Privacy Policy

1. Introduction

ScoreWipe ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our credit dispute platform. Given the sensitive nature of credit data, we take extraordinary measures to protect your information.

2. Information We Collect

Account Information

• Full name, email address, and password
• Mailing address (for dispute letter return addresses)
• Phone number (optional)
• Date of birth and last 4 digits of SSN (optional, for dispute letters)

Credit Report Data

• Credit report PDFs you upload
• Parsed account information (creditor names, account numbers, balances, statuses)
• Dispute history and letter content

Usage Data

• Pages visited, features used, and actions taken
• Device type, browser, and IP address
• Referring URLs and session duration

3. How We Use Your Information

• Generate personalized dispute letters on your behalf
• Parse and analyze your credit reports
• Track dispute statuses and deadlines
• Send dispute letters via USPS Certified Mail (if requested)
• Process payments and manage subscriptions
• Send service notifications (dispute updates, deadline reminders)
• Improve our AI models and service quality (using anonymized data only)
• Comply with legal obligations

4. Data Security

We implement industry-standard security measures including:

• AES-256 encryption for stored credit data
• TLS 1.3 encryption for all data in transit
• Row-Level Security (RLS) on all database tables
• SOC 2-compliant infrastructure providers
• Regular security audits and penetration testing
• Automatic session expiration and multi-factor authentication support

5. Data Sharing

We do NOT sell your personal information. We share data only with:

• Service providers: Supabase (database), Anthropic (AI processing), Square (payments), Lob (mailing), Resend (email), Vercel (hosting)
• USPS: When you request Certified Mail delivery of dispute letters
• Law enforcement: Only when required by valid legal process

All service providers are contractually bound to protect your data and use it only for providing their services to us.

6. AI Processing

When you generate dispute letters or upload credit reports, your data is processed by Anthropic's Claude AI. This data is sent via encrypted API calls and is not used by Anthropic to train their models. We do not store AI conversation logs beyond the generated letter content.

7. Data Retention

• Account data: Retained while your account is active
• Credit report PDFs: Deleted within 24 hours of parsing
• Dispute letters: Retained for 3 years (for your records)
• Usage analytics: Anonymized after 90 days
• Payment records: Retained as required by tax law (typically 7 years)

8. Your Rights

You have the right to:

• Access: Request a copy of all personal data we hold
• Correction: Update inaccurate personal information
• Deletion: Request complete deletion of your account and data
• Portability: Export your data in a standard format
• Opt-out: Unsubscribe from marketing communications

To exercise any of these rights, contact us at privacy@scorewipe.com.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the CCPA, including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.

10. Cookies

We use essential cookies for authentication and session management. We use analytics cookies (Google Analytics) to understand usage patterns. You can disable non-essential cookies through your browser settings.

11. Children's Privacy

ScoreWipe is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our website.

13. Contact

For privacy-related inquiries, contact us at privacy@scorewipe.com.