Privacy Notice

1) Scope & Key Definitions

This Notice applies to information we process via the Services, including when you visit our site, create an account, use features, contact support, or participate in research and marketing.

• Personal Information means information that identifies or relates to an identifiable person.
• Sensitive Personal Information includes financial account numbers, precise geolocation, government IDs, and similar categories as defined by applicable law.
• Processing means any operation performed on information (collection, storage, use, disclosure, deletion, etc.).

2) Information We Collect

We may collect the following categories (depending on how you use the Services):

• Identifiers & Contact: name, email, phone, account handle.
• Account & Commercial: plan level, transactions, in-app events, support tickets.
• Credit & Financial Inputs (you provide or connect): credit report data, dispute history, documents you upload, outcomes you track. We do not access bureau data unless you authorize or provide it.
• Device/Internet Activity: IP address, device IDs, browser/OS, pages viewed, referring URLs, session data, crash logs.
• Inferences: score forecasts or recommendations we generate at your request.
• Sensitive Personal Information: only if you choose to provide it for specific features (e.g., account numbers in a letter template). Provide such data only when necessary.

3) Sources of Information

• You: forms, uploads, requests, communications.
• Your devices: automated collection via cookies, pixels, SDKs, and logs.
• Service providers: hosting, analytics, email/SMS, payments, customer support.
• Partners you connect: with your authorization (e.g., credit/fintech integrations).
• Public sources: to verify or enhance accuracy.

4) How We Use Information

• Provide the Services: account setup, feature delivery, dispute-draft generation, forecasts you request, customer support.
• Improve & develop: research, testing, quality assurance, and model tuning (with safeguards).
• Personalize: content, recommendations, and offers.
• Communicate: service notices, security alerts, and (with consent where required) marketing.
• Protect: monitor, prevent, and respond to security incidents and abuse.
• Comply: enforce terms, meet legal obligations, and respond to lawful requests.

Legal bases (EEA/UK): consent; contract necessity; legitimate interests (e.g., product improvement, security); and/or legal obligation.

5) AI, Automated Decision-Making & Profiling

Our Services use machine learning to analyze documents you provide, draft dispute templates, surface recommendations, and forecast potential credit-score impacts at your request. Outputs may be incomplete or require human review and are provided for informational purposes only; they are not legal, financial, tax, or credit counseling advice. Where applicable law grants rights regarding automated decisions, you may request information about the logic involved, the significance and consequences of processing, or human review by emailing hello@creditrepairgpt.com. You may opt out of non-essential personalization at any time.

6) How We Disclose Information

• Vendors/Processors: cloud hosting, analytics, communications, security, payment processing—under contracts limiting use to our instructions.
• Partners you connect: e.g., credit/fintech integrations, only with your authorization.
• Corporate events: merger, acquisition, financing, or sale of assets, consistent with this Notice.
• Legal/safety: comply with law, protect rights, investigate fraud or abuse.

We do not sell Personal Information for money. Certain analytics/ads practices could be considered “sharing” or “selling” under some privacy laws; see the “Advertising & Your Choices” section to opt out where applicable.

7) Advertising, Analytics, “Sale/Share” & Your Choices

We may use analytics and limited ads tech to measure engagement and improve the Services. Depending on your jurisdiction (e.g., California CPRA, Colorado CPA, Connecticut CTDPA, Virginia VCDPA, Utah UCPA), you may have the right to opt out of “targeted advertising,” “sharing,” or “selling” as those terms are defined. To exercise these choices, adjust cookie settings in your browser and/or contact us at hello@creditrepairgpt.com with the subject line “Privacy Opt-Out.”

8) Cookies & Similar Technologies

We use cookies, pixels, SDKs, and local storage to operate the site, remember preferences, analyze traffic, and (where applicable) measure campaigns. You can manage cookies in your browser or through any cookie banner provided. Disabling certain cookies may impact functionality.

9) Security

We implement administrative, technical, and organizational safeguards (e.g., encryption in transit, access controls, monitoring). No method of transmission or storage is 100% secure, but we continuously improve our protections.

10) Data Retention

We retain information as long as needed to provide the Services, comply with law, resolve disputes, enforce agreements, and for security and fraud-prevention. When no longer needed, we take steps to delete or de-identify information.

11) Your Privacy Rights & How to Exercise Them

Depending on your location, you may have rights to access, correct, delete, port, or opt out of certain processing (e.g., targeted ads, profiling). You may also withdraw consent where processing is based on consent, or appeal a request we deny.

• Submit a request: email hello@creditrepairgpt.com with your request type (Access/Deletion/Opt-Out/etc.).
• Verification: we may verify your identity (e.g., via email confirmation or account checks).
• Authorized agents: where permitted, you may designate an agent; we may require proof of authorization and identity.
• Appeals: if we deny your request, you may appeal by replying to our decision with “Appeal.”
• EEA/UK residents: you may lodge a complaint with your Data Protection Authority.

California disclosures: We disclose categories like Identifiers, Internet/Device Activity, Account/Commercial data, and, if you provide it, Credit/Financial Inputs to service providers and partners as described. We do not knowingly sell or share Personal Information of minors.

12) Minors

The Services are not directed to children and we do not knowingly collect Personal Information from individuals under 13 (or the age defined by local law). If you believe a child provided information, contact us to request deletion.

13) International Transfers

We may process information in countries with different data protection laws. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) for cross-border transfers.

14) Do Not Track

Some browsers offer “Do Not Track” (DNT) signals. Our Services do not currently respond to DNT signals. You can manage cookies and opt-outs as described above.

15) Changes to this Notice

We may update this Notice periodically. We will post the updated version with a new “Last updated” date and, where appropriate, provide additional notice. Your continued use of the Services after changes become effective signifies acceptance.

16) Contact Us

Questions, requests, or concerns? Email hello@creditrepairgpt.com.