Privacy Policy

Protecting Your Information Is Our Priority

Last updated: June 2024

Credexa is committed to protecting the personal and financial information of its users. This document explains what information is collected, why we need it, and how we protect it.

What Information We Collect

Mobile number: for OTP authentication and sending notifications

National ID: for identity verification, Shahkar inquiry, and AML compliance

Transaction and installment data: to provide core platform services

Device information (IP, browser type): for account security and fraud detection

Why Do We Collect National ID?

Collecting national ID is mandatory for providing financial services in Iran. It is used for: (1) verifying real user identity via the Shahkar telecom system, (2) compliance with Anti-Money Laundering/Counter-Terrorism Financing (AML/CFT) regulations, (3) preventing identity fraud and impersonation. National IDs are stored as one-way hashes and are never stored as plain text in our database.

How We Protect Your Data

All communications are encrypted using TLS 1.3

Sensitive data at rest is encrypted with AES-256

Passwords and sensitive fields are hashed with bcrypt

Data access is restricted to authorized personnel with multi-factor authentication

24/7 monitoring systems are active to detect unauthorized access

Data Sharing

Your information is only shared with the following parties and only under legal obligations:

Shahkar (telecom system): to verify national ID matches mobile number

Authorized payment gateways: to process financial transactions

Judicial and regulatory authorities: when required by law

Data Retention

Financial and transaction data is retained for a minimum of 7 years as required by Iranian tax and regulatory laws. Account information is retained until a deletion request is made by the user and full account settlement is confirmed.

User Rights

Request access to stored personal informationRequest correction of inaccurate informationRequest account deletion (subject to full debt settlement)Lodge a complaint about how your information is used

To exercise any of these rights, contact us at support@credexa.ir.

For any questions about this policy, contact us at support@credexa.ir.