Privacy Policy

Last updated: March 6, 2026

ScoreFixer AI ("we," "our," or "us") operates the ScoreFixer AI mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, and password when you create an account.
• Profile Information: Mailing address, date of birth, phone number, and the last four digits of your Social Security number (encrypted at rest).
• Credit Report Data: When you upload a credit report PDF, our AI processes the document to extract account information, balances, and payment history. The original PDF is stored securely in encrypted cloud storage.
• Payment Information: Payment processing is handled by Stripe. We do not store your credit card number, expiration date, or CVC. We store your Stripe customer ID and subscription status.
• Usage Data: We collect information about how you interact with the Service, including pages viewed, features used, and timestamps.
• Device Information: Device type, operating system, and app version.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Generate dispute letters on your behalf using your personal information
• Process credit report uploads and extract negative items using AI
• Send dispute letters via USPS Certified Mail through our mail provider (Lob)
• Process subscription payments through Stripe
• Send you transactional emails (account confirmation, dispute updates, payment receipts)
• Send push notifications about dispute timelines and reminders (with your permission)
• Monitor and analyze usage patterns to improve the Service

3. How We Share Your Information

We share your information only in the following circumstances:

• Mail Services (Lob): When you use our "Mail This Letter" feature, your name, return address, and letter content are shared with Lob to print and mail your dispute letter via USPS.
• Payment Processing (Stripe): Your payment information is processed by Stripe in accordance with their privacy policy.
• AI Processing (Anthropic): Your credit report content is processed by Anthropic's Claude AI to extract negative items. Anthropic does not retain your data after processing.
• Legal Requirements: We may disclose your information if required by law, subpoena, or court order.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Data Security

We implement industry-standard security measures to protect your data:

• All data is transmitted over TLS/SSL encrypted connections
• Social Security number digits are encrypted at rest using AES-256 encryption
• Credit report PDFs are stored in encrypted cloud storage with access controls
• Row-level security ensures users can only access their own data
• Payment data is handled by PCI-compliant Stripe infrastructure
• We use Supabase for our database, which provides enterprise-grade security

5. Data Retention

We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us. Upon account deletion:

• Your profile, credit reports, dispute records, and uploaded files will be permanently deleted within 30 days
• Payment records may be retained as required by law for tax and accounting purposes
• Anonymized, aggregated data may be retained for analytics

6. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Request your data in a portable format
• Opt-out: Opt out of marketing communications

California residents have additional rights under the CCPA, including the right to know what personal information is collected, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information.

7. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

8. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the app and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

ScoreFixer AI
Email: privacy@scorefixerai.com
Website: scorefixerai.com