Privacy Policy

Last updated: October 2026

CRED ("CRED," "we," "us," or "our") is committed to protecting the privacy of our users, customers, and website visitors. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website, use our platform, or engage with our services. CRED operates as a B2B data intelligence platform, and we take our obligations under applicable data protection laws—including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant frameworks—seriously.

By accessing or using our platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our services.

Information We Collect

We collect information that you provide directly to us, information we obtain automatically when you use our platform, and information from third-party sources. The types of personal information we may collect include your name, email address, company name, job title, phone number, billing information, and any other information you choose to provide when creating an account, filling out forms, or communicating with us.

When you use the CRED platform, we automatically collect certain technical information, including your IP address, browser type and version, operating system, device identifiers, pages visited, features used, time and date of access, referring URLs, and clickstream data. We use cookies, web beacons, and similar tracking technologies to collect this information. Our platform also logs your interactions with data records, search queries, report generation activities, and API usage to improve our services and provide you with a better experience.

We may also receive information about you from third-party sources, including our data partners, publicly available sources, and other users of our platform who may provide your contact information when using our collaboration features.

How We Use Your Information

CRED uses the information we collect to provide, maintain, and improve our data intelligence platform. Specifically, we use your information to process and fulfill your account registration, authenticate your identity, manage your subscription and billing, deliver the data services you have requested, and provide customer support. We also use your information to personalize your experience, recommend relevant data insights, and optimize our platform's performance.

We may use your information to send you transactional communications, such as account confirmations, billing notifications, and service updates. With your consent, we may also send you marketing communications about new features, product updates, industry insights, and promotional offers. You may opt out of marketing communications at any time by following the unsubscribe instructions included in each email or by contacting us directly.

We also use information in the aggregate to analyze trends, monitor platform usage, troubleshoot technical issues, detect fraud and security threats, and comply with our legal obligations. CRED maintains SOC 2 certification, and our data handling practices are designed to meet the highest standards of security and compliance.

Data Sharing

CRED does not sell your personal information to third parties. We may share your information with trusted third-party service providers who assist us in operating our platform, including cloud infrastructure providers (such as Amazon Web Services and Google Cloud Platform), artificial intelligence and large language model providers that support our in-product assistant and automated analysis features, payment processors, analytics providers, customer support tools, and email delivery services. These service providers are contractually obligated to use your information only as necessary to provide services to CRED and are required to maintain the confidentiality and security of your data.

We may disclose your information if required to do so by law, in response to a valid legal process (such as a subpoena, court order, or government request), or when we believe disclosure is necessary to protect our rights, enforce our terms of service, investigate fraud, or ensure the safety of our users. In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction, and we will notify you of any such change in ownership or control.

We may also share anonymized or aggregated data that cannot reasonably be used to identify you for research, analytical, and benchmarking purposes.

Integrations and AI Connectors

CRED offers optional integrations that connect your CRED workspace to third-party applications, including AI assistants such as Claude and ChatGPT, customer relationship management systems, and other business tools. These integrations are not enabled by default. They are enabled from within your workspace or from the third-party application by someone with the necessary permissions, and they can be turned off again at any time.

When you enable an integration, you authorize CRED to make data from your workspace available to that application at your direction. Depending on the integration and on the actions you take within it, this may include company and contact records, lists and collections, custom fields, notes, and other information your account can access. Access is scoped to your own workspace: an integration is limited to data your CRED account is authorized to access.

Using an integration also involves CRED processing information. To return the results you asked for, we process the requests the connected application sends on your behalf, and we store the authorization issued for that connection. We additionally keep an operational record of each request: which action was called, which application called it, whether it succeeded, and how long it took. These operational records are designed to identify the action and its outcome rather than the contents of the request or the data returned, although our service logs may capture limited details of a request, such as the name of an item being created or the reason an action failed, where this is needed to operate or troubleshoot the integration. We use these records to operate, secure, bill for and troubleshoot the integration, and we retain them as described in the Data Retention section below.

Once information is transmitted to a third-party application, it is processed under that provider's own privacy policy and terms, not under this one. CRED does not control how a third-party provider stores, retains, uses, or further discloses the information it receives. We encourage you to review that provider's policies before enabling an integration, particularly where your workspace contains personal data relating to individuals in jurisdictions with data protection laws.

Some integrations can also write back to your CRED workspace — for example, creating a list, updating a field, or starting a job that consumes credits. CRED labels each available action according to whether it only reads information or can change it, so that the connected application can ask you to confirm before an action runs.

You can withdraw an integration's access at any time by disabling it where it was enabled — in your CRED workspace for integrations configured there, or by removing the connection in the third-party application — or by contacting us at privacy@credplatform.com. When a connection is removed in the third-party application, that application stops using it; the authorization CRED holds for the connection is then no longer renewed, expires within 30 days, and is deleted. If you need an authorization revoked sooner, contact us and we will revoke it. Withdrawal does not by itself delete information the provider has already received, which is governed by that provider's own retention practices.

Data Retention

CRED retains your personal information for as long as your account is active or as needed to provide you with our services. We also retain your information as necessary to comply with our legal obligations, resolve disputes, enforce our agreements, and support our legitimate business operations. When your information is no longer needed for these purposes, we will securely delete or anonymize it in accordance with our data retention policies and applicable law.

For data processed through our platform on behalf of our customers (as a data processor), we retain such data in accordance with the terms of our Data Processing Agreement and the instructions of the relevant data controller. Upon termination of a customer's subscription, we will delete or return their data within 90 days, unless retention is required by law.

For integrations, the authorization issued for a connection is kept while the connection is in use. Each access credential issued under it is valid for no more than one hour, and an authorization that goes unused for 30 days expires and is deleted. Operational records of integration requests, and any request details captured in our service logs, are kept only for as long as needed to operate, secure, bill for and troubleshoot the integration, after which they are deleted or anonymized.

Cookies and Tracking Technologies

CRED uses cookies and similar technologies to enhance your experience on our platform. Essential cookies are required for the platform to function properly and cannot be disabled. Performance cookies help us understand how visitors interact with our platform by collecting and reporting information anonymously. Functional cookies enable enhanced functionality and personalization, including form routing and calendar scheduling via Default.com. Targeting cookies may be set through our site by our advertising partners to build a profile of your interests and show you relevant content on other sites.

You can manage your cookie preferences through your browser settings or through our cookie consent banner. Please note that disabling certain cookies may impact your ability to use some features of our platform. We use analytics services, including PostHog and Google Analytics, to help us analyze how users engage with our platform.

Your Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information. Under the GDPR, these rights include the right to access, correct, delete, and port your data, as well as the right to restrict or object to certain processing activities and the right to withdraw consent. Under the CCPA, California residents have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale of personal information, and the right to non-discrimination for exercising these rights.

To exercise any of these rights, please contact us at privacy@credplatform.com. We will respond to your request within the timeframes required by applicable law (typically 30 days under GDPR and 45 days under CCPA). We may ask you to verify your identity before processing your request to protect the security of your information.

International Data Transfers

CRED is headquartered in the United States, and your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. When we transfer personal data from the European Economic Area (EEA), the United Kingdom, or Switzerland to countries that have not been deemed to provide an adequate level of data protection, we rely on appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, to ensure your data is protected in accordance with applicable law.

Contact Us

If you have any questions about this Privacy Policy, our data practices, or your rights, please contact us at: