Privacy Policy

1. Introduction

ScoreWipe is operated by Polari Group LLC (“Polari Group,” “we,” “us,” or “our”), which is the party responsible for the personal information described in this policy:

Polari Group LLC
6300 Riverside Plaza Ln NW, Ste 118 #418129
Albuquerque, NM 87120
United States

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our credit dispute platform. Given the sensitive nature of credit data, we take extraordinary measures to protect your information.

2. Information We Collect

Account Information

• Full name, email address, and password
• Mailing address (for dispute letter return addresses)
• Phone number (optional)
• Date of birth and last 4 digits of SSN (optional, for dispute letters)

Credit Report Data

• Credit report PDFs you upload
• Parsed account information (creditor names, account numbers, balances, statuses)
• Dispute history and letter content

Usage Data

• Pages visited, features used, and actions taken
• Device type, browser, and IP address
• Referring URLs and session duration

3. How We Use Your Information

• Generate personalized dispute letters on your behalf
• Parse and analyze your credit reports
• Track dispute statuses and deadlines
• Send dispute letters via USPS Certified Mail (if requested)
• Process payments and manage subscriptions
• Send service notifications (dispute updates, deadline reminders)
• Improve our AI models and service quality (using anonymized data only)
• Comply with legal obligations

4. Data Security

We implement industry-standard security measures including:

• AES-256 encryption for stored credit data
• TLS 1.3 encryption for all data in transit
• Row-Level Security (RLS) on all database tables
• SOC 2-compliant infrastructure providers
• Regular security audits and penetration testing
• Automatic session expiration and multi-factor authentication support

5. Data Sharing

We do NOT sell your personal information. We share data only with:

• Google LLC (Firebase & Google Cloud): hosting, authentication, database, file storage, and AI processing of your report and letter text via Google Vertex AI
• Stripe, Inc.: subscription billing and payment processing. Card details are collected and stored by Stripe; we never receive or store your full card number.
• Lob: printing and USPS Certified Mail delivery of the dispute letters you choose to send
• Resend: transactional email (account, dispute deadline, and support messages)
• Google Analytics: aggregated usage analytics. We do not send your credit report contents, Social Security number, or dispute letter text to analytics providers.
• USPS: When you request Certified Mail delivery of dispute letters
• Law enforcement: Only when required by valid legal process

All service providers are contractually bound to protect your data and use it only for providing their services to us.

6. AI Processing

When you upload a credit report or generate a dispute letter, the relevant text is processed by Google's Gemini models through Google Cloud Vertex AI. This data is transmitted over encrypted connections. Under Google Cloud's terms, customer data submitted to Vertex AI is not used to train Google's foundation models.

We do not retain AI request or response logs beyond the generated letter content saved to your account. Processing occurs on infrastructure located in the United States.

7. Data Retention

• Account data: Retained while your account is active
• Credit report PDFs: Deleted within 24 hours of parsing
• Dispute letters: Retained for 3 years (for your records)
• Usage analytics: Anonymized after 90 days
• Payment records: Retained as required by tax law (typically 7 years)

8. Your Rights

You have the right to:

• Access: Request a copy of all personal data we hold
• Correction: Update inaccurate personal information
• Deletion: Request complete deletion of your account and data
• Portability: Export your data in a standard format
• Opt-out: Unsubscribe from marketing communications

To exercise any of these rights, contact us at privacy@scorewipe.com.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the CCPA, including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.

10. Cookies

We use essential cookies for authentication and session management. We use analytics cookies (Google Analytics) to understand usage patterns. You can disable non-essential cookies through your browser settings.

11. Children's Privacy

ScoreWipe is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our website.

13. Contact

For privacy-related inquiries — including requests to access, correct, or delete your information — contact us at privacy@scorewipe.com, or by mail:

Polari Group LLC
Attn: Privacy — ScoreWipe
6300 Riverside Plaza Ln NW, Ste 118 #418129
Albuquerque, NM 87120
United States

We respond to verifiable consumer requests within 45 days as required by applicable state privacy law, and will notify you if we require an extension.