CEPAT KREDIT FINANCING INC.

PROJECT ECHO CHATBOT PRIVACY NOTICE

​

Main Privacy Policy 

​

Facebook Messenger and Instagram Direct Messages 
 

- Cepat Kredit Financing Inc. provides digital customer support through Facebook Messenger and Instagram Direct Messages, including the use of its official automated customer support chatbot and approved digital self-service features. 

​

When you communicate with us through these channels, your personal information may be collected and processed in accordance with this Privacy Policy and applicable data privacy laws. 

​

The Digital Customer Support and Self-Service Privacy Notice is detailed information regarding how personal information is collected, processed, disclosed, retained, protected, and used. 

​

Chatbot Privacy Notice 

​

Introduction 

- Cepat Kredit Financing Inc. (“Cepat Kredit,” “Company,” “we,” “our,” or “us”) provides digital customer support through Facebook Messenger and Instagram Direct Messages through Project Echo, its official automated customer support chatbot, together with approved digital self-service features and human-assisted customer support.

​

When you communicate with Project Echo, personal information may be collected and processed to respond to your inquiries, provide customer support, assist with loan-related services, provide approved self-service features, and facilitate assistance from authorized Cepat Kredit personnel.

​

This Project Echo Chatbot Privacy Notice explains how Cepat Kredit collects, uses, processes, stores, retains, discloses, and protects personal information processed through Project Echo. This Privacy Notice forms part of Cepat Kredit's overall privacy framework and should be read together with the Company's applicable Privacy Policy.

Cepat Kredit processes personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, applicable issuances of the National Privacy Commission (“NPC”), and other applicable laws and regulations.

 

1. About Our Chatbot 

- Project Echo is Cepat Kredit Financing Inc.'s official automated customer support chatbot accessible through Facebook Messenger and Instagram Direct Messages.

Project Echo is designed to provide supported customer services and self-service functions, which may include:

 

• General loan information;

• Loan product guidance;

• Application guidance;

• Frequently Asked Questions (FAQs);

• Customer support services;

• Loan application status tracking;

• Payment schedule inquiries;

• Other approved self-service features;

• Live Agent assistance, where available.
  
  Project Echo provides automated responses and facilitates approved self-service functions for supported customer requests.
  
  Project Echo does not replace the Company's authorized personnel for decisions or activities requiring human review, verification, credit evaluation, or approval.

 

 

2. Personal Information We Collect 

- Depending on the service requested, Cepat Kredit may collect and process personal information voluntarily provided by you, including but not limited to: 

• Customer Type (Seaman / OFW); 

• Consent Response (Agree / Decline); 

• Full Name;  

• Mobile Number;  

• Email Address;  

• Location (City/Province/Country); 

• Facebook or Instagram account information necessary to facilitate messaging;  

• Loan Application Number;  

• Date of Birth (when required for identity verification);  

• Loan application information;  

• Employment or income information relevant to your inquiry;  

• Combined monthly salary/income 

• Customer inquiries and concerns; Message content;  

• Conversation history;  

• Desired Loan Amount; 

• Payment-related inquiry information;  

• Loan status inquiry information; and  

• Other information voluntarily submitted that is necessary to process your request.  
   

Only personal information that is adequate, relevant, and reasonably necessary for the stated purposes shall be collected. 

 

Cepat Kredit shall collect only personal information that is adequate, relevant, suitable, necessary, and not excessive in relation to the declared and specified purposes for which it is processed.

​

3. Consent and What Happens If You Decline

- Where consent is the applicable lawful basis for processing, Project Echo will present a consent notice before collecting personal information required for the relevant service or transaction.

 

If you select "Agree" or "Continue," you authorize Cepat Kredit to collect and process the personal information required for the selected service, subject to this Privacy Notice.

 

If you select "Decline," Project Echo will not proceed with the collection of personal information for the service or transaction requiring your consent. You may still be able to access general information or other features that do not require the collection or processing of such personal information, where available.

 

Declining consent for a processing activity that relies on consent will not affect processing that is permitted or required under another applicable lawful basis.

​

4. Lawful Basis for Processing 

- Cepat Kredit processes personal information through its digital customer support platform based on one or more lawful bases recognized under the Data Privacy Act of 2012, including: 

• Your consent; Where you freely and voluntarily agree to the processing of your personal information for a specific and declared purpose. Where processing is based on consent, you may withdraw your consent, subject to applicable legal and contractual limitations and without affecting the lawfulness of processing performed before such withdrawal.
   

• Pre-contractual measures requested by you prior to entering into a loan agreement; Where processing is necessary to take steps specifically requested by you prior to entering a contractual relationship with Cepat Kredit. This may apply when you initiate a loan inquiry, request information about available loan products, provide information for initial application assistance, or request to proceed with a loan application.
   

