Privacy Policy

1. Information we collect

Information you provide. Account details (name, email, phone, address, date of birth), identity verification documents you upload to the Identity Vault (such as government-issued ID and proof of address), credit report data you authorize us to retrieve or that you upload, dispute content you create and approve, correspondence you upload from bureaus, furnishers, or collectors, and payment information (processed by our payment processor; we do not store full card numbers).

Information collected automatically. Device and browser type, IP address, pages viewed, and usage events, collected through cookies and similar technologies as described in our Cookie Policy.

Information from your authorizations. If you connect a credit monitoring service, we receive the report data needed to perform your audit, only with your authorization.

2. How we use information

We use your information solely to provide the Services: performing your credit report audit, generating dispute correspondence you direct and approve, printing and mailing letters you have authorized, tracking bureau and furnisher responses, providing support, billing, maintaining security, and complying with law. We do not use the contents of your credit file or your vault documents to build advertising profiles or for any marketing purpose.

3. What we never do

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We do not use your documents or credit data for marketing. Your documents are retrieved from the Identity Vault solely for inclusion in dispute correspondence you have expressly authorized.

4. When we disclose information

We disclose information only: (a) to service providers who help us operate the platform (cloud hosting, print-and-mail fulfillment for letters you approved, payment processing, identity verification), bound by contract to use it only for those purposes; (b) to consumer reporting agencies, furnishers, or creditors, as part of dispute correspondence you have expressly authorized; (c) as required by law, subpoena, or court order; (d) to protect the rights, safety, or property of you, ScoreGuard, or others; or (e) in a merger or acquisition, in which case this policy continues to apply to your information.

5. Document security

Client documents are secured with two independent layers of encryption at rest: storage-level encryption applied by our hosting infrastructure and application-level encryption applied by ScoreGuard using separately managed cryptographic keys. Data in transit is protected with TLS. Access to production systems is restricted, logged, and reviewed.

6. Retention

We retain your information while your account is active and as needed to comply with legal obligations (for example, records of credit repair transactions we are required to keep). You may request deletion at any time; we will delete information not subject to a legal retention requirement and will tell you what must be retained and for how long.

7. Your privacy rights

Depending on your state, you may have the right to know what personal information we hold about you, access it, correct it, delete it, obtain a portable copy, and be free from discrimination for exercising these rights.

California residents (CCPA/CPRA): We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act. You may exercise access, correction, deletion, and portability rights, and designate an authorized agent, by emailing support@scoreguard.ai. We will verify your identity before acting on a request and respond within the time required by law.

Residents of Colorado, Connecticut, Texas, Virginia, Utah, Oregon, Montana, and other states with comprehensive privacy laws have equivalent rights and may use the same channel. You may appeal a denied request by replying to our decision; we will respond to appeals within the statutory period.

8. Sensitive information

Identity documents and credit file contents are sensitive. We use them only to provide the Services you have requested — never for profiling, advertising, or sale. We do not knowingly collect information from anyone under 18; the Services are for adults only.

9. Communications

We send transactional emails and, if you opt in, SMS messages about your disputes and account (see our SMS Terms). You can opt out of non-essential communications at any time. We do not send third-party marketing.

10. Changes

We will post any changes here and update the date above. Material changes will be announced by email or in-app notice before they take effect.

11. Contact

Privacy questions or requests: support@scoreguard.ai.