Privacy by design

The current prototype does not create accounts, upload credit reports, process payments, or store information entered into the interactive demo.

Planned safeguards

• Collect only information required to provide a requested feature
• Encrypt sensitive data in transit and at rest
• Keep credit-report data out of analytics, logs, and model training
• Require explicit consent before sharing data with any service provider
• Offer clear access, correction, export, and deletion controls
• Apply state-specific privacy rights based on the customer’s residence

Before accepting customer data

A final privacy notice, retention schedule, vendor agreements, incident-response process, and state privacy review must be completed. Until then, do not submit Social Security numbers, dates of birth, report numbers, financial account credentials, or credit-report files.