1. Introduction

Credit1Network.com ("we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

This policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2. Data Controller

Credit1Network.com acts as the data controller for personal information collected through our platform.

3. Information We Collect

3.1 Personal Identification Information

• Full legal name
• Date of birth
• Email address
• Phone number
• Residential address
• Government-issued ID details and images
• Selfie photographs
• Tax identification numbers
• Occupation and source of funds
• PEP (Politically Exposed Person) status

3.2 Financial Information

• Bank account details (encrypted)
• Payment card information (tokenized, not stored directly)
• Transaction history
• Wallet balances
• Trade activities

3.3 Technical Information

• IP addresses
• Browser type and version
• Device information
• Operating system
• Login timestamps
• Cookies and tracking technologies

3.4 Usage Data

• Pages visited
• Features used
• Time spent on platform
• Search queries
• Transaction patterns

4. How We Use Your Information

We use collected information for:

4.1 Service Provision

• Account creation and management
• Transaction processing
• Escrow services
• Dispute resolution
• Customer support

4.2 Compliance & Security

• KYC/AML verification (legal obligation)
• Fraud prevention
• Risk assessment and monitoring
• Regulatory reporting (when required by law)
• Security incident investigation

4.3 Platform Improvement

• Analytics and usage insights
• Feature development
• User experience optimization
• Performance monitoring

4.4 Communication

• Transaction notifications
• Security alerts
• Policy updates
• Marketing communications (with consent)

5. Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

• Contract Performance: Processing necessary to provide our services
• Legal Obligation: KYC/AML compliance, regulatory reporting
• Legitimate Interest: Fraud prevention, security, platform improvement
• Consent: Marketing communications, optional features

6. Data Sharing and Disclosure

We may share your information with:

6.1 Service Providers

• Payment processors (Stripe)
• Identity verification services
• Cloud hosting providers
• Customer support platforms
• Analytics services

6.2 Legal & Regulatory

• Law enforcement (when legally required)
• Financial regulators (FinCEN, state authorities)
• Courts and legal proceedings
• Tax authorities

6.3 Business Transfers

In case of merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.

6.4 With Your Consent

We may share data with third parties when you explicitly consent.

7. Data Retention

We retain your data for different periods:

• Account Information: Duration of account + 5 years (AML compliance)
• Transaction Records: 7 years (regulatory requirement)
• KYC Documents: 5 years after account closure
• Audit Logs: 7 years
• Marketing Data: Until consent withdrawn + 30 days

8. Your Rights (GDPR & CCPA)

8.1 GDPR Rights (EU Users)

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Delete your data (subject to legal obligations)
• Right to Restriction: Limit how we process your data
• Right to Portability: Receive your data in machine-readable format
• Right to Object: Object to certain processing activities
• Right to Withdraw Consent: For consent-based processing

8.2 CCPA Rights (California Users)

• Right to Know: What personal information we collect
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Of sale of personal information (we do not sell data)
• Right to Non-Discrimination: No different treatment for exercising rights

To exercise these rights, contact us at privacy@credit1network.com or through the Privacy Settings page.

9. Data Security

We implement robust security measures:

• End-to-end encryption for sensitive data
• TLS/SSL for data transmission
• Encrypted data storage
• Access controls and authentication
• Regular security audits
• Tokenization of payment information
• Intrusion detection systems
• Employee data protection training

10. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure adequate protection through:

• EU-US Data Privacy Framework and Standard Contractual Clauses (SCCs)
• Adequacy decisions by EU Commission
• Explicit user consent

11. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Authentication, security
• Functional Cookies: User preferences
• Analytics Cookies: Usage statistics (with consent)
• Marketing Cookies: Targeted advertising (with consent)

You can manage cookie preferences through your browser settings or our cookie consent banner.

12. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it immediately.

13. Automated Decision-Making

We use automated systems for:

• AML risk scoring
• Fraud detection
• Transaction monitoring

You have the right to request human review of automated decisions that significantly affect you.

14. Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you within 72 hours (as required by GDPR) and take immediate remedial action. We will also notify relevant supervisory authorities as required by law.

15. Changes to Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes via email or platform notification. Your continued use after changes indicates acceptance of the updated policy.

16. Supervisory Authority

If you are an EU resident, you have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.

17. Contact Us

For privacy-related inquiries or to exercise your rights: