Privacy Policy

1. Introduction

CreditCore Ten (“we”, “our”, or “the Platform”), accessible at creditcoreten.online, provides financial analytics, banking statement parsing, and credit underwriting decision-support tools for loan advisors, chartered accountants, and lending teams.

This Privacy Policy explains how personal and commercial data is handled when you access our website, create an account, upload financial records for analysis, or interact with our credit intelligence copilot (Agent Asha).

2. Information We Process

We classify processed information into the following categories:

• Account & Profile Data: Email address, display name, organization identifier, role designation, and authentication timestamps collected when registering or logging in via email or Google Authentication.
• Underwriting Case Data: Applicant details (names, business turnover figures, debt obligations, property values, and financial ledger data) entered or imported by authorized underwriters to generate Credit Appraisal Memos (CAM).
• Uploaded Financial Documents: Bank statement PDFs, CIBIL/bureau files, and property valuation records uploaded for extraction and forensic verification.
• Technical & Log Data: Internet Protocol (IP) addresses, browser user-agent strings, session identifiers, and runtime error telemetry used to safeguard service availability.

4. Cloud Storage & Tenant Isolation

When an underwriter explicitly saves an application case, the structured calculation facts (e.g., FOIR percentages, Average Monthly Balance, debt matrices) are stored in cloud database infrastructure (Google Cloud Firestore). Access is strictly restricted through server-enforced security rules ensuring that records belonging to one organization or tenant are never accessible to other organizations.

We provide self-service compliance tools for data lifecycle management:

• Case & Applicant Erasure: Account holders can permanently purge an applicant record, including associated cashflow caches and audit records, through the in-app Data Erasure settings.
• Account Deletion: You may request the permanent deletion of your account, authentication credentials, and organization profile by contacting our support desk via our web contact portal.

6. Third-Party Advertising, Cookies & Analytics

We use third-party tools to support website operations and analyze platform traffic:

• Authentication Providers: Firebase Authentication (Google Cloud) facilitates secure sign-in, multi-factor verification, and session token management.
• Advertising Partners (Google AdSense): Third-party vendors, including Google, use cookies to serve ads based on user visits to this website and other websites across the Internet.
• Ad Personalization Opt-Out: Users can opt out of personalized advertising by visiting the Google Ads Settings page.
• Authorized Publisher Declarations: Our advertising identifiers are publicly declared in our verified ads.txt record.

7. Security Safeguards

We enforce technical and organizational safeguards including HTTPS encrypted transport, role-based access control (RBAC), and scoped session management. While we implement standard industry security practices, no Internet transmission is completely secure; users are responsible for safeguarding their login credentials.