Privacy Policy

Crestbill ("we", "us", or "our") provides a secure platform for utility and bill payments, organisation management, dues collection, and financial reporting. This Privacy Policy explains what information we collect, why we collect it, and how we use and safeguard it. By using Crestbill, you agree to the terms outlined below.

Data we collect

We collect only the data necessary to deliver our services:

• Account & identity: name, email, phone, username, profile photo, verified identity documents (when needed).
• Organisation data: organisation name, members, roles, fee assignments and related billing details.
• Payment & transactional: wallet identifiers, transaction amounts, references, payment method metadata and receipts.
• Usage & device: IP address, browser/device type, timestamps, logs and diagnostic data to improve reliability and security.
• Support & communications: messages exchanged with support, email correspondence and notifications preferences.

How we use your data

• Process and execute payments, refunds and settlement operations.
• Manage organisation features: dues, membership, fees, reporting and compliance workflows.
• Provide account security, identity verification, fraud detection and regulatory reporting where required.
• Send transactional notices, confirmations, reminders and support responses.
• Improve and personalise our services through analytics and product development.

Sharing & third parties

We do not sell your personal data. We share information only when necessary:

• Payment processors & banks: to complete transactions and reconciliations.
• Service providers: analytics, hosting, storage, email delivery (they act on our instructions and are bound by contract).
• Legal & regulatory: when required by law, court order, or to prevent fraud and illegal activity.
• Affiliates & partners: with your consent or where it is reasonably necessary to provide a requested service.

Security

We apply industry-standard security controls:

• Encryption in transit (TLS) and encryption at rest for sensitive data where applicable.
• Role-based access controls, secure key management and regular security reviews.
• Monitoring and automated alerts to detect suspicious activity.
• We recommend enabling two-factor authentication (2FA) for added account protection.

Cookies & tracking

We use cookies and similar technologies to provide core functionality and analytics. You can manage cookies in your browser. For more details, any cookie consent choices and opt-outs, contact our support team or use your browser settings.

Your rights

Where applicable by law, you may:

• Access the personal data we hold about you and obtain a copy.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data (subject to legal or contractual retention obligations).
• Request a portable copy of your data in a machine-readable format.
• Object to or restrict certain processing, and withdraw consent where processing is based on consent.

To exercise these rights, contact privacy@crestbill.com. We may require identity verification before fulfilling requests.

Children

Crestbill services are intended for people 18 years and older. We do not knowingly collect personal information from children under 13. If you believe a child's data has been collected, contact us and we will promptly investigate and take corrective action.

Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. When significant changes occur, we will notify account holders via email and publish the revised policy with an updated "Effective date".

Contact

If you have questions, requests, or privacy concerns, please contact our Data Protection Officer:

Email: privacy@crestbill.com

Support: support@crestbill.com

Last updated: December 8, 2025