing, and addressing fraud and security issues
• Complying with legal obligations
• Personalizing your experience

4. Data Security

We implement comprehensive security measures to protect your personal information:

• AES-256 encryption for data in transit and at rest
• Secure HTTPS connections for all communications
• Regular security audits and penetration testing
• Access controls and authentication mechanisms
• Secure document storage with automatic expiration
• Employee training on data protection practices

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With service providers who assist us in operating our website and conducting our business
• When required by law or to protect our legal rights
• In connection with a merger, acquisition, or sale of assets
• With your explicit consent
• To prevent fraud, security issues, or other illegal activity

6. Your Rights and Choices

6.1 Access and Correction

You have the right to access, review, and correct your personal information. You can update your account information through your profile settings.

6.2 Data Deletion

You may request deletion of your account and associated data. We will process such requests within 30 days, except where we are required to retain the information by law.

6.3 Marketing Communications

You can opt out of promotional emails by clicking the "unsubscribe" link in any email or updating your preferences in your account settings.

6.4 Cookies

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our services.

7. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. Uploaded credit reports are automatically deleted after 90 days. You can request earlier deletion at any time.

8. GDPR and CCPA Compliance

8.1 GDPR (European Users)

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to lodge a complaint with your local data protection authority.

8.2 CCPA (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

CredaiCO is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete such information promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of our services following the posting of revised Privacy Policy means that you accept and agree to the changes.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at: