Privacy Policy

Last updated: May 3, 2026

1. Information we collect

• Account: name, email, password (hashed).
• Credit information: credit report PDFs you upload, account names, last-4 digits, dispute details, and AI-generated letter content.
• Mailing: recipient and return address you provide when mailing letters.
• Billing: processed by Stripe — we never see your full card number.
• Usage: standard logs (IP, browser, pages viewed) for security and analytics.

2. How we use it

• Provide the Service: analyze reports, generate letters, mail them, track status.
• Process payments and manage your subscription.
• Send transactional emails (account, billing, mail status).
• Improve the Service and prevent abuse.

We do not sell your personal information. We do not use your credit data to train AI models.

3. Service providers

We share data only with vendors needed to operate the Service:

• Supabase — database and authentication hosting.
• Stripe — payment processing.
• Lob — printing and USPS mailing.
• AI providers (Google, OpenAI via Lovable AI Gateway) — process anonymized text for letter generation and report analysis. Inputs are not used to train their models per their enterprise terms.

4. Security

We use encryption in transit (TLS) and at rest, row-level security in our database, and least-privilege access controls. No system is 100% secure; you use the Service at your own risk.

5. Data retention

We retain account data for as long as your account is active. You may delete your account at any time by emailing support@credfixai.com. Mailing records are retained for at least 7 years for legal and audit purposes. Backups may persist for up to 30 days after deletion.

6. Your rights

Depending on your jurisdiction (GDPR, CCPA, etc.), you may have the right to access, correct, delete, or export your data, or to object to certain processing. Contact support@credfixai.com to exercise these rights.

7. Children

The Service is not directed to children under 18. We do not knowingly collect data from minors.

8. International transfers

Your data may be processed in the United States and other countries where our service providers operate.

9. Cookies

We use only essential cookies required for authentication and security. We do not use advertising trackers.

10. Changes

We will notify you of material changes by email or in-app notice.

11. Contact

Privacy questions: support@credfixai.com