Privacy policy.

1. What information do we collect?

Personal information you disclose. Full name and display name, email address and phone number, billing and shipping addresses, marketplace account identifiers (Amazon Seller ID, Walmart Seller ID, Shopify store URL, etc.), social media handles (for creator and tester accounts — Instagram, TikTok, YouTube, etc.), business name and business type, and payment instrument details (processed securely via Stripe; we do not store raw card data).

Information automatically collected.

• Log & usage data — IP address, browser type, device information, pages viewed, date/time stamps, and actions taken within the platform.
• Device data — device type, operating system, hardware model, internet service provider, and mobile carrier.
• Location data — general geographic location derived from your IP address (not precise GPS unless you consent).
• Cookie and tracking data — information collected via cookies, web beacons, and similar technologies.

2. How do we use your information?

We process your personal information based on (a) your consent, (b) our legitimate business interests, (c) performance of a contract with you, or (d) compliance with legal obligations.

• Account creation and management — to register, maintain, and administer your Credorra account.
• Service delivery — to operate the platform, manage campaigns, match products with testers, and deliver results to brand clients.
• Campaign coordination — to share product details with vetted testers and manage gifting workflows.
• Payment processing — to process subscription fees and campaign payments through Stripe.
• Communications — to send transactional emails, campaign updates, and service announcements.
• Marketing — with your opt-in consent, to send promotional emails and product updates (you may opt out at any time).
• Legal compliance — to comply with applicable laws, respond to legal requests, and prevent fraud.
• Platform security — to monitor for fraudulent activity and maintain platform integrity.
• Product improvement — aggregated and anonymised analytics to improve platform features and campaign effectiveness.
• Testimonials — with your explicit prior consent, to publish testimonials that may include your name and feedback on our website.

3. Will your information be shared with anyone?

We only share information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfil business obligations. We do not sell your personal information to any third party.

• Consent — when you have expressly given us permission for a specific purpose.
• Legitimate interests — when sharing is reasonably necessary to achieve our business interests.
• Performance of a contract — where sharing is necessary to fulfil our agreement with you.
• Legal obligations — where we are legally required to disclose information by law, court order, or government authority.
• Vital interests — to investigate suspected fraud, protect safety, or defend against legal claims.

In the event of a merger, acquisition, or sale of company assets, your information may be transferred as part of that business transaction, subject to continued privacy protection.

4. Who will your information be shared with?

We only share with the following carefully selected third-party categories. We do not share, sell, rent, or trade your information for their own promotional purposes.

5. Do we use cookies and other tracking technologies?

Yes. We use cookies and similar tracking technologies (web beacons, pixels, and local storage) to collect and store information about your use of our website and platform. Cookies help us:

• Keep you logged in to your Credorra account.
• Remember your preferences and platform settings.
• Understand how you use our platform so we can improve it.
• Deliver relevant advertising on third-party platforms based on aggregated audience signals.

You can control cookies through your browser settings. Note that disabling certain cookies may affect platform functionality.

6. How long do we keep your information?

7. How do we keep your information safe?

• SSL/TLS encryption for all data transmitted to and from our website and platform.
• Encryption at rest for sensitive data stored on our servers.
• Role-based access controls — only authorised personnel can access personal data.
• Regular security reviews and vulnerability assessments.
• PCI-DSS compliant payment processing through Stripe — we never store raw card data.
• Multi-factor authentication for all internal system access.

8. What are your privacy rights?

Depending on your location, you may have the following rights regarding your personal information.

To exercise any of these rights, please email us at hello@credorra.ai. We will respond within 30 days. Identity verification may be required.

9. Controls for Do-Not-Track features

Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature you can activate. At this time, no uniform technology standard for recognising and implementing DNT signals has been finalised, and we do not currently respond to DNT signals. We will update this policy if a recognised standard is adopted.

10. Do California residents have specific privacy rights?

• Right to know — Request information about the categories and specific pieces of personal information we have collected.
• Right to delete — Request deletion of personal information, subject to certain legal exceptions.
• Right to opt-out of sale — We do not sell personal information. If this practice ever changes, we will notify you.
• Right to non-discrimination — We will not discriminate against you for exercising any CCPA right.

11. Do we make updates to this notice?

Yes. We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Privacy Policy with a revised effective date, sending an email notification, and/or displaying a prominent notice on our website or within the Credorra platform.

12. How can you contact us about this notice?

• General enquiries — hello@credorra.ai
• Privacy requests — privacy@credorra.ai
• Website — credorra.ai