Privacy Policy

1. Introduction

Qredet Digital SARL ("Qredet", "we", "our", or "us") is committed to protecting the privacy, confidentiality, and security of the personal information entrusted to us by our customers, merchants, partners, website visitors, and mobile application users.

This Privacy Policy ("Policy") explains how we collect, use, process, store, protect, disclose, and transfer personal information when you access or use our website, mobile applications, payment infrastructure services, APIs, SDKs, merchant solutions, and other related products and services.

This Policy is intended to provide transparency regarding our data processing practices and to inform you of your rights concerning your personal information under applicable data protection laws and regulations.

By accessing or using Qredet's services, you acknowledge that you have read, understood, and accepted the terms of this Privacy Policy.

a.) Contact Details

If, at any time, users would like to exercise any of the rights granted in this Policy, they may do so by contacting us using any of the methods provided:

• Company Name: Qredet Digital SARL
• Address: 06 BP 2452 06 Abidjan II Plateaux
• Phone: +225 05 04 97 0227
• E-Mail: support@qredet.com

b.) Website Details

• Website URL: https://qredet.com
• Website Name: Qredet

c.) Mobile App

• Mobile App Name: Qredet
• Available on:
• iOS (App Store)
• Android (Google Play Store)

2. Disclaimers

Qredet is committed to processing personal information in a lawful, fair, transparent, and secure manner. We collect, use, store, disclose, and protect personal information in accordance with applicable data protection laws, regulations, and industry standards.

a.) Côte d'Ivoire Users

For users located in Côte d'Ivoire, personal information is processed in accordance with the applicable data protection laws and regulations administered by the Autorité de Régulation des Télécommunications/TIC de Côte d'Ivoire (ARTCI).

For the purposes of this Policy, "Personal Information" means any information relating to an identified or identifiable natural person, whether directly or indirectly identifiable through one or more identifiers.

By accessing, registering for, or using Qredet's website, mobile applications, products, or services, users acknowledge and consent to the collection, processing, storage, and use of their personal information as described in this Policy, where such consent is required by applicable law.

b.) Legal Basis for Processing

Qredet processes personal information on one or more of the following legal grounds:

• User consent.
• Performance of a contract or provision of requested services.
• Compliance with legal and regulatory obligations.
• Fraud prevention, risk management, and security monitoring.
• Legitimate business interests pursued by Qredet.
• Protection of vital interests of users or other individuals.
• Establishment, exercise, or defense of legal claims.

c.) Financial Services Compliance

As a provider of payment technology and digital financial infrastructure services, Qredet may process personal information for purposes including:

• Customer onboarding and registration.
• Identity verification and Know Your Customer (KYC) requirements.
• Anti-Money Laundering (AML) compliance.
• Fraud detection and prevention.
• Transaction monitoring and risk assessment.
• Regulatory reporting and compliance obligations.
• Security authentication and account protection.

d.) International Data Transfers

Qredet may use trusted third-party service providers, cloud hosting providers, and technology partners located in different jurisdictions. Where personal information is transferred outside Côte d'Ivoire, Qredet will implement appropriate contractual, technical, and organizational safeguards to ensure that such information remains protected and processed in accordance with applicable data protection laws.

e.) Policy Acceptance

By using Qredet's services, users acknowledge that they have read and understood this Privacy Policy and agree to the collection, use, processing, disclosure, and protection of their personal information as described herein.

3. Categories of Personal Information

Qredet Digital SARL ("Qredet") collects, processes, and stores personal information that is necessary for the provision of its services, compliance with applicable legal and regulatory requirements, fraud prevention, security monitoring, customer support, and business operations. Depending on the nature of your relationship with Qredet and the services utilized, we may collect the following categories of personal information:

3.1 Identity Information

We may collect information used to identify an individual, including:

• Full name;
• Date of birth;
• Nationality;
• Signature;
• National identification number;
• Passport number;
• Driver's license number;
• Other government-issued identification information.

