Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account information: name, email address, and password when you register
• Identity verification: Social Security Number, date of birth, and address — required to pull your credit reports through our authorized third-party provider
• Profile information: credit goals, target score, and timeline preferences
• Mailing information: full name and address used for mailing dispute and freeze letters
• Payment information: billing details processed through our third-party payment processor (we do not store full payment card numbers)

1.2 Information We Obtain on Your Behalf

• Credit reports: full credit report data from Equifax, TransUnion, and Experian, pulled via soft inquiry at your request
• Credit scores: credit scores associated with your reports
• Trade line data: account details, balances, payment history, and creditor information from your reports

1.3 Information Collected Automatically

• Usage data: pages visited, features used, actions taken within the Service
• Device information: browser type, operating system, IP address, and device identifiers
• Cookies and similar technologies: session cookies for authentication and analytics cookies to understand Service usage

2. How We Use Your Information

We use the information we collect to:

• Pull and display your credit reports from the three major bureaus
• Provide AI-powered analysis and recommendations based on your credit data
• Generate dispute letters and freeze letters on your behalf
• Mail physical letters to credit bureaus and creditors through our postal service partner
• Process payments and manage your subscription
• Send transactional communications (confirmations, alerts, updates)
• Improve and maintain the Service
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

• Credit data providers: we share your identity information with our authorized third-party provider to pull your credit reports via soft inquiry
• Mailing services: we share your name, address, and letter content with our postal service partner to print and mail dispute and freeze letters
• Electronic signature providers: when you sign dispute letters electronically, your signature data is processed by our e-signature partner
• Payment processors: your billing information is processed by our third-party payment processor
• AI service providers: credit report data may be processed by third-party AI services for analysis (data is not retained by these providers beyond processing)
• Legal requirements: we may disclose information when required by law, subpoena, or government request

4. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of sensitive data (including SSN) at rest and in transit
• Secure authentication with encrypted session management
• Row-level security policies ensuring users can only access their own data
• Regular security reviews and monitoring

While we strive to protect your information, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Credit report data is stored to enable historical tracking and comparison. If you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing agreements).

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to or restrict certain processing of your information
• Request a portable copy of your data
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at privacy@creditpilotpro.com. We will respond within 30 days.

7. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights, including the right to know what personal information we collect and how it is used, the right to request deletion, and the right to non-discrimination for exercising your privacy rights. We do not sell personal information as defined by the CCPA.

8. Cookies

We use essential cookies to maintain your authenticated session and preferences. We may also use analytics cookies to understand how the Service is used. You can control cookie preferences through your browser settings, but disabling essential cookies may prevent the Service from functioning properly.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will take steps to delete that information promptly.

10. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you access through the Service.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the Service prior to the change becoming effective. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@creditpilotpro.com.