Privacy Policy

1. Who we are

Credelit is a property-development feasibility platform operated by Libelit Australia Pty Ltd (“we”, “us”). This policy covers the Credelit web application at developer.credelit.com and the services delivered through it. For privacy enquiries, contact info@credelit.com.

2. Information we collect

We collect only what the service needs to function:

• Account information. Your email address, an optional display name, and your password. Passwords are stored only as a bcrypt hash — we cannot read or recover your password.
• Content you create. Projects, development scenarios and deal analyses, including the property addresses you enter and the cost, revenue and finance assumptions you set.
• Billing identifiers. If you subscribe, we store the Stripe customer and subscription identifiers for your account, plus your plan tier. We never receive or store your card number — card details are entered directly with Stripe.
• Usage records. Your AI credit balance and transaction history, and an audit record of AI analyses run from your account, so usage can be metered and support issues traced.

3. How we use it

To authenticate you, run the analyses you request, meter plan and credit usage, take payment for paid plans, provide support, and keep the service secure and working. We do not sell personal information, and we do not use your project or deal data to advertise to you.

4. Who we disclose it to

Running an analysis sends the property address and the assumptions you entered to third-party services. We disclose personal information to the following categories of recipient, and only for the purpose listed:

• Payment processing — Stripe. Your email, name and subscription details, so Stripe can bill you and host the checkout and billing portal.
• AI analysis — our AI provider. The property address and analysis inputs are sent to the configured large language model provider (currently Google) to generate the feasibility assessment. We do not send your email address or account identifiers with it.
• Address lookup and mapping. Addresses you type are sent to Mapbox for autocomplete and geocoding, with OpenStreetMap/Nominatim as a fallback; map and aerial tiles are served by Mapbox, OpenStreetMap and Esri/ArcGIS Online.
• Planning and property data sources. To retrieve zoning and planning overlays we query Australian state and territory government portals by address, and we look up publicly published property and listing data. These queries carry the address, not your identity.
• Hosting and infrastructure. The application and its PostgreSQL database are hosted on Railway.
• Legal and safety. Where we are required by law, or where disclosure is reasonably necessary to prevent fraud or harm.

5. Overseas disclosure

Several of the providers above process data outside Australia, including in the United States and the European Union. By using Credelit you acknowledge that your information may be handled overseas by those providers, and that overseas recipients may not be subject to the Australian Privacy Principles. We take reasonable steps to use providers with recognised security and privacy practices.

6. Security and retention

Access to the application requires authentication, passwords are stored only as bcrypt hashes, and traffic is served over HTTPS. No system is perfectly secure, so we cannot guarantee absolute security. We retain your account and content for as long as your account is active. If you close your account we will delete or de-identify your content, except where we must keep records to meet legal, tax or accounting obligations — billing records in particular are retained as required by law.

7. Your rights

You may request access to the personal information we hold about you, ask us to correct it if it is inaccurate, or ask us to delete your account. Email info@credelit.com and we will respond within a reasonable period. If you are not satisfied with how we have handled a privacy matter, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.

8. Cookies

We use cookies that are strictly necessary to keep you signed in and to protect the session. We do not use advertising or third-party tracking cookies. Blocking essential cookies will prevent you from signing in.

9. Changes to this policy

We may update this policy as the service changes. The revision date at the top of this page reflects the current version, and material changes will be communicated to account holders by email.