3.2 Contact Information

We may collect contact details, including:

• Residential address;
• Business address;
• Mailing address;
• Mobile telephone number;
• Email address; and
• Other contact information voluntarily provided by the user.

3.3 Financial Information

To facilitate the provision of payment and financial technology services, we may collect:

• Bank account information;
• Payment instrument information;
• Account verification information;
• Transaction records and history;
• Merchant account information;
• Billing and settlement information; and
• Other financial information required to provide services or comply with legal obligations.

3.4 Identity Verification and Compliance Information

To comply with applicable laws, regulations, and industry standards, we may collect and process:

• Know Your Customer (KYC) documentation;
• Customer due diligence information;
• Identity verification records;
• Anti-Money Laundering (AML) screening results;
• Fraud prevention and risk assessment information;
• Regulatory compliance records; and
• Information required for ongoing monitoring and verification activities.

3.5 Biometric Information

Where permitted by law and required for identity verification or security purposes, we may collect:

• Facial recognition information;
• Selfie photographs used for identity verification;
• Biometric authentication records; and
• Other biometric identifiers necessary for service security and regulatory compliance.

3.6 Technical and Device Information

We may automatically collect certain technical information relating to the devices used to access our services, including:

• Internet Protocol (IP) address;
• Device identifiers;
• Device type and model;
• Operating system information;
• Browser type and version;
• Mobile network information;
• Application version information; and
• System logs and diagnostic information.

3.7 Usage and Network Information

We may collect information regarding interactions with our website, mobile applications, and services, including:

• User activity and navigation data;
• Session information;
• Authentication records;
• Feature usage statistics;
• Access timestamps;
• Clickstream data; and
• Preferences and settings.

3.8 Geolocation Information

Where enabled by the user or permitted by applicable law, we may collect:

• Approximate location information;
• Precise geolocation information; and
• Location-related data used for fraud prevention, security monitoring, service delivery, and regulatory compliance purposes.

3.9 Communications Information

We may collect information relating to communications with Qredet, including:

• Customer support requests;
• Email correspondence;
• Chat communications;
• Feedback submissions;
• Survey responses;
• Complaints and dispute records; and
• Other communications voluntarily provided to us.

3.10 Audio, Visual, and Verification Information

We may collect:

• Photographs;
• Verification images;
• Video recordings submitted for identity verification;
• Audio recordings relating to customer support interactions; and
• Other media required for service delivery, security, or compliance purposes.

3.11 Professional and Business Information

Where applicable, we may collect:

• Occupation information;
• Employer information;
• Business registration details;
• Merchant onboarding information;
• Tax identification information; and
• Professional information required for regulatory or compliance purposes.

3.12 Analytics and Inferred Information

We may generate or derive information from the data collected, including:

• User preferences;
• Behavioral patterns;
• Transaction trends;
• Service utilization insights;
• Fraud risk indicators; and
• Other analytical information used to improve our services and enhance security.

3.13 Information Obtained from Third Parties

Qredet may receive personal information from authorized third parties, including:

• Identity verification providers;
• Financial institutions;
• Payment processors;
• Fraud prevention service providers;
• Regulatory authorities;
• Business partners; and
• Publicly available sources, where permitted by applicable law.

Qredet shall collect and process only such personal information as is reasonably necessary to provide its services, comply with legal and regulatory obligations, safeguard users and systems, and support its legitimate business operations.

4. How We Use Personal Information

Qredet processes personal information only where necessary to provide its services, comply with legal and regulatory obligations, protect users and systems, and support legitimate business operations.

The personal information collected by Qredet may be used for one or more of the following purposes:

4.1 Provision of Services

We use personal information to:

• Provide, operate, maintain, and improve our products and services;
• Facilitate payment processing and transaction services;
• Enable customer and merchant onboarding;
• Manage user accounts and service access;
• Deliver requested products, services, and features; and
• Fulfill contractual obligations.

