🔒 Privacy

Privacy policy

Last updated: January 2025

Introduction

CredizZ ("we", "our") is committed to protecting your privacy. This privacy policy explains how we collect, use and protect your personal information when you use our financing simulation platform.

By using CredizZ, you accept the practices described in this policy.

1. Information we collect

When you use the platform, we collect several kinds of data that our simulation and file-management services need in order to work.

A. Identifiable personal information

  • Identity: Last name, first name, email address, phone number.
  • Professional: Role (manager, broker, introducer), company, company registration number where it applies.
  • Supporting documents: Identity documents and proof of address, stored securely.

B. Financial and wealth data

Accurate financing simulations require us to process sensitive data:

  • Household income and expenses.
  • Details of property and financial assets.
  • Information on current loans (outstanding balance, monthly payments).
  • Tax notices and bank statements uploaded for review.

C. Technical and browsing data

  • IP address, browser type and device.
  • Sign-in and activity logs, for security.
  • Performance data from monitoring tools.

D. Cookies

We use essential cookies to keep your session secure, and analytics cookies to improve how the platform performs.

2. Legal basis for processing

Under the GDPR, we process your data on the following bases:

  • Contract: To provide simulation services, manage your account and support you.
  • Legal obligation: For invoicing, accounting and compliance with financial rules.
  • Legitimate interest: To improve security, prevent fraud and develop our services.
  • Consent: To send marketing messages, which you can withdraw at any time.

3. Sharing and processors

Your data is hosted in France on certified servers with a high security standard. We never sell your data. We share it only with trusted providers the service needs:

PartnerRoleLocation
Amazon Web Services (AWS)Secure hosting and S3 storage (documents)Europe (France)
StripeSecure payment processingWorldwide (PCI-DSS)
Twilio / MetaCommunications (SMS / WhatsApp)USA (EU standard clauses)
SentryTechnical error monitoringUSA (signed DPA)

4. How long we keep data

  • Active account: Your data is kept for as long as your account is active.
  • Inactivity: Deleted or anonymised after 3 years of inactivity.
  • Legal documents: Invoices and proof of transaction kept for 10 years (legal obligation).
  • Temporary simulations: Unfinished simulations may be purged after 12 months.

5. Your GDPR rights

You have the following rights over your personal data:

  • Access: Obtain a copy of your data.
  • Rectification: Correct inaccurate information.
  • Erasure: Ask us to delete your data ("right to be forgotten").
  • Restriction: Temporarily freeze the use of certain data.
  • Portability: Receive your data in a structured format.
  • Objection: Refuse certain processing, such as marketing.

6. Data security

Security sits at the centre of our architecture. We follow industry practice:

  • Encryption: All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
  • Hosting: Sensitive data is hosted on certified infrastructure or an equivalent.
  • Access control: Strong authentication and least privilege for our teams.
  • Audits: Regular vulnerability scans and continuous monitoring.

Contact us

If you have questions about this privacy policy, or to exercise your rights, contact us:

Email: contact@credizz.com