Privacy Policy – Credbit Practice
Effective Date: September 12, 2026
Credbit Practice (“Credbit Practice”, “we”, “our”, or “the Platform”) is a cloud-based practice management platform designed to help professional practices manage clients, tasks, compliance, billing, documents, team collaboration, and related business operations.
This Privacy Policy explains how we collect, use, store, process, and protect information when users access or use Credbit Practice.
1. Information We Collect
Depending on the services used, we may process:
- name, email address, mobile number and business information;
- account and workspace information;
- client, contact, task, compliance and billing information entered by users;
- documents and files uploaded to the Platform;
- subscription and transaction-related records;
- technical information such as browser, IP address, login activity and security logs;
- information necessary to provide integrations selected by the user.
We process information submitted to a tenant workspace primarily for providing the services requested by that tenant.
2. Google Account and Google Drive Data
Credbit Practice allows a tenant to connect a Google account for document-storage functionality.
When a user chooses to connect Google Drive, Credbit Practice may request the Google Drive permission necessary to create, access, update, transfer, verify, and manage files used through Credbit Practice.
The Platform is designed to request the minimum Google permission reasonably necessary for the relevant feature.
Credbit Practice currently uses the Google Drive drive.file scope for its managed Drive functionality.
This allows the Platform to work with files created by, opened with, or otherwise made available to the application, rather than providing unrestricted access to the user's entire Google Drive.
3. How We Use Google User Data
Information obtained from Google APIs is used only to provide or improve user-facing features initiated or enabled by the user, including:
- connecting the user's Google Drive account;
- creating and maintaining the Credbit Practice application folder;
- uploading authorised workspace documents;
- retrieving authorised documents;
- verifying successful file transfers;
- maintaining document references within the user's workspace;
- reconnecting or troubleshooting the user's Drive integration; and
- protecting the integrity and security of the integration.
We do not use Google user data for advertising.
We do not sell Google user data.
We do not transfer Google user data to advertising platforms, data brokers, or information resellers.
We do not use Google user data to determine creditworthiness or for lending decisions.
We do not use Google user data to train general-purpose artificial intelligence or machine-learning models.
4. Google API Services User Data Policy
Credbit Practice's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the applicable Limited Use requirements.
Read the Google API Services User Data Policy
5. Temporary Document Storage
Where permitted under the user's subscription package, Credbit Practice may provide limited temporary document storage before or while Google Drive is being connected.
The applicable storage capacity, file-size limits, and other restrictions are determined by the user's subscription package.
Temporary storage does not provide unlimited storage.
Documents may subsequently be transferred to the user's connected Google Drive in accordance with the Platform's document-migration process.
6. Storage and Security
We use reasonable administrative, technical, and organisational safeguards designed to protect information against unauthorised access, alteration, disclosure, loss, or misuse.
OAuth credentials, access tokens, refresh tokens, and similar authentication information are handled separately from ordinary user-facing data and are not intentionally exposed to other tenants.
Each tenant workspace is intended to maintain logically separated account and document access.
No method of electronic storage or transmission can, however, be guaranteed to be completely secure.
7. Sharing of Information
We may share information only where reasonably necessary:
- with infrastructure and technology providers used to operate the Platform;
- with Google when the user chooses Google integrations;
- with service providers acting on our instructions;
- where requested or authorised by the user;
- to investigate security incidents, fraud, or abuse; or
- where required by applicable law, regulation, court order, or governmental authority.
We do not sell personal information.
8. Tenant-Controlled Information
Professional practices using Credbit Practice may enter information relating to their own clients, employees, contacts, matters, transactions, or documents.
For such information, the subscribing practice generally determines why the information is entered and how it is used through the Platform.
Users should ensure that they have the necessary authority and lawful basis to upload or process information relating to other persons.
9. Data Retention
We retain information for as long as reasonably necessary to:
- provide the subscribed services;
- maintain the user's workspace;
- comply with contractual or legal obligations;
- maintain security and audit records;
- resolve disputes; and
- enforce applicable agreements.
Retention periods may vary depending on the nature of the information and the services used.
Where a verified document has been transferred to Google Drive, any temporary local copy may be retained for a limited period for verification, recovery, or migration purposes before eligible removal under the Platform's applicable storage process.
10. Disconnecting Google Drive
Users may disconnect their Google Drive integration through Credbit Practice where that functionality is available.
Disconnecting the integration stops future authorised access using the stored connection credentials, subject to technical processing necessary to complete the disconnection.
Disconnecting Credbit Practice does not automatically delete files already stored in the user's Google Drive.
Users may also manage or revoke application access through their Google Account.
11. Account and Data Deletion
Users may request account or eligible personal-data deletion by contacting us at:
Email: support@credbit.in
Certain information may be retained where necessary for legal compliance, security, fraud prevention, financial records, dispute resolution, or legitimate record-keeping obligations.
Tenant administrators remain responsible for managing information maintained within their own professional workspace, subject to the Platform's available controls.
12. Cookies and Technical Information
Credbit Practice may use cookies, sessions, and similar technologies necessary for:
- authentication;
- security;
- maintaining user sessions;
- application preferences; and
- essential Platform functionality.
Additional analytics technologies, if introduced, will be governed by applicable disclosures and consent requirements.
13. Children's Privacy
Credbit Practice is intended primarily for professional and business use and is not designed as a consumer service directed to children.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal obligations, or privacy practices.
The updated policy will be published on this page with a revised effective date.
15. Contact Us
For privacy, Google-data, or Platform-related questions:
Credbit Practice
Operated by: GLISTER SERVICES PRIVATE LIMITED
Address: Varanasi, Uttar Pradesh, India
Email: support@credbit.in
Website: practice.credbit.in