4.2 Identity Verification and Compliance

We use personal information to:

• Verify customer identity;
• Conduct Know Your Customer (KYC) procedures;
• Perform Anti-Money Laundering (AML) and fraud prevention checks;
• Assess transaction risk and suspicious activity;
• Meet regulatory, legal, and compliance requirements; and
• Maintain records required by applicable laws and regulations.

4.3 Security and Fraud Prevention

We use personal information to:

• Detect, investigate, prevent, and respond to fraud;
• Monitor unauthorized access attempts;
• Protect users, merchants, financial institutions, and our systems;
• Verify user authentication and account ownership;
• Prevent malicious, deceptive, or illegal activities; and
• Maintain platform security and operational integrity.

4.4 Communications

We may use personal information to:

• Send service-related notifications;
• Deliver security alerts and authentication messages;
• Provide customer support;
• Respond to inquiries, complaints, and requests;
• Notify users of changes to our services, policies, or terms; and
• Communicate important operational or regulatory information.

4.5 Analytics and Service Improvement

We may use personal information to:

• Analyze service performance and user engagement;
• Conduct testing, research, and quality assurance activities;
• Improve platform functionality and user experience;
• Develop new products, features, and services; and
• Monitor and enhance operational effectiveness.

4.6 Marketing Communications

Where permitted by applicable law or where consent has been obtained, we may use personal information to:

• Provide information regarding products and services;
• Send newsletters, promotional materials, and marketing communications; and
• Inform users about relevant updates, events, and offerings.

Users may opt out of marketing communications at any time by following the unsubscribe instructions included in such communications or by contacting Qredet directly.

4.7 Legal and Regulatory Requirements

We may use or disclose personal information where necessary to:

• Comply with applicable laws, regulations, and regulatory directives;
• Respond to lawful requests from courts, regulators, law enforcement agencies, or governmental authorities;
• Protect legal rights, property, or safety;
• Enforce contractual obligations and company policies; and
• Establish, exercise, or defend legal claims.

4.8 Corporate Transactions

Personal information may be processed in connection with:

• A merger
• An acquisition
• A corporate restructuring
• An asset sale
• A financing transaction; or
• Other business transfer involving Qredet.

Where such transactions occur, appropriate safeguards will be implemented to protect personal information.

4.9 Other Legitimate Business Purposes

We may process personal information for other legitimate business purposes that are compatible with the purposes described in this Privacy Policy and permitted under applicable law.

Qredet will not use personal information for purposes materially different from those described in this Privacy Policy without providing appropriate notice or obtaining consent where required by law.

5. Selling Personal Information

Qredet does not sell, rent, lease, trade, or otherwise disclose personal information to third parties for monetary compensation or commercial gain.

Personal information collected through our website, mobile applications, payment infrastructure services, APIs, SDKs, merchant solutions, and related platforms is used solely for legitimate business, operational, security, compliance, and regulatory purposes consistent with this Privacy Policy.

Personal information may be processed for purposes including:

• Identity verification and customer onboarding;
• Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance;
• Payment processing and transaction management;
• Fraud detection, prevention, and risk management;
• Customer support and dispute resolution;
• Service delivery and platform operations;
• Regulatory reporting and compliance obligations; and
• Security monitoring and system protection.

Qredet may share personal information with authorized service providers, business partners, financial institutions, regulatory authorities, and other third parties as described in this Privacy Policy. Such disclosures are made solely for legitimate business or legal purposes and are not considered a sale of personal information.

All third parties receiving personal information on behalf of Qredet are required to implement appropriate technical, organizational, and contractual safeguards to protect such information and may only process it in accordance with applicable laws and the instructions provided by Qredet.

Qredet does not permit third parties to use personal information for their own independent marketing purposes unless the user has provided explicit consent or such use is otherwise permitted by applicable law.

6. Sharing Personal Information

Qredet may disclose or share personal information with third parties only where necessary to provide services, comply with legal and regulatory obligations, protect legitimate interests, maintain security, or where otherwise permitted by applicable law.

