Privacy Policy

Hathme Trading and Technology Private Limited, operating under the brand name “Creddx” (“Creddx,” “we,” “us,” or “our”), is committed to protecting the privacy and security of users (“you” or “User”) accessing its website at https://www.creddx.com, and associated AI trading automation tools (collectively, the “Platform”).

This Privacy Policy explains how Creddx collects, uses, discloses, and safeguards your data when you interact with its AI software interface. Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access or use the Platform.

2.1 Creddx Platform Scope: Creddx operates exclusively as a non-custodial software provider, Web3 analytical interface, and AI trading automation protocol. Creddx does not accept, hold, pool, or process Indian Rupees (“INR”) or any other fiat currency.

2.2 Independent Data Controller for Fiat & KYC Services: All fiat currency conversion services (INR-to-USDT and USDT-to-INR), bank payment transfers, and statutory compliance verifications — including Customer Due Diligence (“CDD”), Know Your Customer (“KYC”), Anti-Money Laundering (“AML”), and Counter-Financing of Terrorism (“CFT”) checks — are executed independently and directly by Finstar AI LLC (“Onramp.Money”), an FIU-IND registered Reporting Entity.

2.3 Data Separation: For the purposes of statutory KYC and AML compliance under the Prevention of Money Laundering Act, 2002 (“PMLA”), Onramp.Money acts as an independent Data Controller. Personal identity documents, Permanent Account Numbers (“PAN”), live selfie verifications, and bank account credentials submitted within the Onramp.Money widget are collected directly by Onramp.Money and are governed by Onramp.Money's Privacy Policy. Creddx does not collect, inspect, verify, or store statutory KYC or banking documents.

Creddx collects the minimal personal and technical information strictly necessary to provide, maintain, and secure its AI software services.

3.1 Information You Provide Directly

• (a)Account Registration Data. Email address, username, and encrypted authentication credentials created during registration.
• (b)API Keys & Exchange Connections. Encrypted API keys, secret keys, or wallet authorization tokens provided by you to allow Creddx AI bots to execute automated trading strategies on your connected exchange account or self-sovereign wallet.
• (c)Communication Data. Information sent to Creddx's customer support desk or community channels, such as support ticket details and feedback.

3.2 Information Collected Automatically (Platform Telemetry)

• (a)Device & Network Identifiers. IP address, browser type, operating system, device fingerprint, and language preferences.
• (b)Usage & AI Bot Analytics. Trading strategy parameters, bot configurations, execution latency, error logs, and platform navigation patterns.
• (c)Blockchain & Public Ledger Data. Public wallet addresses connected to the Platform and publicly verifiable on-chain transaction hashes.

Creddx processes your information for the following legitimate business and operational purposes:

• (a)To operate, maintain, and optimize its AI algorithms, trading bots, and analytical tools.
• (b)To authenticate user access and prevent unauthorized entry to your account.
• (c)To execute client-side trading instructions and automated strategy routines authorized by you.
• (d)To monitor system health, detect software bugs, and prevent cybersecurity attacks or fraudulent activities.
• (e)To comply with applicable legal, statutory, or judicial obligations.

Creddx does not sell, rent, or trade your personal information. Creddx shares data only under the following limited circumstances:

5.1 Third-Party Integration Partners (Onramp.Money). When you initiate a fiat buy or sell request (“Buy Crypto” or “Sell Crypto”), you interact directly with Onramp.Money. Necessary session identifiers or wallet addresses may be passed via secure API to ensure seamless token delivery to your designated wallet.

5.2 Service Providers. Creddx may share technical data with trusted cloud hosting providers, database security services, and infrastructure analytics vendors operating under strict data confidentiality agreements.

5.3 Legal & Law Enforcement Demands. Creddx may disclose personal data if required by court order, law, or governmental regulation, or when it believes in good faith that such action is necessary to comply with legal proceedings or to protect the rights, property, and safety of Creddx, its users, or the public.

5.4 Business Transfers. In the event of a merger, acquisition, corporate reorganization, or sale of assets, user information may be transferred as part of the corporate asset evaluation.

6.1 Encryption Standards. Creddx employs industry-standard cryptographic protocols, including AES-256 encryption for sensitive data at rest (such as connected exchange API keys) and TLS/SSL encryption for data in transit.

6.2 Non-Custodial Architecture. Creddx does not retain withdrawal permissions for connected API keys. Users are instructed to grant “Trade-Only” API permissions and to disable “Withdrawal” permissions when connecting third-party exchange accounts to Creddx AI bots.

6.3 Risk Acknowledgment. While Creddx implements rigorous technical and organizational safeguards, no automated system or internet transmission is completely secure. You are responsible for maintaining the confidentiality of your account credentials and multi-factor authentication (“MFA”).

As a global Web3 software interface, information collected by Creddx may be stored and processed on servers located outside your home state or country. By using the Platform, you consent to the transfer of data to countries that may have data protection laws different from those of your jurisdiction.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• (a)Right to Access. The right to request copies of the personal data held by Creddx.
• (b)Right to Rectification. The right to request correction of inaccurate or incomplete data.
• (c)Right to Erasure. The right to request deletion of your account and non-statutory personal data, subject to overriding legal obligations.
• (d)Right to Withdraw Consent. The right to withdraw consent for non-essential processing.

To exercise any of these rights, please contact Creddx's Data Protection Officer at support@creddx.com.

The Platform contains links to third-party websites, decentralized protocols, and integrated widgets, including Onramp.Money. Creddx is not responsible for the privacy practices, security standards, or content of third-party platforms. You are encouraged to review the privacy policies of any third-party service accessed through Creddx.

Creddx reserves the right to update or modify this Privacy Policy at any time. Any changes will become effective immediately upon posting the revised Privacy Policy on the Platform with an updated “Last Updated” date. Continued use of the Platform following any modifications signifies your acceptance of the updated terms.

If you have questions, concerns, or requests regarding this Privacy Policy, please contact Creddx at:

Hathme Trading and Technology Private Limited (Brand: Creddx)

Email: support@creddx.com