• Performance of contractual obligations; Where processing is necessary for Cepat Kredit to perform obligations arising from an existing contractual relationship with you. This may include providing customer support and account- or transaction-related information necessary to administer or service the existing relationship.
   

• Compliance with legal obligations; Where processing is necessary for Cepat Kredit to comply with obligations imposed by applicable laws, regulations, regulatory authorities, court orders, or other lawful requirements.
   

• Protection of the Company's legitimate interests, provided such interests do not override your fundamental rights and freedoms; Where processing is necessary to pursue Cepat Kredit's legitimate business interests, such as maintaining the security, integrity, and proper operation of its digital customer support services, provided that such processing does not unduly prejudice your rights and freedoms.
   

• Other lawful grounds permitted under applicable laws and regulations. 

 

5. Purposes of Processing 

- Personal information may be processed for the following legitimate business purposes: 

• Responding to customer inquiries;  

• Providing customer support;  

• Assisting customers regarding loan products and application requirements;  

• Facilitating loan application guidance and follow-ups;  

• Verifying customer identity before displaying account-specific information;  

• Allowing customers to track their loan application status;  

• Providing payment schedule information through approved self-service features;  

• Routing customer concerns to the appropriate authorized personnel;  

• Maintaining customer interaction records;  

• Improving customer support operations and digital self-service services;  

• Complying with legal, regulatory, audit, and internal operational requirements; and  

• Protecting the Company against fraud, misuse, unauthorized access, and other security risks.  
   

Personal information shall not be processed for purposes incompatible with those stated above unless otherwise authorized by law or with your consent. 

​

6. Identity Verification for Self-Service Features
- Certain Project Echo self-service features may provide customer-specific information, including loan application status and payment schedule information. These features require appropriate identity verification before customer-specific information is displayed.

For supported self-service transactions, Project Echo may require customers to provide verification information, such as their Loan Application Number and Date of Birth, or other approved information necessary to verify that the request relates to the appropriate customer record.

If the information provided cannot be successfully verified, Project Echo will not display the requested customer-specific information.

The customer may be asked to re-enter the required information or request assistance from an authorized Cepat Kredit representative, depending on the available customer support workflow.

Verification information shall be processed only for legitimate verification and customer-service purposes and in accordance with this Privacy Notice.

 

7. Human Assistance and Escalation 

- Project Echo provides automated assistance for common customer inquiries and approved self-service functions. However, certain customer requests may require human intervention, manual verification, further assessment, or additional assistance.

Where necessary, Project Echo may refer or transfer the customer's conversation or request to an authorized Cepat Kredit representative or human support agent.

Authorized personnel may review relevant customer information and conversation records only to the extent necessary to:

• Respond to the customer's inquiry;

• Provide requested customer assistance;

• Verify information where required;

• Investigate concerns;

• Process or facilitate authorized customer requests;

• Perform legitimate customer-support activities; or

• Comply with applicable legal, regulatory, and operational requirements.
   

Access to personal information shall be limited to authorized personnel with a legitimate business need to access such information.

 

8. Disclosure of Personal Information 

- Personal information collected through the platform may be disclosed only to: 

• Authorized officers and employees of Cepat Kredit Financing Inc.;  

• Authorized subsidiaries or affiliates, where applicableand legally permitted;  

• Meta Platforms, Inc. as the provider of Facebook Messenger and Instagram messaging services;  

• Freshworks Inc./Freshdesk, where used for customer support, conversation management, ticketing, or human-agent handling;

• Pipedream, where used as an integration or workflow service to facilitate the transmission and routing of information between Project Echo and authorized systems;

• Authorized cloud hosting or infrastructure providers supporting Project Echo;

• Authorized technology vendors supporting the operation, integration, security, or maintenance of Project Echo;

• Other authorized service providers acting under the Company's instructions; and  

• Government agencies or regulatory authorities where disclosure is required by law.  
   

Cepat Kredit shall require its authorized service providers to process personal information only for legitimate and authorized purposes and to implement appropriate privacy and security safeguards in accordance with applicable laws and contractual requirements.

Cepat Kredit does not sell customers' personal information.

 

9. Automated Processing and Decision-Making 

- The digital customer support platform uses automated processing to provide responses and facilitate approved self-service functions based on information submitted by customers.
 

These automated functions may include: 

• responding to customer inquiries;  

• displaying loan application status;  

• retrieving payment schedule information;  

• providing product information; and  

• routing conversations to the appropriate support workflow.
   

Project Echo does not perform automated credit scoring, automated eligibility determination, automated loan approval or rejection, or any automated decision-making that produces legal or similarly significant effects on customers.

All loan applications remain subject to manual review, documentary requirements, verification procedures, credit investigation, eligibility assessment, and final approval by authorized Cepat Kredit personnel.

