Privacy Policy | Crederoom

This Privacy Policy explains in plain English how Crederoom collects, processes, stores and safeguards your personal information whenever you visit crederoom.com, open an investor account, activate the AI trading engine or interact with any of our related services. By registering on the platform or continuing to use crederoom.com in any capacity, you confirm that you have read, understood and agreed to the data-handling practices described in this document. If you disagree with any part of this policy, please immediately discontinue use of the platform and request account closure through our official support channels.

Crederoom treats data privacy as a fundamental investor right — not as a legal formality or a compliance checkbox. The sections below map out exactly what we collect, why we collect it, who it may be shared with, how long we keep it, and what rights you can exercise over it at any moment. Every statement in this policy reflects our actual day-to-day practice, verifiable through independent security audits conducted by CertiK, Hacken and SlowMist.

1. What Information Crederoom Collects

To deliver a secure, fully functional and regulation-compliant AI investment experience on crederoom.com, we collect only the data that is strictly necessary. The categories of information we may process include:

Personal identification data — full legal name, email address, mobile phone number and country of residence
Account credentials — chosen username, encrypted password hash and personal account preferences
Identity verification (KYC) documents — government-issued photo ID, proof of address and selfie-verification images, where required by applicable AML/KYC regulations
Financial transaction data — deposit records, AI-trade history, profit distributions and withdrawal requests
Technical metadata — IP address, browser type and version, operating system, device fingerprint and traffic referral source
Behavioural and usage analytics — pages visited, dashboard features used, session duration and interaction patterns inside the platform
Communication records — support tickets, live chat transcripts, emails and any correspondence submitted through our contact channels
Blockchain wallet data — public wallet addresses used for deposits and withdrawals (we never request or store private keys or seed phrases)

2. How We Use the Data We Collect

The personal information gathered by Crederoom is used exclusively to operate, maintain, protect and continuously improve the platform. Specific authorised uses include:

Creating, managing and securing your personal investor account on crederoom.com
Processing deposits, executing autonomous AI trades and handling withdrawal requests
Providing personalised onboarding guidance and direct communication from your assigned investor specialist
Monitoring platform performance, uptime and overall system reliability
Detecting, investigating and preventing fraud, unauthorised access, phishing attempts and other abusive behaviour
Sending transactional notifications, security alerts and critical service updates
Fulfilling legal, regulatory and compliance obligations applicable in your jurisdiction (including AML/CTF, FINTRAC and MiFID II where relevant)
Conducting internal analytics to improve platform UX, AI-engine performance and investor outcomes

3. Legal Basis for Processing Your Data

Crederoom processes your personal data strictly under the following legal foundations:

Contractual necessity — processing is required to fulfil our contractual obligations toward you as a registered Crederoom investor
Legitimate interests — enhancing platform security, preventing abuse, improving service quality and protecting other investors
Legal obligation — complying with applicable financial regulations, AML/KYC requirements, tax-reporting obligations and legitimate law-enforcement requests
Explicit consent — where you have voluntarily provided consent for specific uses such as marketing communications, newsletter subscriptions or participation in beta features

4. How Crederoom Protects Your Data

Security is engineered into every single layer of the Crederoom infrastructure — not bolted on as an afterthought. Our comprehensive security framework includes:

AES-256 military-grade encryption for all data at rest and in transit
Mandatory two-factor authentication (2FA) available for every single user account, with biometric options on mobile devices
Enforced HTTPS/TLS 1.3 connections across the entire crederoom.com domain and subdomains
Role-based access controls (RBAC) that limit internal data exposure strictly to authorised personnel on a need-to-know basis
24/7 intrusion detection and anomaly monitoring powered by machine-learning threat-detection systems
Regular third-party security audits performed by CertiK, Hacken and SlowMist, with public attestation reports
Segregated on-chain client vaults keeping investor funds legally and technically isolated from company treasury
Dedicated insurance fund covering force-majeure scenarios and documented smart-contract failures

While Crederoom applies every reasonable precaution to protect your information, no digital system — anywhere in the world — can guarantee absolute immunity from security incidents. We strongly encourage all members to use long, unique passwords, enable 2FA, never share login credentials and remain vigilant against phishing attempts impersonating Crederoom.

5. Data Sharing & Third-Party Disclosure

Crederoom never sells, rents, trades or monetises your personal data to third parties for commercial purposes. Full stop. Your information may be shared only under the following strictly limited circumstances:

Operational service providers — vetted vendors who assist with platform hosting, payment processing, KYC verification or customer support, all bound by strict confidentiality agreements and data-processing addendums
Technology and infrastructure partners — tier-1 liquidity providers and blockchain-infrastructure vendors whose systems underpin the Crederoom AI trading engine
Regulatory and legal authorities — when disclosure is legally mandated by applicable law, valid court order, subpoena or official governmental regulation
Business continuity events — in the rare event of a corporate merger, acquisition or asset transfer, user data may be transferred as part of the transaction, with advance notice provided to all affected members where legally required

6. Cookies & Tracking Technologies

crederoom.com uses cookies, pixel tags and similar tracking technologies to improve website performance, remember user preferences and analyse aggregated platform traffic. The categories of cookies we deploy include:

Essential cookies — strictly required for the platform to function correctly; these cannot be disabled
Performance cookies — collect anonymised interaction data to identify UX improvements
Functional cookies — remember your language, timezone, theme and dashboard-layout preferences between sessions
Analytics cookies — help us understand traffic patterns and measure the effectiveness of specific features

You can configure your browser at any moment to block, restrict or delete cookies. Please note that disabling essential cookies will prevent certain core crederoom.com functions — including secure login and the live dashboard — from working correctly.

