CredForma values privacy and designs all processes to minimize data collection. This Privacy Policy explains what information we collect, how we use it, and how it is protected.
1. Information We Collect
- Account Data: Email address and password (encrypted). Optional business details may be provided to strengthen your application.
- Verification Data: Shipping labels or equivalent proof of fulfillment activity.
- Reports: Fraud risk signals tied to hashed addresses only.
Important: We do not collect customer names, phone numbers, or payment details.
2. Hashing and Data Minimization
- All addresses are hashed with a CredForma-specific salt on your device before being transmitted.
- Plaintext addresses never leave your device.
- Optional business information may be converted into non-reversible fingerprints to prevent duplicate accounts.
3. How We Use Data
- Verification data is used only to confirm that you are a legitimate seller.
- Report data is used to generate advisory fraud signals.
- We do not sell, rent, or license your data to third parties.
4. Storage and Retention
- Verification documents such as shipping labels are deleted after review.
- Only anonymized signals and hashed values are retained.
- Reports gradually lose weight over time through a time-decay scoring system, which prevents permanent blacklisting.
- Account data is retained for 90 days after account closure to prevent fraud and handle disputes, then permanently deleted.
5. Security
- All data is encrypted in transit and at rest.
- Hashed values cannot be reversed to recover original addresses.
- Access is restricted to verified members.
6. Cookies and Analytics
We use essential cookies for authentication and security. We do not use tracking cookies or share data with advertising networks.
7. Legal Basis and Privacy Laws
CredForma is designed with U.S. privacy principles and data minimization in mind. Users are responsible for ensuring compliance with applicable laws in their jurisdiction.
8. Forums and Third-Party Communication
CredForma does not host user forums. Any discussion about CredForma on third-party platforms such as Reddit or Discord is unofficial. Joining or participating in these discussions is at your own risk. Participation may compromise your anonymity or reduce your privacy. CredForma is not responsible for any consequences of third-party discussions.
9. User Responsibilities
- Do not enter personal identifiers in any reports.
- Use CredForma only for legitimate business purposes.
- Protect your account credentials.
10. Your Rights
You may request to:
- Access your account data
- Delete your account
- Correct inaccurate information
Contact support@credforma.com for these requests.
11. Governing Law
This Privacy Policy is governed by the laws of the United States and the State of Delaware.
12. Updates to Policy
We may revise this Privacy Policy from time to time. Continued use of CredForma after updates indicates acceptance.