Privacy Policy

At Cred Trace ("we", "our", "us"), protecting your privacy and the confidentiality of your financial data is our highest priority. This Privacy Policy describes how we collect, process, secure, and retain personal information and financial documents (such as bank statements) when you interact with our website, use our automated bank statement analysis and credit intelligence software, or integrate our APIs.

1. Scope of This Policy

This policy applies to all users of Cred Trace services, including financial institutions, lenders, Non-Banking Financial Companies (NBFCs), fintech developers, credit underwriters, and individual customers whose financial documents are processed through our platform.

2. Information We Collect

In order to provide our automated financial statement parsing and fraud screening features, we collect and process several categories of information:

• Uploaded Financial Documents: PDF bank statements, scanned bank statements, transaction logs, e-statements, and images uploaded to our platform for parsing.
• Extracted Financial Data: Structured transaction histories, account numbers, account holder names, bank branch details, cash flow metrics, recurring income patterns, active EMI commitments, loan repayments, and cheque/payment bounce records.
• Document Metadata & Tampering Indicators: Technical metadata (such as authoring software, modification dates, and structure) and pixel-level digital markers extracted from documents to identify potential image tampering or document alteration.
• Account & Contact Data: Name, business email address, phone number, organization name, job title, API credentials, and billing information.
• Usage & Technical Data: IP addresses, browser types, operating systems, access logs, and referral URLs collected automatically when using our website or platform.

3. How We Process and Use Your Information

We process your data strictly to deliver our financial intelligence services. Specifically, we use the information to:

1. Convert raw and unstructured bank statement PDFs into clean, structured transaction records.
2. Identify salary credits, business revenue, and other recurring cash inflow streams to verify income.
3. Run automatic fraud scans, identifying anomalies such as altered values, duplicate entries, or metadata tampering.
4. Generate consolidated credit risk reports, including credit scoring assistance (such as the CredTrace score), debt-to-income indicators, and cash flow stability metrics.
5. Provide, maintain, and optimize platform performance, API endpoints, and customer support.
6. Ensure system security and prevent unauthorized access or platform abuse.

4. Data Security and Safeguards

Because our platform processes sensitive financial records, we enforce military-grade security controls:

• Encryption: All data is encrypted in transit using secure SSL/TLS protocols and encrypted at rest using industry-standard Advanced Encryption Standard (AES-256) algorithms.
• Database Isolation: We use multi-tenant database isolation models to prevent cross-contamination and ensure that your organization's data remains segregated.
• Access Control: Access to uploaded documents and parsing results is restricted to the uploading user or designated enterprise API credentials.
• Vulnerability Scans: We conduct regular security audits, vulnerability assessments, and system patching to protect against external threats.

5. Data Sharing & Disclosures

Cred Trace does not sell, rent, or trade your personal or financial data to advertisers or third-party marketers. Data is only shared in the following situations:

• Consented Credit Evaluation: We share analyzed financial reports with the specific lending institution, bank, or NBFC that initiated the transaction check, always subject to customer consent.
• Service Providers: We may share technical metadata with verified cloud hosting or infrastructure service providers who assist us in operating our platform, under strict non-disclosure terms.
• Legal Compliance: We may disclose information if required to do so by applicable law, regulatory authority, or court order.

6. Data Retention & Purging

We retain uploaded documents and extracted financial logs only as long as necessary to perform the requested analysis, provide reporting services, or as required by contract or local legislation. Enterprise partners can configure automated document retention and purging timelines via their account dashboard to ensure instant document deletion after parsing is completed.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in regulatory compliance, technology, or business practices. We will notify you of any material changes by updating the "Last Updated" date at the top of this page. We encourage you to review this page periodically.

8. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data protection rights, please contact our privacy compliance team at:

Email: admin@credtrace.in