Privacy policy

Medeben is a tool each business uses to keep its debtors' accounts. Each business decides who it lends to, what it records about each debtor and who it sends their link to: that makes it the controller of that data. Medeben, operated by Chencrack Labs, stores and processes it on the business's behalf.

• About the debtor: their name and, only if the business records them, their phone, ID and address; their debts, payments, receipts, promises to pay and payment reports; and the photo of the signed note.
• What the business decides about the debtor: the credit limit, the «do not lend» flag and days overdue. The debtor never sees them.
• About the business's people: name, phone, role, who recorded each debt and collected each payment, and what was collected and handed over each day.
• About the business: its payment details (mobile payment, accounts, wallets), shown in the link so the debtor knows where to pay.

Medeben does not store your location, does not record audio and does not use artificial intelligence on your data.

The debtor has no account and installs nothing: the business sends them a link, from its own messaging, and from there they see their full account. That link shows only that debtor's account: not the credit limit, not the photo of the note, not other debtors. The business can renew or revoke the link at any time, and a revoked link stops working.

Only to keep and collect the debtor's account, so the business can decide whether to lend, and so staff can answer for the money they collect. Medeben does not sell data, does not build profiles or lists of defaulters, and does not share what one business records with another business.

Debts, payments and receipts are kept as the business's records for the commercial retention period. When a debtor no longer owes anything, the business can archive them and delete their identity: their movements are left anonymized. Nothing is edited or deleted without leaving a trace of who and why.

Data lives in cloud services (Firebase), outside Venezuela, under the provider's processing terms. Each business has its data isolated from the others, a collector only reaches their own debtors, and the photo of the note is visible only to the business's people. The copy the phone keeps to work without signal is encrypted by the device's system and is erased when you sign out. The Business plan subscription is processed by Google Play; your debtors' data does not pass through it.

If you are a debtor, you can see your full account in your link. To correct a piece of data, delete it or ask not to receive more messages, tell the business that sent it to you: it is the controller and has 30 days to answer. If you are a business, you can export your portfolio and ask us for help with any operation on the data.

If a link reached the wrong person, the business revokes it and it stops resolving immediately. If there were a security breach in the project, we will notify each affected business within 72 hours, with which debtors and what data it touched.

For privacy questions, write to hola@medeben.app.