Privacy policy

This policy applies to the public website, registration, support, account, Credi Contable software, the Credi Contable Android app (package online.credicontable.app), and its installable iPhone version. The controller is Credi Contable, established at Calle 14A # 50-68, Cali, Valle del Cauca, Colombia, email soporte@credicontable.online, WhatsApp +57 300 122 4333. It processes account holder data to provide, secure, and bill the service.

When a business customer enters borrower, worker, or route data, that customer determines the purposes and is the controller; Credi Contable acts as its processor or service provider. The customer must have a valid legal basis and provide required notices.

We process only information reasonably needed to operate the service.

• Account and identity data: name, business, email, phone, optional tax document, address, and protected credentials.
• Customer-entered lending data: names, identifiers, phones, addresses, location, loans, installments, payments, arrears, and borrower ratings.
• Workers and routes: roles, permissions, assignments, customers, and route capital.
• Technical and security data: IP, device, timestamps, sessions, login attempts, logs, and action audit trails.
• Support and payment references received from Paddle. Credi Contable does not store full card numbers or security codes.
• Essential preferences for sessions, registration, active business, and public language. We do not use behavioral advertising cookies.
• Precise location of the worker (route): while the app is open on their phone, to order the route by proximity, record where an unpaid visit took place, and show the business administrator the route progress.
• Photos: the receipt photo of an expense that the worker takes with the camera or picks from the phone, uploaded only when they record it.
• Notifications: a device identifier to deliver business alerts (sales, cash closings, reminders). It can be turned off in the phone settings.

We use data to create and authenticate accounts, perform the contract, operate lending records, provide support, administer subscriptions, prevent fraud, protect the service, comply with law, and defend claims.

Depending on the country, legal bases include contract, pre-contract steps, consent where required, legal obligations, and legitimate interests such as security and abuse prevention. Credi Contable does not make lending decisions; any customer rating is a tool and the business makes the final decision.

The site may receive an IP and country code from the browser, proxy, or CDN to select language, display localized prices, and prevent fraud. A public IP may be sent to Paddle for a checkout-consistent price preview.

Borrower location is stored only when a business user records it or when a typed address is converted into a map point for route planning.

The mobile app asks the worker for location permission. With permission granted and the app open, it collects precise location for smart routing, to mark where an unpaid visit was recorded, and so the business administrator can see route progress. We do not collect location while the app is closed or in the background, and we do not use it for advertising. Permission can be withdrawn at any time in the phone settings.

Paddle is the Merchant of Record for charges, taxes, invoicing, refunds, and chargebacks and applies its own privacy policy. Strictly necessary providers also process data: web hosting (Hostinger), database (Turso), email (Resend), Google sign-in and notifications (Google Firebase Cloud Messaging and browser Web Push), photo storage (Cloudinary), and address-to-map conversion (HERE).

Providers may use data only for contracted services with appropriate safeguards. We do not sell personal information or share it for cross-context behavioral advertising.

Service providers may process data outside a person's country. Where required, we rely on adequacy decisions, contractual clauses, data processing terms, or equivalent safeguards. Business customers must assess rules applicable to the data they upload.

We retain data while an account is active and afterward only as needed for backups, security, tax or accounting duties, disputes, and statutory limitation periods. Exact periods depend on the data and country.

Account holders may request deletion of their account and data by writing to soporte@credicontable.online or via WhatsApp at +57 300 122 4333, or export a backup. A worker may ask their business administrator or use the same channels to delete their user. Deletion may be delayed in rotating backups or by legal duties; retained data remains restricted until secure deletion.

We use risk-based controls including password hashing, signed sessions, encryption of sensitive credentials, per-account database isolation, role permissions, rate limits, audit logs, and backups. No system is infallible; we will notify customers and authorities when legally required.

Optional privacy mode (game mode) in the Android app: because collectors carry the phone on the street, the user can turn on, from the app Settings, a mode in which the app opens as a simple game, so that anyone who takes the phone without permission does not see money records. It is off by default and only the user can turn it on or off. The preference and game scores are stored only on the phone and are not sent to our servers. This mode does not replace login: the account remains protected by username and password.

Depending on your jurisdiction, you may request access, a copy, correction, deletion, restriction, objection, portability, withdrawal of consent, and review of automated decisions, and complain to a data protection authority. We verify identity and authority first.

EEA and UK residents have GDPR or UK GDPR rights. California residents may request to know, correct, or delete information and receive no discriminatory treatment; Credi Contable does not sell or share data for behavioral advertising. LGPD rights apply in Brazil, and applicable habeas data and local rights apply across Latin America.

If a business customer entered your data, contact that business first because it controls the information. Credi Contable will assist it when appropriate and may route your request to the relevant controller.

The service is not directed to children and they may not create business accounts. Customers must not enter minor data unless lawful, necessary, authorized, and protected as required locally.

The controller of the personal data described in this policy is Credi Contable, established at Calle 14A # 50-68, Cali, Valle del Cauca, Colombia. For rights requests or privacy questions: soporte@credicontable.online.

We may update this policy for legal, technical, or service changes. We will publish the new date and provide notice of material changes where required. Use the contact page for questions or rights requests; we respond within applicable legal deadlines.