1. Introduction

Credaxe ("we," "us," or "our") is committed to protecting the privacy of property operators, administrators, and residents who interact with our utility concession management platform. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights regarding it.

This policy applies to credaxe.com and all Credaxe products and services.

2. Data We Collect

We collect the following categories of information:

• Account data: Name, email address, organization name, job title, and password when you register.
• Property and portfolio data: Property addresses, unit counts, lease terms, and portfolio configuration you provide.
• Concession request data: Utility bills, resident names, concession amounts, supporting documents, and decision records submitted through the platform.
• Usage data: Pages visited, features used, session duration, device type, browser, and IP address.
• Communications: Emails and support messages you send us.
• Payment data: Processed by our payment provider; Credaxe does not store full card numbers.

3. How We Use Your Data

We use the data we collect to:

• Provide, operate, and improve the Credaxe platform
• Generate AI-assisted concession recommendations and analytics
• Send transactional communications (approvals, alerts, account notices)
• Respond to support requests
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Send product updates and marketing communications (you may opt out at any time)

4. Sharing Your Data

We do not sell your personal data. We may share data with:

• Service providers: Cloud hosting, analytics, email delivery, and payment processing vendors who process data on our behalf under data processing agreements.
• Your organization: Administrators in your workspace may have access to data submitted within the platform according to the permissions you configure.
• Legal requirements: When required by law, court order, or government authority.
• Business transfers: In connection with a merger, acquisition, or sale of assets, subject to confidentiality obligations.

5. Resident Data and PII

Credaxe processes personal information about residents (such as names and utility billing records) as a data processor on behalf of property operators who act as data controllers. If you are a resident whose data has been submitted to Credaxe, please contact your property manager directly. Credaxe applies data-level access controls and PII masking features to limit unnecessary exposure of resident information within the platform.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. After account termination, we retain data for up to 90 days before deletion, unless a longer period is required by law or requested for audit purposes. Anonymized, aggregated data may be retained indefinitely.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability (receiving your data in a structured, machine-readable format)
• Opt out of marketing communications

To exercise these rights, contact us at all@credaxe.com. We will respond within 30 days.

8. Security

We implement technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, and regular security reviews. See our Security Policy for more detail.

9. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, contact us at all@credaxe.com and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email or through the platform. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

---