Privacy Policy

1. Introduction

CreditCoach ("we," "us," or "our") is a Credit + Funding Preparation System committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our credit analysis, dispute preparation, credit building, and funding preparation services ("Service"). CreditCoach is located at 1349 W Peachtree Street NW, Suite 1910, Atlanta, GA 30309.

2. Information We Collect

We collect the following types of information:

• Personal Information: Full name, email address, phone number, date of birth, last four digits of your Social Security number, and mailing address.
• Credit Information: Credit report data retrieved with your authorization from the three major credit bureaus (Equifax, Experian, and TransUnion), including account details, payment history, public records, and inquiry information.
• Payment Information: Billing details processed through our secure third-party payment processor. We do not store full credit card numbers on our servers.
• Usage Data: Information about how you interact with our Service, including pages visited, features used, browser type, IP address, and device information.

3. How We Use Your Information

We use your information to:

• Perform credit analysis and identify inaccurate, incomplete, or unverifiable items on your credit report.
• Prepare and generate dispute letters on your behalf.
• Provide funding preparation guidance and position your credit profile for lender approvals.
• Generate personalized credit improvement recommendations to help you build stronger credit.
• Process payments and manage your subscription.
• Communicate with you about your account, dispute statuses, service updates, and credit coaching recommendations.
• Comply with legal obligations.

4. Third-Party Services

We use the following third-party services to operate and improve our Service:

• Supabase: Database and authentication services for securely storing your account and credit data.
• OpenAI: AI-powered analysis of credit report data to identify disputable items, generate dispute letters, and provide personalized recommendations. Credit data sent to OpenAI is processed in accordance with their data processing agreement and is not used to train their models.
• Resend: Email delivery service for sending account notifications, dispute status updates, and service communications.
• Cloudflare: Security and performance services including DDoS protection, SSL encryption, and content delivery.
• Credit Report Providers: Third-party services used to retrieve your credit report data with your authorization.

Each third-party provider is bound by their own privacy policies and data processing agreements. We only share the minimum data necessary for each service to function.

5. Information Sharing

We do not sell your personal information. We may share your information with:

• Credit Bureaus: To retrieve your credit report with your authorization and to submit disputes on your behalf.
• Service Providers: The third-party companies listed in Section 4, subject to confidentiality obligations.
• Legal Requirements: When required by law, regulation, or legal process.

6. Data Security

We implement industry-standard security measures to protect your personal and credit information, including:

• AES-256 encryption for data at rest and TLS encryption for data in transit.
• Row-Level Security (RLS) policies ensuring that users can only access their own data.
• Secure storage of sensitive information with access controls and authentication requirements.
• Regular security audits and monitoring.

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

7. Cookies and Tracking

We use the following types of cookies and tracking technologies:

• Session Cookies: Essential cookies required to maintain your login session and ensure the Service functions properly.
• Analytics Cookies: We use Google Analytics (Measurement ID: G-0W2KLWRF97) to understand how visitors interact with our website. This includes information such as pages visited, time spent on pages, and referral sources. Google Analytics data is anonymized and used solely to improve our Service.

You can control cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the Service.

8. Data Retention

We retain your personal information, credit report data, and analysis results for the duration of your active subscription. After cancellation of your account, we retain your data for a period of one (1) year to allow for account reactivation and to comply with legal obligations. After the one-year retention period, your data will be permanently deleted unless retention is required by law. You may request earlier deletion of your data by contacting us.

9. Your Rights

You have the right to:

• Access the personal information we hold about you and receive a copy of your data.
• Request correction of any inaccurate or incomplete personal information.
• Request deletion of your personal information and credit data from our systems.
• Opt out of non-essential communications at any time.
• Receive a copy of your data in a portable format.

To exercise any of these rights, contact us at info@creditcoach.cc.

10. Children's Privacy

Our Service is intended only for individuals who are 18 years of age or older. You must be at least 18 years old to create an account or use CreditCoach. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected information from a minor, we will take immediate steps to delete that information.

11. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the State of Georgia, without regard to its conflict of law provisions. Any disputes arising under this Privacy Policy shall be subject to the exclusive jurisdiction of the courts located in Fulton County, Georgia.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: