Credstone
Schedule a demo
Privacy

Privacy notice

Effective 2026-05-26

1. Who we are

Credstone Technologies Limited ("Credstone," "we," "us") is a company registered in Ghana, with operations based in Accra. This notice covers the website at credstonetechnologies.com (the "Site").

For any questions about this notice, your personal data, or to exercise the rights described below, contact us at support@credstonetechnologies.com.

2. Scope

This notice applies only to personal data collected through the Site. It does not cover personal data processed under a separate customer contract (for example, data we may handle on behalf of a bank or lender that has signed a services agreement with us); that processing is governed by the relevant contract and data processing terms agreed with each customer.

3. Information we collect

3.1 Information you provide

  • Inquiry form fields. When you submit our contact or product-inquiry forms, we collect your name, work email, institution, role (optional), country, institution type, transaction-volume range, project timeline, the topics you are working on, and any free-text message you choose to include.
  • Chat-widget conversations. When you use the on-site chat widget, the messages you send and the assistant's replies are stored on our servers. Before storage, an automated redactor removes email addresses, phone numbers, and long digit sequences (such as card or account numbers) and replaces them with placeholder tokens. The chat assistant's own configuration (its system prompt and instructions) is not stored alongside the conversation.

3.2 Information we collect automatically

  • Hashed network metadata. For each form submission and chat conversation, we record a one-way cryptographic hash of your IP address (we never store the raw IP), your browser's user-agent string, and the referring URL if you arrived from another site. The hash lets us deduplicate conversations without identifying you.
  • Server logs. Our hosting provider may retain standard request logs (timestamps, paths, response codes, IP-derived identifiers) for the period set by their default plan. These logs are used for security monitoring and operational debugging.

4. How we use this information

  • To respond to your inquiry and route it to the right person at Credstone.
  • To provide and improve the on-site chat assistant.
  • To maintain the security, integrity, and performance of the Site.
  • To comply with our legal obligations.

We do not use the information you provide to make automated decisions about you, and we do not engage in profiling or behavioural advertising. The chat assistant is conversational and does not score, rank, or classify visitors.

5. Legal bases for processing

When you submit a form or send a message through the chat widget, we rely on your consent (the act of submission) and on the steps necessary at your request prior to entering into a contract (responding to your inquiry). You can withdraw your consent at any time; see Section 7 below.

6. Who we share information with

We share personal data only with the following third-party service providers ("sub-processors"), each used for a specific operational purpose:

  • EmailJS — transports inquiry-form submissions from the Site to our internal inbox.
  • Anthropic — provides the large-language model that powers the chat assistant. Conversation messages are sent to Anthropic for the duration of the request so the model can generate a reply; Anthropic's data-handling commitments are described in their own privacy and trust documentation.
  • Supabase — provides the database where chat conversations and inquiry submissions are stored.

We may also share personal data with our hosting provider (Vercel) to the extent necessary to deliver the Site, with professional advisers (such as legal counsel) under confidentiality obligations, and where required to comply with applicable law or to protect our rights and the rights of others.

We do not sell personal data, and we do not share it with advertising networks, data brokers, or analytics resellers.

7. International transfers

Some of our sub-processors operate outside Ghana. Personal data submitted through the Site may be transferred to and processed in the United States or other regions where our service providers operate. Where you submit data to the Site, this transfer is performed on the basis of your consent.

8. How long we keep it

We retain personal data for as long as is necessary for the purposes described in this notice, and in line with any applicable legal or regulatory obligations. You can request deletion at any time using the rights described in Section 9; we will action your request unless we are required by law to retain a record.

9. Your rights

Depending on the jurisdiction you are in, you may have some or all of the following rights in respect of personal data we hold about you:

  • The right to ask what personal data we hold about you and to receive a copy.
  • The right to ask us to correct inaccurate or incomplete data.
  • The right to ask us to delete your personal data ("erasure" or "the right to be forgotten").
  • The right to object to or restrict our processing in certain circumstances.
  • The right to receive your data in a portable format and to ask that we transfer it to another controller.
  • The right to withdraw consent at any time, where we are relying on consent.
  • The right to lodge a complaint with the data-protection regulator in your jurisdiction (see Section 10).

To exercise any of these rights, write to support@credstonetechnologies.com. We will respond as soon as reasonably practicable.

10. Regional rights and complaint routes

You can lodge a complaint with the data-protection regulator in your jurisdiction:

  • Ghana — Data Protection Commission (DPC), Accra.
  • Nigeria — Nigeria Data Protection Commission (NDPC).
  • Kenya — Office of the Data Protection Commissioner (ODPC).
  • South Africa — Information Regulator.
  • European Union / United Kingdom — the supervisory authority in the EU/EEA member state where you live or work, or the UK Information Commissioner's Office (ICO).

11. Cookies and similar technologies

The Site uses functional cookies only — those strictly necessary for the Site to operate and for the chat widget to maintain conversation continuity within a session. We do not use analytics, advertising, or third-party tracking cookies.

Because we do not set non-essential cookies, we do not display a consent banner. If we introduce analytics or non-essential cookies in the future, we will update this notice and add an appropriate consent mechanism before any such cookie is set.

12. Security

We use commercially reasonable technical and organisational measures to protect personal data against accidental loss and unauthorised access, including HTTPS for all transmissions, server-side hashing of IP addresses, automated redaction of high-sensitivity content before storage, role-based access control on stored data, and segmentation of administrative credentials.

Credstone is pursuing ISO 27001 certification. No other security or compliance certifications are currently held for the Site or its supporting infrastructure.

13. Children

The Site is intended for business and professional audiences. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has submitted personal data through the Site, contact us and we will delete it.

14. Changes to this notice

We may update this notice from time to time. When we do, we will revise the effective date at the top of the page and post the new version here. Material changes will be made visible on the Site for a reasonable period after they take effect.

15. Contact

Credstone Technologies Limited
Accra, Ghana
support@credstonetechnologies.com