Legal
Privacy Policy
How Credible collects, uses, and protects your personal information.
1. Data controller
Credible is the data controller for personal information collected through this platform. Our registered office is in Dhaka, Bangladesh, and our Data Protection Officer can be reached at dpo@credible.com.
2. Information we collect
We collect information you provide directly: account details (name, email, phone), business profile data, verification documents, reviews, and payment information. We also collect usage data automatically: IP address, browser type, device information, and pages visited.
3. How we use your information
We use your information to: provide and improve the Service; process verification applications; send transactional emails (OTP codes, verification status, payment confirmations); compute trust scores and analytics; detect and prevent fraud; and comply with legal obligations.
4. Document handling
Verification documents are encrypted at rest using AES-256 encryption. Documents are stored in secure cloud storage with access restricted to the business owner and authorised administrators. Documents from rejected applications are automatically deleted after 90 days.
6. Third-party processors
Payment gateways (SSLCommerz, aamarPay) for transactions; email delivery (SendGrid); cloud hosting (AWS, Cloudflare); error monitoring (Sentry); and analytics (privacy-respecting, no third-party advertising trackers).
7. International transfers
Some processors store data outside Bangladesh. Where that occurs we rely on standard contractual clauses or the processor's published compliance with applicable data-protection law. You can request a copy of the relevant safeguards by emailing dpo@credible.com.
8. Public information
Business profiles, reviews, ratings, and verification badge status are publicly visible. Your display name may appear alongside your reviews. You can control certain profile visibility settings from your dashboard.
10. Data security
We implement industry-standard security measures including TLS encryption, rate limiting, input sanitisation, and regular security audits. However, no method of transmission over the Internet is 100% secure.
11. Data retention
Account data is retained while your account is active. Payment records are retained for 7 years for legal compliance. Verification documents from approved applications are retained for the lifetime of the verification. Other retention periods are listed in our internal records-of-processing register, available on request.
12. Your rights
You have the right to: access your personal data; correct inaccurate data; request deletion of your data; export your data in a portable format; and opt out of non-essential communications. Use the data-request form below to exercise any of these.
13. Children's privacy
Credible is not intended for users under the age of 18. We do not knowingly collect information from children.
14. Changes to this policy
We may update this privacy policy from time to time. Material changes will be communicated via email or a prominent notice on the platform. The latest version is always available at this URL.
15. Contact us
For privacy-related enquiries, contact our Data Protection Officer at dpo@credible.com.
Sign in to submit a data request
Data requests are tied to your account so we can verify your identity before sharing or modifying personal data.
Sign in