Any sharing of personal information shall be subject to appropriate contractual, technical, organizational, and security safeguards designed to protect the confidentiality, integrity, and availability of such information.

Personal information may be shared with the following categories of recipients:

6.1 Service Providers

Qredet may share personal information with trusted third-party service providers who perform services on our behalf, including but not limited to:

• Cloud hosting and infrastructure providers;
• Identity verification and KYC service providers;
• Fraud prevention and risk management providers;
• Payment processors and financial service providers;
• Communication service providers (SMS, email, and notification services);
• Customer support providers;
• Security and monitoring service providers; and
• Technology and software vendors supporting our operations.

Such providers are authorized to access personal information only to the extent necessary to perform services on behalf of Qredet and are contractually required to maintain appropriate confidentiality and security measures.

6.2 Financial Institutions and Payment Partners

Where necessary to provide payment and financial technology services, Qredet may share personal information with:

• Licensed banks;
• Payment processors;
• Card networks;
• Settlement partners;
• Merchant acquiring institutions; and
• Other authorized financial institutions involved in transaction processing and settlement activities.

6.3 Business Partners and Affiliates

Qredet may share personal information with affiliated entities, strategic partners, and authorized business partners where such sharing is necessary to:

• Deliver services;
• Improve customer experience;
• Facilitate merchant onboarding;
• Support operational activities; or
• Develop and enhance products and services.

6.4 Regulatory Authorities and Government Agencies

Qredet may disclose personal information where required to comply with:

• Applicable laws and regulations;
• Regulatory directives;
• Court orders;
• Legal processes;
• Law enforcement requests; or
• Requests from competent governmental or supervisory authorities.

Such disclosures shall be limited to the information reasonably required for the applicable purpose.

6.5 User-Authorized Disclosures

Qredet may disclose personal information to third parties where:

• The user has provided explicit consent;
• The disclosure is requested or authorized by the user;
• The disclosure is necessary to complete a transaction initiated by the user; or
• An authorized representative is acting on behalf of the user.

6.6 Corporate Transactions

Personal information may be disclosed in connection with:

• A merger
• An acquisition
• A financing transaction
• A reorganization
• A corporate restructuring
• A sale of assets; or
• Other business transfer involving Qredet.

Where such transactions occur, Qredet will take reasonable measures to ensure that personal information remains protected and processed in accordance with this Privacy Policy.

6.7 Professional Advisors

Qredet may disclose personal information to its professional advisors, including:

• Legal counsel;
• Auditors;
• Accountants;
• Compliance consultants; and
• Other professional service providers,

where such disclosure is necessary for legitimate business, regulatory, or legal purposes.

6.8 International Transfers

Where personal information is transferred to service providers or partners located outside Côte d'Ivoire, Qredet shall implement appropriate safeguards to ensure that such information receives an adequate level of protection consistent with applicable data protection laws.

Qredet does not sell personal information to third parties and does not permit third parties to use personal information for their own independent commercial purposes except where expressly authorized by the user or required by law.

7. Privacy Rights and Choices

Qredet is committed to ensuring that individuals can exercise their rights concerning their personal information in accordance with applicable data protection laws and regulations.

Subject to applicable legal, regulatory, contractual, and operational requirements, individuals may exercise the rights described below.

7.1 Right of Access

You have the right to request confirmation as to whether Qredet processes your personal information and, where applicable, obtain access to such information.

Upon verification of your identity, Qredet may provide:

• The categories of personal information collected;
• The purposes for which the information is processed;
• The sources from which the information was obtained;
• The categories of recipients with whom the information has been shared;
• Information regarding retention periods; and
• A copy of the personal information held by Qredet, where permitted by law.

7.2 Right to Rectification

You have the right to request the correction, update, or completion of inaccurate, incomplete, or outdated personal information maintained by Qredet.

Qredet will take reasonable steps to ensure that personal information remains accurate and up to date.

7.3 Right to Erasure

You may request the deletion of your personal information where:

• The information is no longer necessary for the purpose for which it was collected;
• Consent has been withdrawn and no other lawful basis exists for processing;
• The information has been processed unlawfully; or
• Deletion is required by applicable law.

