Privacy Policy

1. Introduction

ANTIKRA Mechanism (“we”, “us”, “our”) operates the REMBEH Financial Management System, including the REMBEH web application and REMBEH mobile field app (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our Service.

2. Information We Collect

• Account data: name, email, phone, organization, branch, and role
• Borrower and guarantor KYC data submitted by field agents (including National ID images)
• Loan application media, signatures, and agreement documents
• Collections and payment activity recorded in the workspace
• Device and usage logs needed to operate and secure the Service
• Identity verification results from Smile ID when enabled by your organization

3. How We Use Information

• Provide lending operations, collections, and daily close workflows
• Authenticate users and enforce tenant isolation
• Process identity verification and document storage
• Deliver operational notifications and support responses
• Detect fraud, abuse, and security incidents
• Comply with legal and regulatory obligations

4. Data Sharing

We do not sell personal information. We may share data with:

• Your organization administrators and authorized staff within your tenant
• Infrastructure providers (e.g. AWS hosting and object storage)
• Identity verification providers (Smile ID) when your organization enables them
• Authorities when required by law

5. Security

REMBEH uses HTTPS, JWT authentication, role-based permissions, and per-tenant data scoping. Object storage uses private buckets with time-limited signed URLs for downloads.

6. Contact

Questions about this policy: hello@antikra.com