Privacy policy and Terms and Conditions
PRIVACY POLICY
1. PURPOSE
This document defines the principles governing the collection, storage, and protection of personal and credit data of customers (hereinafter also referred to as the Customer or User) by “ACRA Credit Reporting” CJSC (hereinafter also referred to as ACRA), as well as the provision of online services through ACRA’s mobile application and the corresponding web platform (https://self.acra.am/guest) (collectively referred to as the Application).
ACRA is a provider of credit reporting and credit information related services and processes personal data in accordance with applicable data protection laws and regulations.
By using the Application, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data in accordance with the terms set forth herein.
2. KEY DEFINITIONS AND ABBREVIATIONS
2․1 Credit Information Subject (Subject) or Customer – A physical or legal person with respect to whom credit information is collected, processed, a credit history is formed and maintained, or in relation to whom a credit history inquiry is made to ACRA.
2.2 User – A physical person registered in ACRA for the purpose of conducting online self-inquiries via the Application.
2.3 Self-Inquiry – A request made by the User to obtain their own credit reports and credit score.
2.4 Credit Report – A document containing the credit history of the credit information subject.

3. COLLECTION OF PERSONAL DATA
For the purpose of providing its services, ACRA collects and processes personal data obtained directly from users, from authorized third parties, including credit institutions operating in the Republic of Armenia, as well as from official public or state registries where legally permitted.
The categories of personal data processed may include identification data, such as full name, date of birth, passport series and number, social security number, as well as details of other identity documents. ACRA may also process contact information, including email address and phone number, which are required for account registration, identity verification, and communication purposes.
As part of mandatory identity verification procedures, ACRA also processes data related to identity verification, obtained from integrated third-party identification service providers, including but not limited to imID and Regula systems. Such data may include images of identification documents and, where biometric verification is selected, biometric verification results (such as face verification records), verification statuses, as well as technical metadata associated with the verification process. ACRA uses biometric data exclusively for the purpose of identity verification.
The Application also processes credit-related information, including credit scores, credit reports, credit obligations, payment history, records of submitted disputes, and other credit data obtained from authorized credit information sources. In addition, for security, monitoring, and service improvement purposes, certain technical data may be collected automatically, including device identifiers, IP addresses, login timestamps, authentication logs, and statistical data related to the use of the Application.
4. PURPOSE AND LEGAL BASES OF PROCESSING
Personal data is processed strictly for defined and legitimate purposes. These purposes include:
• enabling user registration and account management
• performing identity verification and compliance checks
• providing access to credit reports and score
• preventing fraud and unauthorized access
• delivering notifications
• enabling dispute requests
• and fulfilling other legal and regulatory obligations applicable to credit reporting entities

5. DATA STORAGE AND SECURITY
ACRA does not disclose personal data. Personal data may be shared only to the extent necessary with trusted third parties that support the operation of the Application. This includes identity verification service providers, authorized public or state registries, infrastructure and hosting providers, and regulatory or supervisory authorities where disclosure is required by law. All third parties receiving personal data are required to process such data in accordance with applicable data protection standards and confidentiality obligations.
Personal data is stored on secure systems protected by appropriate technical and organizational measures, including encryption, access controls, audit logging, and regular security reviews. Data retention periods are determined based on legal requirements, regulatory obligations, and operational necessity. Personal data is retained only for as long as required to fulfill the purposes for which it was collected.
6. USER RIGHTS
Users have the right to access their personal and credit data, request correction or removal of inaccurate or incomplete data where legally permissible, restrict or object to certain processing activities. Users also have the right to lodge a complaint with a competent data protection authority.
7. CHANGES TO THE PRIVACY POLICY
The ACRA may update this Privacy Policy from time to time to reflect legal, regulatory, or operational changes. Any material changes will be communicated to users through the Application or other appropriate means. Continued use of the Application after such changes constitutes acceptance of the updated Privacy Policy.
Contact Information: For questions or concerns related to privacy and data protection, users may contact the Company at help@acra.am.

TERMS AND CONDITIONS
These Terms govern the provision of online services by “ACRA Credit Reporting” CJSC (hereinafter also referred to as ACRA) to customers through its mobile application and the corresponding web platform (https://self.acra.am/guest) (collectively referred to as the Application), and define the main terms and conditions governing the relationship and transactions between ACRA and the physical person (hereinafter referred to as the Customer or User) in connection with the provision of such services.
By registering in the Application, the Customer is granted access to ACRA’s online service system in accordance with the format established by ACRA, and the use of services by the User is carried out through the system in accordance with the procedures subject to acceptance of these Terms. In case of disagreement with these Terms, the User must refrain from using the Application.
Scope of Services
The Application provides users with access to credit-related services, including:
• registration and identity verification
• viewing and downloading credit score and credit reports
• receiving notifications
• submitting disputes regarding credit information
• managing personal profile and security settings.
The services are available only after successful completion of identity verification procedures.
User Eligibility and Responsibilities
• Users must provide accurate, complete, and up-to-date information (personal documents, email address, phone number) during registration and throughout their use of the Application.
• Users are responsible for maintaining the confidentiality of their login credentials, devices, and authentication methods, including biometric or PIN-based or verification digital code-based access. By entering these codes, User unconditionally accepts the provision of all the documents listed in the System and their authenticity.
• Any activity performed through a user’s account and login credentials is deemed to be authorized by the user unless reported otherwise. User acknowledges that ACRA is not responsible for the security, use, and loss of any of login credentials.
Identity Verification and Compliance
Identity verification is a mandatory requirement for accessing core services of the Application. Verification is performed through third-party KYC providers and, where applicable, by querying authorized public or state databases, ACRA may verify personal data with the State Population Registry of Passport and Visa Department of the RA Police.
By selecting the biometric authentication option, the User consents to facial scanning being performed within the ACRA system for identification purposes, and acknowledges that the data collected during this process is used exclusively for identity verification and the enhancement of transaction security.
Failure to complete verification, provision of false information, or unsuccessful verification outcomes may result in restricted access, suspension, or termination of the user account.
User hereby confirms that has reviewed and unconditionally agrees with the requirements of the RA legislation and the internal legal acts of “ACRA Credit Reporting” CJSC related to obtaining a credit history (credit report), including User`s rights and obligations, the tariffs defined by ACRA for the services.
Account Suspension and Termination
ACRA reserves the right to suspend, restrict, or terminate user access to the Application at its discretion in cases of suspected fraud, misuse, violation of these Terms, security risks, or legal and regulatory requirements. Such actions may be taken with or without prior notice where immediate action is necessary to protect users, the system, or third parties.
While ACRA makes reasonable efforts to ensure accuracy and availability, it does not guarantee uninterrupted service or the absolute correctness of data obtained from third-party sources. ACRA shall not be liable for indirect, incidental, or consequential damages arising from the use of the Application.
Amendments to the Terms
These Terms and Conditions are governed by and construed in accordance with the laws of RA. Any disputes arising out of or in connection with these Terms shall be subject to the exclusive jurisdiction of the competent courts of the Republic of Armenia.
ACRA may amend these Terms and Conditions from time to time. Updated versions will be made available through the Application. Continued use of the Application after the effective date of changes constitutes acceptance of the revised Terms.
Contact Information
For questions, support, or legal inquiries, users may contact help@acra.am.