Qredet may decline a deletion request where retention of the information is required for:

• Legal or regulatory compliance;
• Fraud prevention and security purposes;
• Ongoing investigations;
• Contractual obligations;
• Financial recordkeeping requirements;
• Dispute resolution; or
• The establishment, exercise, or defense of legal claims.

7.4 Right to Restrict Processing

You may request that Qredet restrict the processing of your personal information under circumstances permitted by applicable law, including where the accuracy of the information is contested or the lawfulness of processing is challenged.

7.5 Right to Object

You may object to the processing of your personal information where such processing is based on Qredet's legitimate interests or were permitted by applicable law.

Qredet will evaluate such requests and cease processing where required by law unless compelling legitimate grounds exist to continue processing.

7.6 Right to Data Portability

Where technically feasible and permitted by law, you may request that personal information provided to Qredet be made available in a structured, commonly used, and machine-readable format.

7.7 Right to Withdraw Consent

Where processing is based upon consent, you may withdraw your consent at any time.

Withdrawal of consent shall not affect the lawfulness of processing conducted prior to the withdrawal.

7.8 Automated Decision-Making

Qredet may utilize automated systems for fraud prevention, transaction monitoring, risk assessment, security controls, and regulatory compliance purposes.

Where required by law, individuals may request information regarding significant automated decisions affecting them and may request human review where applicable.

7.9 Exercising Your Rights

To exercise any of the rights described in this Policy, you or your authorized representative may submit a request using the contact information provided in Section 1 of this Privacy Policy.

Qredet may request additional information necessary to verify the identity of the requesting individual before processing any request.

7.10 Authorized Representatives

Where a request is submitted on behalf of another individual, Qredet may require:

• Written authorization from the individual concerned;
• Proof of identity of the authorized representative;
• Direct confirmation from the individual; or
• Other documentation reasonably necessary to verify authorization.

7.11 Response Time

Qredet will respond to verified requests within a reasonable period and in accordance with applicable legal and regulatory requirements.

Where additional time is required due to complexity or volume, Qredet will notify the requester and provide an estimated response timeframe.

7.12 Non-Discrimination

Qredet will not discriminate against any individual for exercising rights granted under applicable data protection laws.

Individuals who exercise their privacy rights will continue to receive fair and equitable access to Qredet's services, subject to applicable legal, regulatory, and contractual requirements.

8. Changes and Amendments

Qredet reserves the right to amend, modify, update, or replace this Privacy Policy at any time to reflect changes in applicable laws, regulations, business practices, technologies, services, security requirements, or operational needs.

Where material changes are made to this Privacy Policy, Qredet will take reasonable steps to notify affected users through one or more of the following methods:

• Publication of the updated Privacy Policy on the Qredet website;
• In-app notifications;
• Email communications;
• SMS notifications; or
• Other appropriate communication channels.

The revised version of this Privacy Policy shall indicate the date on which it was last updated and shall become effective upon publication unless otherwise stated.

Users are encouraged to review this Privacy Policy periodically to remain informed about how Qredet collects, uses, processes, stores, and protects personal information.

Where required by applicable law, Qredet will obtain consent prior to implementing material changes that significantly affect the way personal information is processed.

Continued use of Qredet's services following the effective date of any updated Privacy Policy constitutes acknowledgment of the revised Policy, except where additional consent is required by applicable law.

9. Linking to Third Parties

Qredet's website, mobile applications, and services may contain links to, integrate with, or provide access to third-party websites, applications, products, services, content, or platforms ("Third-Party Services") for the convenience of users or as part of the functionality of our services.

These Third-Party Services operate independently from Qredet and are governed by their own privacy policies, terms of use, security practices, and legal obligations. Qredet does not own, control, or supervise the privacy and data processing practices of such Third-Party Services.

