Privacy Policy

Welcome to CrediMeteor (hereinafter referred to as "this App" or "we"). We deeply understand the importance of personal data to you and regard the protection of user privacy and financial security as the fundamental baseline of our operations. This Privacy Policy aims to explain—fully and transparently—how we collect, process, store, and protect your personal data when you access, register for, and use CrediMeteor mobile products and related services, as well as the statutory rights you hold regarding your data.

Before clicking "Agree" or launching this App, please carefully read and fully understand all terms of this Policy. By using CrediMeteor, you acknowledge and accept the terms set forth herein. If you do not agree to any part of this Policy, please immediately cease using the App and uninstall it.

1. Scope of Data Collection and Specific Collection Rules

To provide you with compliant credit limit assessment, account management, and transaction settlement services, and to effectively prevent financial fraud, CrediMeteor collects information in the following categories, adhering to the principles of legality, fairness, and necessity:

1.1 Personal Identity Information

To create your account and verify your identity, we collect your name, date of birth, phone number, employment details, marital status, banking information, and government-issued identification details. All data is transmitted via encrypted connections and securely stored at https://info.credimeteor.com.

1.2 SMS Information

Upon obtaining your explicit and separate system authorization, we access SMS messages related to financial transactions stored on your device from the past 180 days. Using an automated, precision-filtering mechanism, we extract and analyze only those notifications containing specific financial transaction terms (e.g., "deposit," "debit," "bill," "balance," "repayment," "credit limit"); daily communication texts involving private phone numbers are directly ignored and excluded by the system. SMS data is used to assess your overall debt repayment capacity and daily cash flow stability, verify transaction statuses, and effectively prevent risks associated with unauthorized debits and fraud.

SMS data is transmitted via encryption to a dedicated secure server(https://info.credimeteor.com).

1.3 Device Information

We may collect information related to your device, including hardware configuration, operating system details, device identifiers, user profiles, and mobile network information. This information is primarily used to identify and link your device, ensure the security of your account and services, and help us prevent unauthorized access, identity impersonation, and other anomalous activities.

1.4 Installed Apps

To create a secure financial operating environment and prevent hijacking by malware or the use of tools by fraud syndicates, we may retrieve high-level metadata regarding apps installed on your device (such as app names, package names, and timestamps for installation and updates). We never access private chat logs, passwords, credentials, or specific usage history within any app.

1.5 Camera Permissions

To facilitate document submission, this app may request access to your camera. Captured images are immediately encrypted and transmitted to https://info.credimeteor.com and are deleted once verification is complete. Captured images are retained only for the duration of the verification session and are automatically removed from our systems within 24 hours after the verification is completed.

1.6 Approximate Location

With your permission, we collect only your approximate network-based location to confirm whether your area falls within the service coverage of this app; we never track or record your precise GPS trajectory.

2. Purposes and Legal Basis for Processing Personal Information

We collect and process your data strictly within the scope of the following clear and legitimate purposes:

Identity Verification and Credit Assessment: Verifying the authenticity of the applicant's identity, assessing creditworthiness, and calculating and granting an appropriate credit limit.

Financial Operations and Contract Fulfillment: Managing your credit account, processing loan disbursements and repayment deductions, generating statements, and reconciling transaction records.

Risk Control and Fraud Prevention: Detecting anomalous logins and high-risk transactions, combating synthetic identity theft, and maintaining the security of the overall system and funds.

Customer Service and Notifications: Sending necessary alerts regarding account changes and repayment reminders, and addressing your inquiries and complaints.

Compliance with Legal and Regulatory Obligations: Cooperating with anti-money laundering (AML) investigations and financial regulatory audits, and fulfilling applicable legal and regulatory requirements.

3. Information Sharing, Disclosure, and Third-Party Isolation Policy

CrediMeteor strictly adheres to data confidentiality obligations and will never sell, rent, or commercially exploit your personal privacy. We share or disclose data to a limited extent and in accordance with the law only under the following strictly limited and necessary circumstances:

Trusted compliant service providers: Including cloud infrastructure providers for data storage and technical support providers for identity verification. Such partners have signed strict non-disclosure agreements (NDAs) and data security processing contracts with us, and are strictly prohibited from using the data for any purpose other than those authorized.

Mandatory legal disclosure: Upon receipt of court judgments, arbitration awards, or mandatory data access orders issued by competent government authorities or financial regulators in accordance with statutory procedures.

4. Robust Data Security Protection Architecture

We employ multi-layered technical and administrative safeguards to comprehensively protect your personal data against unauthorized access, disclosure, tampering, or destruction:

End-to-end encrypted transmission: All communication between the application and backend servers utilizes high-strength TLS/HTTPS secure transmission protocols.

Encryption of data at rest: Sensitive fields stored in databases are encrypted using industry-standard algorithms.

Strict access segregation: We implement the principle of least privilege and a role-based access control system, allowing access to relevant data only to authorized personnel with a clear business need, while maintaining audit logs for all operations.

Regular security monitoring and auditing: We engage independent third-party security agencies to conduct regular penetration testing, vulnerability scanning, and data compliance assessments to ensure our defense system remains agile and robust.

5. Data Retention Period and Secure Deletion Mechanism

We retain your personal data only for the minimum period necessary to achieve the purposes described in this policy, or for the mandatory retention periods required by relevant financial laws and regulations (such as anti-money laundering laws, accounting laws, etc.).

Upon the cancellation of your account or the expiration of the statutory data retention period, we will permanently erase your data using secure, non-recoverable wiping technologies or render it irreversibly anonymized so that it can no longer be linked to a specific individual.

6. Special Statement on the Protection of Minors

CrediMeteor's products and services are intended solely for adults aged 18 or older who possess full capacity for civil conduct. We do not proactively or intentionally collect personal information from minors. If, during our review process, we discover that data belonging to a minor has been collected in error, we will—upon verification—immediately close the associated account and permanently delete all related records. If you suspect that a minor has submitted personal information to us, please contact us immediately at support@credimeteor.com.

7. Your Rights and Control Options Regarding Personal Data

In accordance with applicable data protection laws and regulations, you have the right to be informed about and maintain control over your personal information:

Access and Copies: You have the right to inquire about the categories of personal data we hold regarding you and to request a copy of such data.

Correction and Updates: You have the right to request corrections at any time if you discover errors in the personal data we hold or if your information has changed.

Deletion and Account Closure: Subject to statutory conditions (such as the absence of outstanding debts or mandatory data retention obligations), you may request the deletion of your data or the closure of your personal account.

Revocation of Device Permissions: You may revoke permissions (such as access to your camera or location) at any time via your mobile device's "Settings" menu; this will not affect your ability to use basic functions that do not require such permissions.

To exercise any of the rights mentioned above, please email support@credimeteor.com. To ensure the security of your account, we may need to verify your identity before fulfilling your request.

8. Amendments and Notifications

This Privacy Policy may be updated from time to time to reflect changes in our business operations, technological advancements, or relevant laws and regulations.

For significant or material changes to our policies, we will provide formal notification via in-app alerts or SMS messages before the updated policy takes effect. We encourage you to review this page regularly. Your continued use of CrediMeteor after the updated policy comes into effect constitutes your acknowledgment and acceptance of the revised Privacy Policy.

9. Contact Us and Privacy Feedback

If you have any questions, comments, complaints, or requests regarding this Privacy Policy, our data processing practices, or the security of your personal information, please contact our team via the following channels:

Official Customer Service Email: support@credimeteor.com

Customer Service Hours: Monday to Friday, 09:00 – 18:00