Privacy Policy
Effective date: [EFFECTIVE_DATE]
This Privacy Policy explains how [COMPANY_NAME] (“[COMPANY_NAME],” “we,” “us,” or “our”) collects, uses, stores, shares, and protects information when you use our website at [WEBSITE_URL], our customer portal, our employee tools, and any related services (collectively, the “Service”). The Service helps eligible consumers prepare identity-theft and consumer-protection dispute packages — including FTC Identity Theft Reports, CFPB complaints, and bureau dispute letters — that the consumer chooses to submit.
1. Information We Collect
To prepare a dispute package we collect sensitive personal and financial information directly from you and from documents you upload. This includes:
- Identity information: full legal name, prior names, date of birth, current and prior addresses, phone number, and email.
- Government-issued identification documents (driver’s license, state ID, or passport).
- Social Security card images and Social Security numbers.
- Proof of address documents (utility bills, lease agreements, bank statements).
- Consumer credit reports from Experian, Equifax, and TransUnion.
- FTC Identity Theft Reports (IdentityTheft.gov) and related affidavits.
- Police reports and other law-enforcement records you choose to upload.
- Creditor letters, account statements, collection notices, and other supporting documents.
- Account details such as creditor names, account numbers, balances, dates opened, and dispute history.
- Bureau names, mailing addresses, and bureau correspondence.
- Payment information, processed by our third-party payment processor (we do not store full card numbers).
- Service usage data, IP address, device information, log files, and security telemetry.
- Communications you send us, including SMS and email.
2. How Documents Are Parsed (AI, OCR, and Document Intelligence)
We use artificial intelligence, optical character recognition (OCR), and document-intelligence tools to read your uploaded documents and extract structured information needed to prepare your package. Extracted data may include:
- Name, addresses, date of birth, and the last four digits of your SSN.
- Account numbers, creditor names, balances, dates, and statuses.
- Bureau names and addresses.
- Fraud-report details, affidavit numbers, and incident descriptions from FTC reports.
AI may also be used to match credit-report accounts to the accounts listed on your FTC Identity Theft Report so that your dispute letters reference the correct items.
3. Special Rules for Your Social Security Card
If you upload your Social Security card, we extract only the last four digitsfor use in dispute letters. We will not attach the full Social Security card image to a dispute package unless you separately and explicitly authorize us to do so for a specific submission.
4. Special Rules for Government ID Signature Extraction
Some dispute packages require your handwritten signature. We do not pull a signature from your ID unless you give us explicit, separate authorization. When you authorize signature extraction:
- Our staff first crops the signature region from your ID locally.
- Only the cropped signature image is sent to the AI background-removal step. The full ID image is never sent to the signature background-removal process.
- The cleaned signature may only be placed on a dispute letter after you authorize that specific use and complete a final review of the letter.
5. How We Use Your Information
We use your information only to:
- Provide, operate, and improve the Service and prepare your dispute packages.
- Verify your identity and the documents you submit and prevent fraud and abuse.
- Process payments, refunds, and subscriptions.
- Communicate with you about your case, including SMS and email updates.
- Comply with applicable law, respond to lawful requests, and support internal audits.
- Complete authorized mailings and submissions on your behalf, including tracked mail to credit bureaus.
- Maintain security logs and recordkeeping required for our business and regulatory obligations.
We do not sell your personal information. We do not share your information with third parties for their independent marketing.
6. Mobile / SMS Consent
If you opt in to SMS messages, you agree to receive transactional and case-status texts from[COMPANY_NAME]. Message and data rates may apply. Reply STOP to opt out and HELPfor help. Mobile opt-in data, including your phone number and SMS consent, are not sold or shared with third parties for third-party marketing. SMS is used only to support your account and the preparation and submission of your dispute package.
7. Who Can See Your Files Inside [COMPANY_NAME]
Access to customer files is role-based. Only authenticated employees with a legitimate, case-related need can view your documents. Our system maintains audit logs of:
- Who accessed your file and when.
- Which documents were viewed or used to generate packages.
- Who generated a dispute package and which documents it included.
- When a package was downloaded, printed, or marked as mailed.
8. Service Providers (Subprocessors)
We share information with vetted service providers only as needed to operate the Service — for example: cloud hosting and storage, database and authentication infrastructure, the AI and OCR providers described above, our payment processor, email and SMS delivery providers, and mail/courier vendors used to send your authorized packages. These providers are contractually limited to using your information only to provide their service to us.
9. Data Retention
We retain your documents and case records for as long as necessary to provide the Service, comply with our legal and audit obligations, resolve disputes, and enforce our agreements. Specific retention periods may vary based on document type and applicable law.
10. Security
We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, encrypted storage, access controls, role-based permissions, and activity logging. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
11. Your Privacy Rights
Subject to applicable law and our legal and business recordkeeping obligations, you may request to:
- Access the personal information we hold about you.
- Correct information that is inaccurate or incomplete.
- Delete information that is no longer needed for the Service.
- Export a copy of the information you provided.
- Withdraw a prior authorization (for example, signature extraction or attaching your full SSN card).
Depending on your state of residence (including [STATE_LAW_REFERENCE]), you may have additional rights. To exercise any right, contact us using the information below. We may need to verify your identity before we can respond.
12. Children
The Service is not directed to children under 18. We do not knowingly collect personal information from minors.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Effective date” above and, where appropriate, notify you through the Service.
14. Contact Us
Questions, requests, or complaints about this Privacy Policy can be sent to:
See also our Terms & Conditions.