Users acknowledge and agree that:

• Accessing or interacting with Third-Party Services is at their own discretion and risk;
• Any personal information submitted to Third-Party Services will be subject to the privacy policies and practices of those third parties;
• Qredet is not responsible for the collection, use, disclosure, storage, security, accuracy, or management of personal information by Third-Party Services;
• Qredet does not endorse, guarantee, or assume responsibility for the content, products, services, or practices of Third-Party Services; and
• Users should carefully review the applicable privacy policies and terms of use before providing personal information to any Third-Party Service.

Where Qredet integrates with third-party providers for identity verification, payment processing, fraud prevention, cloud hosting, communication services, analytics, or other operational purposes, such integrations are subject to contractual, technical, and organizational safeguards designed to protect personal information in accordance with applicable laws and this Privacy Policy.

However, Qredet cannot guarantee the privacy, security, or practices of any Third-Party Service beyond the controls and obligations imposed through such arrangements.

Users who choose to leave Qredet's platforms or interact with Third-Party Services do so subject to the terms, conditions, and privacy policies of those third parties.

10. Security & Protection

Qredet is committed to protecting the confidentiality, integrity, availability, and security of personal information entrusted to us. We implement appropriate technical, administrative, organizational, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, destruction, loss, misuse, or other unlawful processing activities.

Our security program is designed in accordance with applicable legal, regulatory, and industry requirements and incorporates recognized security standards and best practices, including principles aligned with ISO/IEC 27001 and other relevant information security frameworks.

To protect personal information, Qredet may implement measures including:

• Encryption of sensitive data in transit and, where appropriate, at rest;
• Secure authentication and access control mechanisms;
• Role-based access management and least-privilege principles;
• Multi-factor authentication for administrative and privileged access;
• Network security controls, monitoring, and intrusion detection mechanisms;
• Security logging, auditing, and monitoring activities;
• Secure software development and testing practices;
• Vulnerability management and security assessments;
• Data backup, recovery, and business continuity procedures;
• Employee confidentiality obligations and security awareness training; and
• Third-party risk management and vendor security reviews.

Access to personal information is restricted to authorized personnel, contractors, and service providers who require such access to perform their duties and who are subject to confidentiality and security obligations.

Qredet regularly reviews and updates its security measures to address evolving threats, technological developments, and regulatory requirements.

While Qredet takes reasonable and appropriate steps to protect personal information, no method of electronic transmission, storage, or processing can be guaranteed to be completely secure.

Accordingly, Qredet cannot guarantee absolute security of information transmitted through the internet or other electronic communication channels.

Users are encouraged to take appropriate precautions when accessing Qredet services, including:

• Protecting account credentials and authentication factors;
• Using strong and unique passwords;
• Avoiding the use of unsecured public networks when transmitting sensitive information;
• Promptly reporting suspected unauthorized access or security incidents; and
• Keeping devices and applications updated with current security patches.

In the event of a security incident or personal data breach that may pose a risk to affected individuals, Qredet will take appropriate measures, including investigation, containment, remediation, and notification to affected individuals and competent authorities where required by applicable law.

11. Contact

If you have any questions, concerns, requests, complaints, or comments regarding this Privacy Policy, the collection, processing, use, disclosure, storage, or protection of your personal information, or if you wish to exercise any of your privacy rights, please contact Qredet using the information below:

Qredet Digital SARL

06 BP 2452 Abidjan 06, II Plateaux ENA K12 Villa 245, Abidjan, Côte d'Ivoire

Email: support@qredet.com

Website: https://qredet.com

Qredet will make reasonable efforts to investigate and respond to privacy-related inquiries, complaints, and requests within a reasonable timeframe and in accordance with applicable legal and regulatory requirements.

Where a user believes that Qredet has not adequately addressed a privacy concern, the user may have the right to submit a complaint to the appropriate data protection, regulatory, or supervisory authority having jurisdiction over the matter.

Qredet is committed to maintaining transparency, accountability, and compliance in the handling of personal information and welcomes inquiries regarding its privacy and data protection practices.