Legal

Privacy Policy

Effective Date: June 4, 2026

1. Overview

Credit Kernel Pte. Ltd. (“Credit Kernel”, “we”, “our”, or “us”) operates B2B credit infrastructure services for digital lenders and internet platforms. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By accessing or using our services, you agree to the practices described below.

2. Information We Collect

We collect the following categories of information:

  • Business contact information — name, job title, business email address, and phone number of authorized representatives of our clients.
  • Account and usage data — login credentials, API keys, feature usage logs, and audit trails generated during use of our platform.
  • Technical data — IP addresses, browser type, operating system, and session identifiers collected automatically via server logs and cookies.
  • Client-submitted data — information that client organizations transmit through our APIs in the course of using our services. Credit Kernel processes this data on behalf of its clients and acts as a data processor for such information.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Service delivery — provisioning, operating, and maintaining our credit infrastructure platform and APIs.
  • Account management — creating and administering accounts, authenticating users, and providing customer support.
  • Security and compliance — detecting, preventing, and investigating fraud, unauthorized access, and other security incidents; meeting our legal and regulatory obligations.
  • Product improvement — analyzing aggregated and anonymized usage patterns to improve the reliability, performance, and features of our platform.

4. Data Sharing and Disclosure

We do not sell personal information. We may share information in the following limited circumstances:

  • Service providers — with vetted third-party vendors who process data on our behalf (e.g., cloud infrastructure, security monitoring) under contractual confidentiality obligations.
  • Legal requirements — when required by applicable law, court order, or governmental authority, or to protect the rights and safety of Credit Kernel, our clients, or the public.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, provided the acquiring party is bound by equivalent privacy obligations.

Client-submitted data processed through our APIs is shared only as directed by the client and in accordance with the applicable service agreement.

5. Data Retention

We retain business contact and account data for the duration of the client relationship and for a reasonable period thereafter as required by law or legitimate business purposes (typically no longer than seven years). Client-submitted data is retained and deleted in accordance with the terms of the applicable service agreement. Technical logs are retained for up to 12 months unless a longer period is required for security or compliance purposes.

6. Security

We implement industry-standard technical and organizational measures to protect information against unauthorized access, disclosure, alteration, or destruction. These measures include encryption in transit (TLS) and at rest, role-based access controls, multi-factor authentication for administrative access, and regular third-party security assessments. No system is perfectly secure; we encourage clients to adopt appropriate controls on their side as well.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access — request a copy of the personal information we hold about you.
  • Correction — request that we correct inaccurate or incomplete information.
  • Deletion — request that we delete your personal information, subject to legal retention obligations.
  • Portability — receive your data in a structured, commonly used, machine-readable format where technically feasible.

8. Cookies and Tracking

Our public website uses only essential session cookies necessary to provide a functioning experience (e.g., language preference, theme setting). We do not use advertising or cross-site tracking cookies. You may disable cookies in your browser settings, though this may affect certain site features.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

privacy@creditkernel.ai