Privacy Policy

This platform is multi-tenant: each agency (“tenant”) that uses it is responsible for the debtor accounts and personal data it uploads, and acts as the data controller for that information. The platform operator provides the infrastructure those tenants run on, and processes data on their behalf under their instruction.

If you're a debtor with questions about a specific account, the agency you're dealing with is the right first point of contact — they control that record.

Depending on your role, this can include: name, contact details, and login credentials for staff and debtor accounts; account and balance information for debtor records uploaded by a tenant; payment method details processed through our integrated gateways (never stored as raw card numbers on our own servers); and usage data such as login activity and IP address for security purposes.

Information is used to operate the platform — authenticating users, processing payments, sending account-related notifications, enforcing compliance rules such as permitted contact windows, and maintaining audit logs. We don't sell personal information, and we don't use debtor data collected on behalf of a tenant for our own independent marketing purposes.

Payment processing is handled by the payment gateway each tenant configures for their own account (such as Stripe or Razorpay) — card details are entered directly into that gateway's own secure interface and never touch our application servers in raw form.

Email and SMS delivery is handled through the tenant's configured provider or our platform-wide fallback provider, solely to deliver the notifications a tenant has enabled.

Access is protected by rate limiting, session controls, and configurable IP allowlisting per tenant. Sensitive identifiers such as national ID numbers are stored encrypted, never in plain text. Every meaningful staff action against a debtor record is captured in an audit log.

Tenant agencies configure their own log-retention windows for login activity, consistent with their regulatory obligations. Account and payment records are retained for as long as the tenant keeps the account active, plus any period required by applicable law or the tenant's own policy.

Depending on your jurisdiction, you may have rights to access, correct, or request deletion of your personal information. Because tenant agencies control their own debtor data, these requests are generally directed to the agency you're dealing with; we support tenants in fulfilling them.

We use essential cookies and local storage to keep you signed in and remember basic preferences (such as your selected language). We do not use third-party advertising trackers on the platform itself.

This platform is intended for business use by adults acting in a professional or debt-account capacity. It is not directed at children, and we do not knowingly collect information from children.

We'll update the “last updated” date above when this policy changes, and post the revised version here. Material changes affecting how tenant data is handled will be communicated to tenant agencies directly.