Privacy Policy

CreditIQ Technologies Private Limited ("CreditIQ", "we", "us", or "our") respects the privacy and confidentiality of our enterprise clients, business users, and partners. This Privacy Policy explains how we collect, process, store, and safeguard enterprise data and personal identifiers when you use our web platform, APIs, and commercial credit intelligence tools, in full compliance with the Digital Personal Data Protection Act (DPDP Act) 2023 and relevant Indian IT regulations.

We collect the following categories of data to provide our commercial credit assessment services: - Corporate Identification: Entity Name, CIN/LLPIN, GSTIN, PAN, Registered Office Address, and MSME Udyam details. - Authorized Representative Data: Name, designation, official email, phone number, and director identification numbers (DIN) of authorized representatives. - Trade Credit & Invoice Records: Invoice amounts, dates of supply, due dates, payment delay durations, ledger balances, and payment acknowledgment receipts submitted for credit verification or default reporting. - Technical & Log Data: IP address, browser type, device fingerprints, session timestamps, and security audit logs to prevent unauthorized intrusions.

Your information is utilized solely for lawful business credit purposes, including: - Verifying corporate identities against government databases (MCA, GSTN, CBDT). - Calculating objective CreditIQ risk scores and credit limit recommendations. - Notifying counterparties of pending trade disputes or overdue settlement claims. - Detecting financial anomalies, circular trading, and shell company patterns. - Preventing fraud, ensuring security, and complying with statutory audit requirements.

When you submit counterparty payment details or upload trade ledger information: - You warrant that you have lawful commercial grounds or consent to share trade payment performance information related to legitimate commercial contracts. - Users are granted access to view their own credit profile and request corrections of erroneous statutory data.

We implement defense-in-depth security mechanisms to protect commercial information: - Encryption: All data in transit is protected using TLS 1.3 encryption, and database storage uses 256-bit AES encryption. - Indian Data Localization: All primary and backup servers are securely hosted within certified data centers located strictly within the territory of India. - Role-Based Access: Stringent internal access controls ensure our team members can only view data necessary for verified support inquiries.

CreditIQ does NOT sell, rent, or trade your internal business secrets or client lists. We only disclose data in the following circumstances: - Verified Members: Authorized subscribers reviewing prospective suppliers or buyers receive structured credit health ratings. - Government & Legal Authorities: Under valid court subpoenas, judicial orders, or statutory regulatory mandates. - Certified Infrastructure Providers: Cloud hosting, SMS gateways, and identity verification partners bound by strict Non-Disclosure Agreements (NDAs).

We retain business credit transaction records and default reporting logs for as long as necessary to fulfill statutory compliance, dispute resolution, and commercial recordkeeping obligations under Indian law (typically 7 to 8 financial years). Upon account closure, users may request archiving of their proprietary account profile.

In accordance with the Information Technology Act 2000 and DPDP Act 2023, the details of our designated Grievance Redressal Officer are: Grievance Officer: Mr. Sameer Verma CreditIQ Technologies Private Limited Email: privacy@creditiq.in | grievance@creditiq.in Direct Phone: +91 (11) 4982-3299 Address: Tower B, 7th Floor, Cyber City Tech Park, Gurugram, Haryana - 122002, India. We aim to respond to all formal privacy requests and data disputes within 7 business days.