Privacy Policy

• Account data: When a credit repair organization (“Customer”) signs up and uses the Service, we act as a controller of that Customer’s account and billing information.
• Consumer data: When a Customer uploads information about its own clients (“Consumers”) — such as names, contact details, dates of birth, the last four digits of a Social Security number, addresses, credit report data, identity documents, and proof of address — we act as a service provider / processor on behalf of that Customer. The Customer is responsible for having a lawful basis and all necessary consents to provide this data to us. If you are a Consumer and have questions about your data, please contact the credit repair organization you are working with.

• Account and contact information you provide (name, business name, email, phone).
• Billing information, processed by our payment processor (Stripe). We do not store full card numbers.
• Customer Content uploaded to run the Service, including Consumer personal information and documents described above.
• Usage and device information collected automatically through cookies and analytics tools (e.g., Google Analytics 4, Microsoft Clarity, and hosting analytics), such as pages viewed, approximate location, browser type, and interactions.
• Communications you send us (e.g., via the contact form or support).

We intentionally minimize sensitive data. We store only the last four digits of a Social Security number, never the full number. Dates of birth are encrypted at rest. Identity and proof-of-address documents are stored in restricted storage and attached to mailings only at your direction. Because financial information is involved, we handle it consistent with applicable law, including the Gramm-Leach-Bliley Act (GLBA) where it applies.

We use information to: provide, operate, secure, and improve the Service; generate and mail correspondence at Customer direction; process payments; provide support; maintain audit logs for security and compliance; detect and prevent fraud and abuse; and comply with legal obligations. We do not use Consumer Content for advertising, and we do not sell personal information.

To generate correspondence, relevant Customer Content is processed by AI model providers under contractual protections. This processing occurs to provide the Service at your direction.

We share information with service providers (“subprocessors”) that help us run the Service, under contracts that require them to protect it, including: cloud hosting and database infrastructure; our mail provider (e.g., PostGrid) to print and deliver letters; our payment processor (Stripe); AI model provider(s); transactional email and CRM/communication tools; and analytics providers. We may also share information to comply with law, enforce our terms, protect rights and safety, or in connection with a business transfer. A current list of subprocessors is available on request.

We use cookies and similar technologies for functionality, security, and analytics. You can control cookies through your browser settings. Where required, we present a cookie/consent notice.

We retain information for as long as needed to provide the Service, meet the retention needs of our Customers, and comply with legal, tax, and audit obligations, after which we delete or de-identify it. Customers can request deletion of Consumer Content, subject to legal retention requirements.

We use technical and organizational safeguards including row-level access controls scoped to each organization, encryption of sensitive fields at rest, private storage with short-lived signed URLs for documents, and audit logging. No system is perfectly secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete, or restrict use of your personal information, and to opt out of “sale” or “sharing” (we do not sell personal information). Consumers should direct requests to the credit repair organization that holds their data; we will assist that organization as its service provider. Customers and website visitors may contact us at support@disputebadger.com. We will not discriminate against you for exercising your rights.

The Service is for businesses and is not directed to children under 18. We do not knowingly collect personal information directly from children.

We operate in the United States. If you access the Service from outside the U.S., you understand your information will be processed in the U.S.

We may update this Policy. Material changes will be reflected in the “Last updated” date and, if appropriate, additional notice.

support@disputebadger.com · Lasagna LLC, 30 N Gould St Ste R, Sheridan, WY 82801 · https://www.disputebadger.com/contact