7. Third-Party Services & External Integrations

The Crederoom platform integrates with carefully selected third-party services for payment processing, KYC verification, blockchain analytics and infrastructure support. Each of these providers operates under their own privacy policies and independent data-handling practices. Crederoom cannot be held responsible for the privacy practices of external providers, and we strongly recommend that all users review the policies of any linked service when relevant.

8. International Data Transfers

Crederoom operates globally and serves investors in 47+ countries, which means your data may be transferred to and processed in jurisdictions outside your country of residence — including Canada (our headquarters), Switzerland, Singapore and Ireland (our primary data centres). Wherever cross-border transfers occur, we ensure that appropriate legal safeguards are in place — including Standard Contractual Clauses (SCCs) and equivalent protective instruments — to maintain the security and integrity of your data in full compliance with GDPR, PIPEDA and other applicable regulations.

9. Data Retention Policy

Crederoom retains personal data only for as long as strictly necessary to fulfil the purposes for which it was originally collected — including providing platform services, satisfying legal obligations, resolving disputes and enforcing our agreements. Once data is no longer required, it is permanently deleted or irreversibly anonymised in accordance with our internal data-lifecycle policies. Specific retention periods vary by data type and applicable regulatory requirements, and typically range from the duration of your active account plus 5–7 years for financial and KYC records (as mandated by AML regulations).

10. Your Data Rights as a Crederoom Investor

Depending on your country of residence and applicable data-protection laws (such as GDPR in the EU, PIPEDA in Canada or CCPA in California), you may exercise the following rights regarding your personal data:

Right of access — request a complete copy of all personal data Crederoom holds about you
Right to rectification — request correction of any inaccurate, outdated or incomplete information
Right to erasure ("right to be forgotten") — request deletion of your personal data, subject to legal retention requirements
Right to restriction of processing — ask us to limit how we process your data in specific circumstances
Right to data portability — receive your data in a structured, machine-readable format (JSON or CSV) where technically feasible
Right to object — object to processing based on legitimate interests, direct marketing or automated decision-making
Right to withdraw consent — where processing is consent-based, you may withdraw at any time without affecting the lawfulness of prior processing
Right to lodge a complaint — file a complaint with your local data-protection supervisory authority

To exercise any of these rights, please contact the Crederoom Data Protection Office through the official support channels listed on our Contact page or by emailing [email protected]. We commit to responding to all valid requests within 30 calendar days.

11. Children's Privacy & Age Restrictions

crederoom.com is strictly intended for adult users aged 18 years and older (or the legal age of majority in your specific jurisdiction, whichever is higher). Crederoom does not knowingly collect, process or store personal data from individuals under the minimum legal age. If we become aware that data has been collected from a minor without proper parental consent, we will immediately take all reasonable steps to permanently delete that information from our systems. If you believe a minor has registered on crederoom.com, please contact us immediately at [email protected] so we can investigate and act accordingly.

12. Marketing & Promotional Communications

Crederoom may send you service-related transactional notifications, and — where you have provided explicit opt-in consent — promotional communications about new platform features, market insights and investor opportunities. You may opt out of marketing communications at any moment by clicking the unsubscribe link included in every promotional email, adjusting notification preferences in your dashboard, or contacting our support team directly. Opting out of marketing will not affect delivery of essential transactional notifications such as login alerts, deposit confirmations, trade executions and withdrawal confirmations — these are critical to the security and function of your account.

13. Updates & Changes to This Privacy Policy

Crederoom reserves the right to update, revise or modify this Privacy Policy at any time to reflect evolving data practices, new platform features or changes in applicable legal requirements. When material changes are introduced, we will prominently notify all registered users by posting the revised policy on this page with an updated "Last modified" date and, where appropriate, through email notification. Continued use of crederoom.com following the publication of any changes constitutes your acceptance of the updated policy. We strongly encourage all investors to review this page periodically to remain fully informed about how your personal data is handled and protected.

14. Contact the Crederoom Privacy Team

If you have any questions, concerns, complaints or requests relating to this Privacy Policy or the handling of your personal data, our dedicated Privacy Team is ready to help:

Email: [email protected]
General Support: [email protected]
Phone: +1 (780) 542-1618
Postal Address: Crederoom Inc., Data Protection Office, First Canadian Place, 100 King St W, Toronto, ON M5H 1H1, Canada

Crederoom is committed to addressing every privacy-related inquiry promptly, transparently and respectfully. We treat your data the way we would want our own data treated — with integrity, discretion and unwavering accountability.

Last updated: October 23, 2026
Effective date: October 23, 2026
Document version: 2.1