When you create a Kreddlo account and complete identity verification, we collect the following categories of personal data:
Full legal name and email address provided during registration
Government-issued identity document images (passport, national ID card or driver's licence) submitted for KYC verification
A live selfie or selfie video captured during the identity verification process
IP address, device type, browser version, and approximate location derived from your connection
Payment-related information including wallet addresses and transaction history processed on our platform
Profile information you choose to publish, including your skills, biography, portfolio links, and profile photo
Communication records such as messages exchanged through platform support channels
We do not collect or store your bank card details. All crypto payment processing is handled by our payment processor NOWPayments.
How We Use It
We use your personal data only for the purposes described here. We do not sell your data to advertisers or third parties for marketing.
Identity verification - Your ID documents and selfie are transmitted to Didit, our KYC partner, to verify your identity and comply with anti-fraud and anti-money laundering obligations.
Payment processing - Transaction data is shared with NOWPayments to facilitate crypto payments, escrow management, and withdrawal processing.
Transactional communications - Your email address is used via Brevo to send you account notifications, contract updates, payment confirmations, and platform alerts.
Platform operation - Firebase stores your account, project, and notification data to power the Kreddlo platform. Firebase is operated by Google and processes data within their infrastructure.
Profile photo enhancement - When you upload a profile photo, Remove.bg is used to remove the background. Only the image is shared; no other personal data is transmitted.
Fraud prevention and security - IP addresses and device data are used to detect unusual login patterns and protect your account.
How Long We Store It
Account data is retained for the full duration of your active account, plus 90 days after account deletion to allow for dispute resolution or legal requests.
KYC documents (identity images and verification records) are retained for the regulatory minimum required by applicable anti-money laundering laws. This is typically 5 years from the date of verification.
Payment and transaction records are retained for 7 years to meet financial compliance and tax reporting obligations.
Support communications are retained for 2 years after resolution.
Log data such as IP addresses and access records are retained for 90 days and then automatically purged.
Your Rights
You have the following rights regarding your personal data. To exercise any of them, email us at privacy@kreddlo.com.
Right of access - You may request a copy of all personal data we hold about you. We will respond within 30 days.
Right to deletion - You may request that we delete your account and personal data. Some data may be retained where required by law (such as transaction records for tax compliance).
Right to correction - You may update most of your profile information directly from your account settings. For legal name corrections, contact us with supporting documentation.
Right to withdraw consent - Where we rely on consent to process your data, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
Right to portability - You may request your data in a machine-readable format for transfer to another service.
We aim to respond to all data rights requests within 30 calendar days. For complex or bulk requests, we may extend this by a further 60 days, and will notify you if this applies.
Third Party Processors
We share your data with the following service providers only to the extent necessary to operate the platform:
Firebase
Database, authentication, file storage
NOWPayments
Crypto payment processing and escrow
Didit
KYC identity verification
Brevo
Transactional email delivery
Remove.bg
Profile photo background removal
CoinGecko
Live cryptocurrency exchange rate data
All third party processors are contractually required to handle your data securely and only for the purposes described above. We do not authorise any of them to use your data for their own marketing.
Cookies
Kreddlo uses a minimal cookie policy.
Session authentication cookies are set by Firebase Authentication to keep you logged in during a session. These are essential to platform operation and cannot be disabled while using your account.
We do not use advertising cookies, third-party tracking cookies, or retargeting pixels.
We do not use analytics cookies. We rely on anonymised server-side metrics for platform monitoring.
Closing your browser session clears session cookies. You can also clear them manually from your browser settings at any time.
Contact Us
For any questions about this Privacy Policy, to exercise your data rights, or to report a concern: