Privacy Policy
Effective date: 15 October 2026
1. Introduction
This Privacy Policy explains how Credfico Consultancy Pvt. Ltd. (“Credfico”, “we”, “us” or “our”) collects, uses, stores and shares information when you visit our websites or use Credfico Books and related Platform services. It should be read with our Terms & Conditions. The information we process depends on the features you use and the data your organisation chooses to enter.
2. Information we collect
- Account and contact data: business or organisation name, user name, email, mobile number, address, country, currency and account preferences.
- Business and financial records: customer/member details, invoices, receipts, ledger entries, expenses, payment references, tax information and files that you or authorised users submit.
- Authentication and security data: password hashes, OTP and sign-in events, session data, audit records, IP address, browser/user-agent information and security events.
- Usage and device data: pages and functions used, timestamps, browser/device characteristics, error diagnostics and essential cookies/session identifiers.
- Support and communication data: messages, support requests, delivery status and information you provide when contacting us.
Do not send us passwords, payment card data or sensitive personal information unless a feature specifically requests it and you are authorised to provide it. Payment credentials are generally handled by the relevant payment provider rather than stored by Credfico.
3. How we use information
- To create and administer accounts, authenticate users and provide the Platform features requested.
- To process subscription, usage, billing and payment-related actions and keep service records.
- To produce the accounting, billing and reporting outputs requested by your organisation.
- To send verification codes, essential service notifications, support responses and billing communications.
- To protect the Platform, detect abuse, investigate incidents, enforce our Terms and maintain audit trails.
- To troubleshoot errors, improve usability and meet applicable legal, regulatory and accounting obligations.
4. Roles and organisation-managed data
When a business or housing society uses the Platform, its authorised administrators decide what customer, member, employee or financial data to enter and which users may access it. You are responsible for ensuring that you have appropriate authority to submit that information and for responding to requests from people whose data your organisation controls. We process that information to provide the Platform, support your instructions and meet applicable obligations.
5. Cookies and similar technologies
We use essential cookies and session mechanisms for sign-in, security, CSRF protection and maintaining requested functionality. If optional analytics or other non-essential technologies are enabled, we will provide any notice or choice required by applicable law. Disabling essential cookies may prevent sign-in or some Platform features from working.
6. Sharing and third-party processors
We do not sell personal information as a standalone product. We may share information as reasonably necessary with hosting and infrastructure providers, email/SMS/WhatsApp services, payment gateways and banks, accounting or integration providers you enable (which may include Zoho), support providers, professional advisers, and government or law-enforcement authorities where required or legally permitted. Providers may process information in the locations where they operate and are subject to their own terms and privacy notices.
7. Security
We use technical and organisational safeguards intended to protect information, including access controls, authentication safeguards, logging and restricted system access. No online service or transmission can be guaranteed completely secure. Please protect credentials, enable available security features and promptly report suspected compromise.
8. Retention
We retain information for as long as reasonably needed to provide the Platform, preserve transaction and audit history, resolve disputes, maintain security and meet legal obligations. Retention periods vary by record type and applicable requirements. Account closure does not necessarily cause immediate deletion of records that must be retained by law or are needed for legitimate security, accounting or dispute-resolution purposes.
9. Your choices and requests
Subject to applicable law, you may request access to or correction of your account information, ask questions about data processing, object to or restrict certain processing, withdraw consent where processing is based on consent, or request deletion where permitted. Requests should be sent to support@credfico.com. We may need to verify your identity and authority before responding. Some data may have to be retained for legal, security or accounting reasons.
10. Children and international processing
The Platform is intended for business and organisational users and is not directed to children under 18. If you believe a child has provided personal information inappropriately, contact us. Depending on the hosting and providers used for your account, data may be processed in India or other countries, subject to applicable safeguards and law.
11. Updates and contact
We may update this Policy by publishing a new version and effective date. Where required, we will notify users or request renewed acceptance. Questions or privacy requests may be sent to:
Credfico Consultancy Pvt. Ltd.
Email: support@credfico.com
Phone: +91 94296 92187
Website: www.credfico.com