Privacy Policy
01. Introduction
Credana is a verification-based reputation intelligence and trust infrastructure platform.
This Privacy Policy explains how Credana collects, uses, stores, processes, discloses, and protects information in connection with the Credana platform, verification systems, trust infrastructure services, reports, trust artifacts, operational workflows, and related services (collectively, the "Services").
By using the Services, you acknowledge this Privacy Policy.
02. Information We Collect
Credana may collect the following categories of information.
A. Information Provided Directly
- names
- email addresses
- phone numbers
- organization names
- professional information
- billing information
- onboarding information
- uploaded receipts, invoices, and verification documents
- experience submissions
- communications and support requests
B. Verification and Transaction Information
- receipt metadata
- invoice details
- transaction dates
- service categories
- payment information
- request-token metadata
- verification workflow records
- identity linkage signals
- operational verification records
C. Technical and Operational Information
- IP addresses
- browser information
- device information
- operating system information
- session metadata
- timestamps
- referral data
- interaction logs
- request logs
- workflow events
- audit events
D. Derived and System-Generated Information
- verification status
- confidence layers
- fraud indicators
- anomaly signals
- scoring metadata
- benchmark classifications
- report generation records
- trust artifact histories
- operational intelligence outputs
03. How Credana Uses Information
Credana may use information to:
- provide and operate the Services
- activate subscriptions and accounts
- verify service interactions
- process verification-linked experiences
- generate trust and reputation intelligence outputs
- maintain audit records
- support fraud prevention and operational integrity
- generate reports, badges, and trust artifacts
- maintain append-only operational records
- improve platform reliability and security
- support analytics and benchmarking
- comply with legal obligations
- enforce platform policies and agreements
04. AI and Automated Processing
Credana may use automated systems, AI-assisted processing, machine learning models, and rule-based workflows to support:
- receipt extraction
- invoice parsing
- categorization
- verification support
- anomaly detection
- fraud detection
- scoring support
- operational governance
- report generation support
- trust system integrity
Automated systems may produce incomplete, delayed, or imperfect outputs. Not all outputs are manually reviewed.
05. Aggregated and De-Identified Data
Credana may use aggregated, anonymized, de-identified, statistical, or derived information for:
- benchmarking
- analytics
- operational intelligence
- fraud prevention
- model calibration
- platform improvement
- trust system development
- research and development
Credana does not sell personal information in the ordinary meaning of selling customer lists for monetary compensation.
06. Information Sharing
Credana may share information with:
- hosting providers
- cloud infrastructure providers
- payment processors
- communications providers
- analytics providers
- security providers
- AI-assisted processing providers
- operational subprocessors
- professional customers using the Services where necessary for workflow functionality
Credana may also disclose information:
- where required by law
- to protect rights and security
- to investigate fraud or abuse
- during mergers, acquisitions, financing events, or corporate transactions
07. Audit Integrity and Record Retention
Credana operates as an audit-oriented trust infrastructure system. Credana may retain:
- append-only operational records
- audit logs
- verification histories
- legal acceptance records
- trust artifact histories
- scoring lineage
- dispute histories
- operational event records
Records may be retained for:
- operational integrity
- fraud prevention
- compliance
- dispute resolution
- legal defense
- auditability
- reproducibility
- trust system governance
Certain records may continue to exist even after account closure or subscription termination where necessary for operational, legal, audit, or integrity purposes.
09. Data Security
Credana uses reasonable administrative, technical, and organizational safeguards designed to protect information. No platform or transmission system is completely secure. Credana does not guarantee absolute security, uninterrupted availability, or lossless preservation of information.
10. International Processing
Information may be processed or stored in the United States or other jurisdictions where Credana or its service providers operate. By using the Services, you acknowledge that information may be transferred across jurisdictions with different legal protections.
11. Your Rights
Depending on your jurisdiction, you may have rights relating to:
- access
- correction
- deletion
- portability
- restriction
- objection
- withdrawal of consent
Credana may retain certain records where necessary for operational integrity, auditability, fraud prevention, dispute resolution, legal compliance, or legal defense purposes.
Requests may be submitted to legal@credana.io.
12. Children
The Services are not directed to individuals under eighteen (18) years of age. Credana does not knowingly collect personal information from children.
13. Third-Party Services
The Services may integrate with third-party systems and providers. Third-party services operate under their own terms and privacy policies. Credana is not responsible for third-party systems or practices.
14. Changes to this Privacy Policy
Credana may update this Privacy Policy from time to time. Updated versions become effective when published or otherwise communicated. Continued use of the Services after updates become effective constitutes acknowledgment of the updated Privacy Policy.