Privacy Policy

Information We Collect

• Account Information: Name, email address, phone number, date of birth.
• Sensitive Information: Social Security Number (encrypted with AES-256-GCM before storage), current and previous addresses.
• Credit Reports: PDF files you upload, which we parse to identify negative items.
• Payment Information: Processed securely by Stripe. We never store your full credit card number.
• Usage Data: Pages visited, features used, collected via PostHog analytics.

How We Use Your Information

• To analyze your credit report and identify disputable items.
• To generate and send dispute letters to credit bureaus on your behalf.
• To provide personalized credit coaching.
• To process payments and manage your subscription.
• To send transactional emails about your account and dispute status.

Data Protection

Your SSN is encrypted using AES-256-GCM encryption with a unique initialization vector per encryption operation. Full SSNs are never logged, displayed, or stored in plaintext. Credit report PDFs are stored in encrypted cloud storage accessible only to your account.

Third-Party Services

We use the following third-party services to operate: Stripe (payments), Resend (email), PostHog (analytics), cloud database hosting, and Vercel (application hosting). Each processes only the minimum data necessary for their function.

Your Rights (CCPA / GDPR)

You have the right to access, correct, or delete your personal data. You may request a copy of all data we hold about you or request deletion of your account and all associated data by contacting support@creditlift.ai.

Contact

For privacy questions: support@creditlift.ai