Privacy Policy

1. Information We Collect

Account Information

When you register, we collect your name, email address, and a hashed password. We do not store your password in plain text.

Personal Information for Dispute Processing

To prepare dispute packets, we collect your full legal name, mailing address, phone number, and the last 4 digits of your Social Security Number. This information is used solely to personalize your dispute letters and file government reports on your behalf.

Identity Documents

We collect uploaded copies of your government-issued photo ID (driver's license or passport), Social Security card, and a recent utility bill. These are required by the credit bureaus and are stored securely on our servers.

Credit Report Data

We process your uploaded tri-merge credit report PDF to extract inquiry data. The report is stored securely and used only to populate your dispute documents.

Payment Information

Payments are processed by Stripe. We do not store your full credit card number, CVV, or bank details. We receive only a payment confirmation token from Stripe.

2. How We Use Your Information

• To prepare and generate credit dispute letters on your behalf
• To automatically submit FTC Identity Theft Reports to IdentityTheft.gov
• To automatically submit complaints to the CFPB at ConsumerFinance.gov
• To mail physical dispute packets to credit bureaus via USPS (if you choose the mail service)
• To process your payment through Stripe
• To send you status updates and follow-up reminders related to your case
• To improve the service and diagnose technical issues

3. Information Sharing

We do not sell, rent, or trade your personal information. We share your data only in the following circumstances:

• Credit Bureaus: Your dispute letters and ID documents are sent to Equifax, Experian, and/or TransUnion as part of the dispute process.
• Federal Agencies: Your FTC report is submitted to IdentityTheft.gov (FTC) and your complaint is submitted to ConsumerFinance.gov (CFPB) on your behalf.
• Lob (physical mail): If you use the physical mailing service, your packet PDF and mailing addresses are transmitted to Lob, Inc. for USPS delivery. See Lob's privacy policy at lob.com.
• Stripe (payment): Payment information is handled directly by Stripe, Inc. See Stripe's privacy policy at stripe.com/privacy.
• Legal Requirements: We may disclose information if required by law, court order, or government authority.

4. Data Security

We take data security seriously given the sensitivity of the information we handle:

• Passwords are hashed using bcrypt before storage
• All data in transit is encrypted via HTTPS/TLS
• Uploaded documents are stored in a private server directory not accessible via public URL
• Access to case data is restricted to the account that created it

However, no system is 100% secure. We cannot guarantee that unauthorized third parties will never be able to defeat our security measures.

5. Data Retention

We retain your account data and case files for as long as your account is active. Uploaded identity documents are retained for the duration of your case and may be retained afterward for compliance purposes.

You may request deletion of your account and all associated data by contacting us. Note that we may retain certain records as required by law or for legitimate business purposes (e.g., payment records).

6. Your Rights

Depending on your state of residence, you may have rights including:

• The right to access the personal information we hold about you
• The right to correct inaccurate information
• The right to request deletion of your data
• The right to opt out of certain data uses

To exercise these rights, contact us using the information below.

7. Cookies

We use session cookies to keep you logged in. We do not use third-party tracking cookies or advertising cookies. You can disable cookies in your browser settings, but this will prevent you from staying logged in.

8. Children's Privacy

This service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the site. Your continued use of the service after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, please contact us through the support options on our website.