1. Who we are
CreditVault is a community-maintained directory of publicly available credit, perk and student offer programs. The Service is operated by the CreditVault team (“we”, “us”, “our”).
2. Information we collect
Information you provide
- Account data — if you sign in, we store your email address and, when applicable, your OAuth provider identifier (e.g. Google user ID).
- Submissions — content you send us through the Submit form or contact page.
Information collected automatically
- Bookmarks — offers you save are stored in your browser's local storage on your device, not on our servers.
- Basic request data — IP address, user-agent and timestamps in server logs for security and abuse prevention.
3. What we do not do
- We do not sell your personal data.
- We do not run advertising trackers or third-party ad networks.
- We do not require signup to browse the directory.
4. Legal bases (EEA/UK users)
We rely on legitimate interests to operate and secure the Service, and on your consent for optional features (such as creating an account).
5. Sharing and subprocessors
We use a small number of infrastructure providers to run CreditVault, including hosting, authentication and AI providers. These processors handle data only on our instructions and under appropriate agreements. We do not share your data with anyone else except when required by law.
6. Data retention
- Account data is retained while your account exists. You may request deletion at any time.
- Server logs are retained for a short operational window and then discarded.
- Bookmarks live in your browser and are cleared when you clear site data.
7. Your rights
Depending on where you live you may have the right to access, correct, delete, export or restrict processing of your personal data. To exercise these rights, contact us via the contact page.
8. Children
CreditVault is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children.
9. Security
We take reasonable technical and organisational measures to protect the limited information we hold, but no service can guarantee absolute security.
10. International transfers
Our infrastructure providers may process data in countries other than yours. Where required, appropriate safeguards are used.
11. Changes to this policy
We may update this policy from time to time. Material changes will be indicated by updating the "Last updated" date at the top of this page.
12. Contact
For privacy questions, requests or complaints, please use the contact page.