Privacy policy
Last updated 13 August 2026
Running a dispute properly means holding your credit report. That is among the most sensitive data anyone can hold about you, and this page says plainly what we keep, why, and who can see it.
Draft pending legal review. This document has not yet been reviewed by counsel and is not in force. It is published so the disclosure links resolve and the intended terms are visible. Do not rely on it, and do not launch against it.
What we hold
Your account details. Your credit report as it arrived from the source, stored exactly as received. The normalized version of that report. The disputes you build, the letters produced from them, and the mailing records those letters generate, including delivery dates and signatures returned by the postal service.
For business credit, information about your business and its formation. For monitoring, the enrollment record and the result of identity verification.
Why the original report is kept
The file as it arrived is stored unmodified and is never overwritten. That is what lets a parsing error be found and corrected later without losing your history, and what lets us show you the report before and after a round. Every version we derive from it is kept beside it rather than on top of it.
Identity verification
A consumer reporting agency will not release your file until your identity is verified. Where verification uses out-of-wallet questions, the questions and your answers are passed through to the provider and are never stored by us. We keep only whether verification passed or failed, and when.
Who can see your report
You can. Access is enforced at the database level, per row, scoped to your account, so one client cannot read another client's records even in the event of an application bug.
Affiliates cannot. An affiliate who referred you sees whether you signed up and whether a commissionable event occurred. They never see your report, your file, your disputes, or your identity data.
Our staff can see what is necessary to operate the service and review letters before they are sent. No staff surface displays a credential.
Credentials
If you connect an existing monitoring membership, only you ever enter those credentials, for your own account. They are encrypted such that the web application cannot decrypt them; only the background process that performs a pull can, and every access is logged. No employee and no affiliate can view or recover them.
What we do not do
We do not sell your personal information. We do not share your credit report with advertisers, data brokers, or lenders. We do not use your report to market other products to you.
Retention and deletion
You may ask us to close your account and delete your personal information. Some records connected to a mailed dispute may be retained where a legal obligation requires it. Where a stored report payload is purged, the record that it existed is kept so the history of your disputes stays intact and auditable.
Contact
Questions about this policy, or a request about your data, go through our contact page.