Effective date: April 22, 2026
CreditFix ("we," "our," or "us") is a credit repair organization registered in Rhode Island. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using CreditFix, you agree to the practices described here.
Credit report data. When you upload a credit report PDF, we extract text from it to perform analysis. This data includes account names, balances, payment history, inquiries, and derogatory marks as reported by the credit bureau.
Account information. If you create an account, we collect your email address, full name, and (optionally) your mailing address for dispute letter generation.
Payment information. Payments are processed by Stripe. We do not store your credit card number or payment credentials. Stripe provides us with a customer identifier and subscription status only.
Usage data. We collect standard server logs including IP address, browser type, and pages visited to operate and improve the service.
Credit report analysis. Your report data is sent to Anthropic's AI API solely to perform the analysis you requested. It is not used to train models and is not retained by Anthropic beyond the API call.
Dispute letter generation. Your name and mailing address are used only to personalize dispute letters you generate. We do not share this information with third parties for marketing.
Account management. Your email is used to authenticate your account, send transactional emails (e.g., receipts), and notify you of important account changes. We do not send marketing emails without your consent.
We never sell your data. Your personal information and credit report data are never sold, rented, or shared with data brokers or marketing companies.
Credit report PDFs. Your uploaded PDF is automatically deleted from our storage servers after analysis is complete, typically within minutes. We retain the extracted structured data (accounts, inquiries, etc.) as part of your repair plan.
Anonymous free analysis. If you use the free analysis without an account, your data is stored temporarily (up to 24 hours) to let you save your results. It is automatically deleted after that period.
Account data. We retain your account information for as long as your account is active. You may request deletion of your account and associated data at any time.
Dispute letters. Generated dispute letters are stored in your account for your reference. You may delete them at any time from your account settings.
Supabase. We use Supabase for database storage and file storage. Data is encrypted at rest and in transit. Supabase is SOC 2 Type II certified.
Stripe. We use Stripe to process subscription payments. Stripe is PCI-DSS Level 1 certified. See Stripe's privacy policy at stripe.com/privacy.
Anthropic. We use Anthropic's Claude API to analyze credit reports and generate dispute letters. Credit report data is transmitted to Anthropic's API solely for this purpose. See Anthropic's privacy policy at anthropic.com/privacy.
Vercel. Our application is hosted on Vercel. Vercel may process server request metadata. See Vercel's privacy policy at vercel.com/legal/privacy-policy.
Access. You may request a copy of the personal information we hold about you at any time.
Correction. You may update your name and mailing address from your account settings at any time.
Deletion. You may request deletion of your account and all associated data. Email us at the address below.
California residents (CCPA). You have the right to know what personal information we collect, to opt out of sale (we do not sell personal information), and to request deletion.
EEA/UK residents (GDPR). You have the right to access, rectify, erase, restrict processing, and port your data. You may lodge a complaint with your supervisory authority.
We use industry-standard security practices including 256-bit TLS encryption in transit, encrypted storage at rest, and role-based access controls. No system is 100% secure. If you believe your account has been compromised, contact us immediately.
We may update this Privacy Policy periodically. We will notify you of material changes by email or by posting a notice on our website. Continued use of the service after changes constitutes acceptance.
For privacy-related questions, data access requests, or to request account deletion:
CreditFix is operated in accordance with 15 U.S.C. § 1679 (Credit Repair Organizations Act).