 

 

10. Data Retention 

- Personal information collected through the digital customer support platform shall be retained for five (5) years, in accordance with applicable legal and regulatory requirements and the Company's approved Data Retention Policy.

The five-year retention period shall apply to personal information and records collected or generated through customer interactions with the digital customer support platform, unless a longer retention period is required by applicable law, regulation, legal process, or other lawful obligation.

Upon expiration of the applicable retention period, personal information shall be securely deleted, destroyed, anonymized, or otherwise disposed of in accordance with the Company's approved Data Retention Policy and applicable legal requirements

 

11. Security Measures 

- Cepat Kredit implements appropriate organizational, physical, and technical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, misuse, accidental loss, or destruction. 

For your protection, please do not disclose: 

• Passwords;  

• One-Time Passwords (OTPs);  

• PINs;  

• Online banking credentials;  

• Security codes;  

• Authentication credentials; or  

• Other confidential financial credentials  
   

through Facebook Messenger, Instagram Direct Messages, or the Company's digital customer support platform. 
 

Cepat Kredit will never request your password, OTP, PIN, or banking login credentials through its chatbot.
Where sensitive credentials are inadvertently submitted, the Company shall handle such information in accordance with its internal security procedures and applicable data privacy laws. 

 

12. Your Rights as a Data Subject 

- In accordance with the Data Privacy Act of 2012, you have the right to: 

• Be informed;  

• Access your personal information;  

• Correct inaccurate or incomplete personal information;  

• Object to processing where applicable;  

• Withdraw consent;  

• Request erasure or blocking of your personal information where permitted by law;;  

• Obtain a copy of your personal information; and  

• Lodge a complaint with the National Privacy Commission.  
   

You may exercise these rights by submitting a request to Cepat Kredit Financing Inc.'s Data Protection Officer through:

Email: dpo@cepatkreditfinancing.com or dataprotection@cepatkredit.com
When submitting a request, please provide sufficient information to allow Cepat Kredit to identify you, understand your request, and verify your identity.

Depending on the nature of the request, you may be asked to provide your name, contact details, the platform through which you interacted with Cepat Kredit, such as Facebook or Instagram, and a clear description of your request.

Cepat Kredit may request additional information where reasonably necessary to verify your identity and protect personal information from unauthorized access, alteration, disclosure, or deletion.

Data Deletion Request
- You may request the deletion of personal information collected or processed through Project Echo, subject to applicable legal, regulatory, contractual, and retention requirements.

To submit a data deletion request, please use the subject line:

“Project Echo Data Deletion Request”

and include:
 

• The platform used to interact with Project Echo, such as Facebook or Instagram;

• Your full name;

• Your contact details; and

• A clear description of the personal information you are requesting to be deleted.
   

- The Data Protection Officer or duly authorized personnel will verify the identity of the requester and assess the request before deletion is authorized or performed.

- Upon successful verification, valid deletion requests shall be processed in accordance with applicable data privacy laws, Cepat Kredit's approved procedures, and applicable data retention requirements.

- Certain personal information may continue to be retained where retention is required or permitted by applicable law, regulation, contractual obligation, pending legal proceeding, regulatory requirement, or other lawful basis.

- Only the Data Protection Officer or duly authorized personnel may authorize or initiate deletion in accordance with Cepat Kredit's approved internal procedures.
 

13. Third-Party Platforms 

- Project Echo operates through Facebook Messenger and Instagram Direct Messages, which are services provided by Meta Platforms, Inc.

Your use of Facebook Messenger and Instagram remains independently subject to Meta's applicable terms, policies, and privacy practices.

Cepat Kredit is responsible for personal information under its control. Meta and other independent third-party platform providers may separately process information in accordance with their respective privacy policies, terms, and legal obligations.

Customers are encouraged to review the privacy settings and applicable privacy information of the third-party platforms they use.
 

14. Important Disclaimer 

- Responses and information provided through Project Echo are for general informational, customer-support, and approved self-service purposes only.

Information displayed through chatbot conversations and approved self-service features, including loan application status and payment schedule information, reflects the information available at the time of the customer's request and is provided solely for customer convenience.

Nothing contained in Project Echo's responses or self-service features constitutes financial advice, legal advice, or a legally binding commitment by Cepat Kredit Financing Inc.

All loan applications remain subject to the Company's applicable documentary requirements, verification procedures, evaluation processes, and final review and approval by authorized Cepat Kredit personnel.

 

14. Contact Information 

- For questions, requests, concerns, or complaints regarding this Project Echo Chatbot Privacy Notice or Cepat Kredit's processing of your personal information through Project Echo, you may contact the Company's Data Protection Officer:

Email 

dpo@cepatkreditfinancing.com 

or 

dataprotection@cepatkredit.com 

Office Address 

Unit 2402 Jollibee Plaza,

F. Ortigas Jr. Road, San Antonio,

Ortigas Center, Pasig City
Philippines