FAQ
Topic
What kind of data does Credolab collect from users?
Credolab collects anonymised, non-personal device and behavioural metadata such as device settings, interaction patterns, or app usage categories. We do not access personal content, messages, photos, contacts, or precise location data. All data collection is consent-based and fully transparent.
Topic
Is Credolab’s SDK compliant with privacy regulations like GDPR and CCPA?
Yes. Our SDK and data handling practices are fully compliant with GDPR, CCPA, PDPA, LGPD and other local regulations. We collect data only after explicit user consent, and we operate strictly as a data processor, meaning our clients retain full control over the data collected.Credolab collects users' anonymised data to assess their financial health and status so that financial institutions are able to decide whether or not to grant a loan, a credit card or any other financial services. Credolab assesses the users' solvency, their probability of default and interest in receiving financial services only in the context of their application for the provision of financial services.
Topic
How does Credolab ensure data security?
Credolab applies enterprise-grade data protection practices, including encryption at rest and in transit, strict role-based access controls, and regular third-party audits. We are ISO/IEC 27001 certified, and our infrastructure and processes are continuously monitored to ensure data integrity and confidentiality.
Refer to the table below to see how each of Credolab's products handles data.
Topic
Can users opt out of data collection?
Only authorised and trained employees of Research and Development department have read only access to the data. In addition to this, the customer success team working with you will also have access to the data, after your explicit authorisation.
Topic
How long does it take to integrate Credolab’s SDK?
Our SDK is lightweight and modular, allowing most clients to complete integration in under a week. We provide detailed technical documentation, sample code, and dedicated onboarding support to help your development team every step of the way.
Topic
What happens to the data when a client contract ends?
When a client contract ends, all associated datasets are permanently deleted from our systems, including backups and cross-region replicas. The process is verified using AWS tools, logged for audit purposes, and a certificate of data destruction is issued to the client.
