Privacy Policy

At Credmint Innovation Pvt. Ltd. we are committed to protecting the privacy, confidentiality, and security of personal and business data. This Privacy Policy explains how information is collected, processed, stored, shared, and protected when you access or use our website, applications, APIs, and fintech services.

By using www.credmint.ai, you agree to the practices described in this policy.

1. Information We Collect

1.1 Personal Data

• Name, email address, phone number
• Business name, designation, and contact details
• Address and communication details
• Government-issued identification documents (for KYC/KYB)

1.2 Financial & Business Data

• Bank and settlement information
• Transaction, payout, and reconciliation records
• Compliance, merchant, and onboarding documents
• Corporate expense and spending data

1.3 Technical & Usage Data

• IP address, device identifiers
• Browser and operating system details
• Log files and platform usage data
• Cookies and tracking technologies

1.4 AI & Automated Processing Data

• Fraud detection and prevention
• Risk profiling and transaction monitoring
• Compliance checks and analytics
• Financial insights and automation

2. Purpose of Data Processing

• Provide and operate fintech services
• Perform identity verification (KYC/KYB)
• Process payments, payouts, and settlements
• Prevent fraud and unauthorized activity
• Ensure regulatory compliance (RBI, AML, CFT)
• Improve platform performance and AI models
• Communicate service-related information

We do not sell personal data to third parties.

3. Legal Basis for Processing (GDPR-Aligned)

• Consent
• Contractual necessity
• Legal and regulatory obligations
• Legitimate business interests, including security and risk prevention

4. User Rights

• Access personal data
• Rectify inaccurate information
• Request erasure (where legally permitted)
• Restrict or object to processing
• Withdraw consent
• Request data portability

5. Automated Decision-Making & AI Transparency

Credmint uses AI-assisted systems for fraud detection, risk analysis, and compliance monitoring. These systems are designed to support human oversight and comply with applicable laws and RBI guidelines.

6. Data Sharing & Disclosure

• RBI-regulated banks and financial institutions
• Payment networks and settlement partners
• KYC, AML, and compliance service providers
• Cloud and technology infrastructure partners
• Government or regulatory authorities when legally required

7. RBI & Fintech Compliance

• Information Technology Act, 2000 & IT Rules
• RBI guidelines on payment systems
• AML / CFT regulations
• Cybersecurity and operational risk standards
• Data localization requirements

8. Data Security Measures

• Encryption at rest and in transit
• Secure APIs and access controls
• Role-based permissions
• Continuous monitoring and audits
• Periodic vulnerability assessments

9. Data Retention

Data is retained only for service delivery, legal and regulatory compliance, audit, and dispute resolution and is securely deleted or anonymized thereafter.

10. Cross-Border Data Transfers

Data transfers outside India are conducted with appropriate safeguards and contractual protections.

11. Children’s Privacy

Credmint does not knowingly collect personal data from individuals under 18 years of age.

Data Processing Agreement (DPA)

Roles of the Parties

• Data Controller: Customer or Merchant
• Data Processor: Credmint Innovation Pvt. Ltd.

Processor Obligations

• Process data lawfully and securely
• Ensure confidentiality
• Assist with data subject rights
• Notify data breaches as required by law

Cookie Policy

• Essential, performance, functional, and analytics cookies
• Used for security, experience, and performance
• Manageable via browser settings

13. Contact & Grievance Redressal

Credmint Innovation Pvt. Ltd.
https://www.credmint.ai
Email: Contact@credmint.ai