Privacy policy — draft
Privacy Policy (DRAFT)
Plain-English privacy: what we collect, who processes it, and how long we keep it.
DRAFT — pending legal counsel review, not final.
This policy was drafted by our team on September 30, 2026. It has not been reviewed by a lawyer yet, so treat it as a draft and not as final legal advice.
DRAFT dated: September 30, 2026 (2026-09-30)
Information we collect
Account details. When you sign up, we store your name and email address. For email sign-ups we store a securely hashed password — never the password itself. If you sign in with Google, we store your name, email address, and a Google account identifier instead. We also keep your plan, sign-in session records, and the timestamps needed to run your account.
Credit report analyses. When you upload a credit report PDF, everything sensitive happens in your browser tab: the PDF is read, the text is extracted, and Social Security numbers are automatically redacted — all with code running on your own device. Your full, unredacted report and the original PDF never leave your computer and are never uploaded or stored.
Only the redacted report text (with SSNs removed) is sent to our servers and forwarded to our AI provider (OpenAI) to identify potentially disputable items. Your analysis results, findings, and generated dispute letters are saved to your account history so you can revisit them.
Operational data. We keep short-lived technical records needed to run the service: API usage and estimated cost counters, rate-limit records, and standard short-lived server logs (timestamps, IP addresses). We don't use these logs to identify you or build profiles.
How we use your information
- To create and maintain your account and keep you signed in.
- To analyze your uploaded credit report and generate dispute letters you request.
- To save your analyses, letters, and dispute checklists so you can revisit them.
- To process billing and manage your plan through our billing provider.
- To prevent abuse (such as free-trial limits) and keep the service reliable.
- To answer support questions about your account.
CreditDisputeCo is an educational software tool — not a law firm, and this page is not legal advice. Nothing here promises any particular credit-score or dispute outcome.
Data processors
We rely on the following third parties to process data on our behalf. Your data is never sold, rented, or shared with marketers or data brokers.
| Data processor | Purpose | Data involved |
|---|---|---|
| OpenAI | AI report analysis | Report text sent for analysis |
| Google Firebase | Google sign-in authentication | Name, email address, and Google account identifier used for sign-in |
| Kelviq | Billing / payment | Customer name and email for checkout |
| Hostinger | Hosting + email SMTP | Application hosting and transactional email delivery |
What Google does with the report text it receives is governed by Google's own policies. Our use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements: Google user data is used only to provide the sign-in and account features you asked for. It is never sold, never shared with advertisers or data brokers, and never used for advertising.
Data retention
The table below describes what we actually store and when it is removed. Removal means the data is deleted — not hidden.
| Data | How long it is kept | What happens when the period ends |
|---|---|---|
| Report analyses | Free: 30 days · Plus: 365 days · Pro: kept until you delete it | Analyses older than your plan's window are permanently deleted by a daily job, with a 7-day advance notice period — they are only deleted after the notice period passes. Analyses with mailed (sent) letters or open dispute records are kept as dispute evidence for up to 2 years after mailing, whichever protection applies. Letters and dispute records tied to a deleted analysis are removed with it (database cascading delete), but a machine-readable export snapshot of the analysis is saved first. Export snapshots are kept for 3 years, then permanently deleted by the daily job. |
| Generated dispute letters & dispute checklists | Same window as the analysis they belong to | Removed together with the analysis (an export snapshot is saved first). Mailed letters and open dispute records protect their analysis from automatic deletion while they are active dispute evidence. Rebuilding letters for an analysis also replaces its unmailed draft versions. |
| Account profile (name, email, hashed password or Google ID, plan) | While your account is active | Deleting your account (Settings, or by emailing us) closes the account and signs you out on all devices; your subscription is cancelled first. Your reports, letters, disputes, and history are retained on our servers for legal compliance and record-keeping, remain accessible to our administrators, and are no longer accessible to you. |
| Sign-in sessions | 15-minute access token; refresh token up to 30 days (rotating) | Sign-out deletes the session immediately. Expired sessions are pruned automatically. |
| Password-reset & email-verification tokens | Reset links expire after 1 hour; verification links after 24 hours | Expired tokens are deleted by the daily job. Used tokens are kept up to 7 days for support questions, then deleted. Signing out removes all of your remaining tokens. |
| Device records (free-trial enforcement) | While your account is active | Kept with the account (account deletion no longer wipes stored data). |
| API usage & cost counters | 90 days | Operational counters only (model, token counts, estimated cost) — no report content. Deleted by the daily job. |
| Rate-limit records | 24 hours | Deleted by the daily job. |
Sharing & disclosure
Beyond the processors listed above, we disclose personal data only when required to comply with the law or to protect the rights, property, or safety of our users or the service. We do not sell personal data, and we do not share it with advertisers or data brokers.
Cookies & device data
We use a secure, HTTP-only session cookie to keep you signed in (a 15-minute access token backed by a rotating refresh token of up to 30 days; both are cleared when you sign out). We also store a random device identifier in your browser's local storage to enforce the free-trial limit and prevent abuse. We don't run advertising trackers on the app.
Your rights
You can ask us what data we hold about you, correct it, or delete it — and you can delete your account yourself at any time from Settings, which permanently removes your analyses, letters, disputes, and account details. Contact support@creditdisputeco.com and a human will answer.
Children's privacy
CreditDisputeCo is not intended for children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact support@creditdisputeco.com and we will delete it.
Contact
For any privacy question or request, contact support@creditdisputeco.com. CreditDisputeCo is operated from Pakistan.
Changes to this policy
If we change how data is handled, we will update this page and note the change date before the new behavior takes effect. The current version is a draft pending legal counsel review and is not final.