Privacy Policy

1. Who operates the service

The legal entity operating any live CreddiFix service is Creddifix, located in Mysore, Karnataka, India. Privacy contact: info@creddifix.com. The current package is a frontend demonstration and does not identify its legal operator.

2. Information handled by this frontend

• Signup and profile: first name, last name, email address, and mobile number are saved in this browser’s local storage so the demo dashboard can show the profile. The sign-in demo may save an email address and a display name derived from it.
• Password: the signup page checks the password in the browser; this frontend does not save it or send it to an account service.
• PAN: the dashboard profile editor displays a PAN only in the current page session. It is not written to local storage by that editor. Do not enter a real PAN into a demo unless you accept that it is temporarily visible in the page.
• Password reset: the reset form checks an email address in the browser. The current package does not store the address or send a reset email.
• Credit reports and payments: no bureau report is fetched, no report request is submitted, and no payment is processed by the current dashboard.

The supplied archive also contains older, currently unconnected report-flow code. Before enabling additional pages or workflows, the operator should review their actual data handling and update this policy to match.

3. Why the Demo handles information

The included signup and dashboard scripts use browser storage to demonstrate displaying profile details across pages. The current password-reset page only validates the email format. No backend account, report, payment, analytics, or email service is connected to these pages.

The stylesheet requests fonts from Google Fonts. A browser making that request may share standard network and device metadata with the font provider. Confirm the provider’s current terms and privacy disclosures before production use.

4. Browser storage and clearing your data

Profile data saved by the demo remains in the browser until it is removed. Signing out removes the demo profile entry. You can also clear site data in your browser settings. PAN entered in the current profile editor is not saved when you leave or reload the page.

These browser-only behaviors are not a secure account or data-storage system. Do not use the demo to store passwords, real credit reports, payment details, or sensitive identity information.

5. Sharing and service providers

The supplied member pages do not send profile fields to a connected account, bureau, payment, or email service. The Google Fonts stylesheet is loaded from Google’s fonts domain as described above. Confirm all service providers, hosting, logs, analytics, and data transfers for the deployed site before replacing this draft with a live policy.

6. Retention and security

Browser-stored demo profile fields persist until sign-out or browser storage is cleared. The operator has not supplied a server-side retention schedule, security architecture, or incident contact for a live service. Complete those details before launch; do not describe safeguards that have not been implemented.

7. Your choices and rights

You can sign out or clear the browser’s stored site data to remove the demo profile. Rights such as access, correction, deletion, portability, or objection depend on applicable law and on whether a live service processes your data. To request help for a live service, contact info@creddifix.com.

8. Children and age requirements

The supplied pages do not verify a user’s age. The operator must set and enforce an age requirement consistent with the service and applicable law: info@creddifix.com.

9. Updates and jurisdiction

This draft was prepared for the current static frontend package. If the product, data flows, vendors, or applicable law change, update the policy and state how users will be notified. Governing privacy law and complaint contact: [insert applicable jurisdiction and authority after legal review].