isCredible

Privacy Policy

Last updated: November 7, 2026

1. Introduction

Welcome to isCredible ("Platform"), operated by isCredible.com by Ace|Oar Technologies, Inc. ("we," "us," or "our"). We provide a fraud detection, device fingerprinting, and lead verification service. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our API, SDKs, and website.

By accessing or using the Platform, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this privacy policy, please do not access the application.

2. Scope: Clients vs. End-Users

This policy covers two categories of data:

  • Client Data: Information about you, our direct customer (e.g., Agency owners, Developers).
  • End-User Data (Verification Data): Information about the visitors to your websites or applications that is sent to isCredible for verification (e.g., IPs, device fingerprints of your leads).

3. Information We Collect

A. From Our Clients (You)

  • Account Data: Name, email address, company details, and billing information (processed via Stripe).
  • Configuration Data: The rules, scenarios, and verification logic you set up in your dashboard.

B. From End-Users (Your Traffic)

When you integrate our SDK, JavaScript Snippet, or API into your website, we automatically collect specific technical data to perform fraud checks ("Verification Data"). This includes:

  • Device Identifiers: Browser User-Agent, screen resolution, operating system, and hardware characteristics (Canvas, WebGL, AudioContext fingerprints).
  • Network Data: IP addresses, ISP information, and proxy/VPN detection signals.
  • Behavioral Data: Mouse movements, typing velocity, and interaction patterns used to distinguish humans from bots.

4. How We Use Your Information

Service Delivery & Security

We use End-User Verification Data strictly to:

  • Assess the likelihood of fraud, bot activity, or resource abuse.
  • Generate a "Credibility Score" or "Risk Recommendation" returned to the Client.
  • Detect and prevent "Pixel Poisoning" (spam leads affecting ad algorithms).

Shared Intelligence (The Network Effect)

We may aggregate anonymized Verification Data to improve our fraud detection algorithms. For example, if a specific Device Fingerprint is identified as a "Click Farm" attacking Client A, we may use that intelligence to preemptively protect Client B. We do not sell End-User data to third-party marketers.

5. Artificial Intelligence and Automated Decision Making

Our Platform uses automated logic, heuristics, and machine learning models to generate recommendations (e.g., "Approve" or "Deny").

  • Client Control: As the Client, you control the logic (Scenarios) that determines how these scores are used. isCredible acts as the data processor; you are the final decision-maker.
  • No Legal Effect: Our scores should not be used as the sole basis for decisions that produce legal effects concerning an individual (e.g., credit scoring, employment eligibility) without human review.

6. Disclosure of Your Information

We may share information in the following situations:

  • Service Providers: With third-party vendors who perform services for us, including Stripe (payments), cloud hosting providers (AWS/Vercel/Supabase), and email delivery services.
  • Legal Requirements: If required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
  • Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

7. Security of Your Information

We use industry-standard encryption (SSL/TLS) for data in transit and at rest. However, please be aware that we are a bootstrapped startup. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

Client Responsibility: You are responsible for securing your API Keys. Any activity performed using your API Key is your responsibility.

8. Your Responsibilities as a Data Controller

If you implement isCredible on your website to verify your End-Users, you acknowledge that you are the Data Controller and we are the Data Processor. You agree to:

  • Update your own Privacy Policy to disclose that you use third-party fraud detection services.
  • Obtain any necessary consents (e.g., Cookie Banners, GDPR/CCPA compliance) required to collect device fingerprints and IP addresses from your users.

9. Data Retention

We retain Client Data for as long as your account is active. We retain End-User Verification Data for a limited period to allow for historical analysis (e.g., detecting velocity attacks over 30 days) and to improve our fraud models, after which it is aggregated or deleted.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at:

isCredible.com by Ace|Oar Technologies, Inc.
Email: privacy@iscredible.com