Privacy Policy

Last updated: March 1, 2026

1. Information We Collect

We collect information you provide directly, including: name, email, phone number, credit card details (last 4 digits, bank name, card type, expiry), bank account details (account number, IFSC, branch), KYC documents (PAN, Aadhaar), and reward wallet information. We also collect usage data, device information, and log data automatically.

2. How We Use Your Information

We use your information to provide and maintain our services, process KYC verification, track reward points, send payment reminders, improve our platform, communicate service updates, and ensure security. We do not sell your personal data to third parties.

3. Data Storage and Security

All data is encrypted using 256-bit SSL encryption in transit and AES-256 encryption at rest. We store data on secure servers within India, compliant with RBI data localization requirements. We implement industry-standard security measures including regular audits and penetration testing.

4. Information Sharing

We do not sell, trade, or rent your personal information. We may share information only with: service providers who help us operate our platform (under strict confidentiality agreements), regulatory authorities when required by law, and in case of a merger or acquisition (with prior notice to users).

5. KYC Document Handling

PAN and Aadhaar documents uploaded for KYC verification are stored securely and used solely for identity verification purposes. Documents are processed by authorized personnel only and are not shared with any third party. You can request deletion of your KYC documents at any time.

6. Cookies and Tracking

We use essential cookies for authentication and session management. We may use analytics cookies to understand how users interact with our platform. You can control cookie preferences through your browser settings.

7. Your Rights

You have the right to: access your personal data, correct inaccurate information, request deletion of your account and data, export your data, opt out of marketing communications, and withdraw consent for data processing. To exercise these rights, contact us at privacy@cred.club.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we retain certain data for up to 5 years as required by financial regulations. Anonymized data may be retained for analytics purposes.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through the platform. Continued use of our services after changes constitutes acceptance.

10. Contact Us

For privacy-related questions or concerns, contact our Data Protection Officer at privacy@cred.club or write to us at CRED, Bangalore, Karnataka, India.