Privacy Policy

1. Scope

This Policy applies to personal information we process when you visit our marketing pages, create an account, import data, use dispute-drafting or tracking features, contact support, or otherwise interact with the Service. It does not apply to third-party websites or services that we do not control, even if linked from the Service.

"Personal information" means information that identifies, relates to, or could reasonably be linked with you or your household, as defined by applicable law. It does not include de-identified or aggregate information that cannot reasonably be used to identify you.

2. Categories of information we collect

Depending on how you use the Service, we may collect the following categories:

• Identifiers: name, email address, account ID, IP address, device/browser identifiers, and similar
• Customer records / profile data: mailing address, phone number, date of birth, and other profile fields you choose to provide for letter drafting
• Government ID-related data: we may ask only for the last four digits of your Social Security number (not the full SSN) if you choose to store it for draft letters; treat even partial SSN data as sensitive
• Commercial information: subscription status, purchase history, and plan type
• Internet / network activity: pages viewed, feature usage, log data, referral URLs, and diagnostics needed to operate and secure the Service
• Professional or employment information: only if present in materials you upload (for example, employer fields on a credit report)
• Inferences / derived data: limited flags, categorizations, or suggestions generated from data you provide (for example, candidate items for your review)
• Credit-report and financial file data YOU upload or import: account, inquiry, public-record, personal-info, and related fields extracted from PDFs or manual entry; balances; payment history grids; bureau identifiers
• User-generated content: draft letters, edits, notes, dispute statuses you report, and similar
• Sensitive personal information (as defined under CCPA, if applicable): such as partial SSN and precise financial account details appearing in uploaded reports. We use such information only to provide features you request, subject to this Policy

3. Sources of information

We collect information: (a) directly from you (registration, profile forms, uploads, drafts, support messages); (b) automatically from your devices when you use the Service (logs, cookies or similar technologies as configured); and (c) from service providers that help us operate authentication, hosting, payments, email, analytics, and AI inference.

We do not pull your credit file from Experian, Equifax, TransUnion, or other consumer reporting agencies on your behalf. You obtain and import your own documents.

4. How we use information (purposes)

We use personal information for the following business and commercial purposes:

• Provide, maintain, personalize, and improve the Service (parse reports, generate drafts, sync your tracker, display your dashboard)
• Authenticate users, secure accounts, detect fraud/abuse, debug, and monitor performance and reliability
• Process subscriptions, payments, cancellations, and related customer communications
• Respond to support requests and communicate about the Service, security, or Terms
• Comply with law, enforce agreements, and protect rights, safety, and property
• Generate de-identified or aggregated insights that do not reasonably identify you

5. AI and automated processing

If you enable AI-assisted features (including hosted Raccoon AI or third-party models via your own keys), we or our processors may transmit relevant inputs (such as selected item details, dispute context, or draft text) to AI providers solely to generate requested outputs. AI providers process data under their terms and our agreements with them.

Do not submit information to AI features that you are not comfortable processing for that purpose. Outputs remain drafts for your review and are not advice or guarantees.

6. How we disclose information

We do not sell your personal information for money. We do not "share" personal information for cross-context behavioral advertising as those terms are defined under the CCPA, unless we expressly update this Policy and provide required notices/opt-outs.

We may disclose personal information to:

• Service providers / processors under contracts requiring them to use data only to provide services to us (examples of categories: cloud hosting and databases, authentication, payment processing, email delivery, error monitoring, and AI inference providers)
• Professional advisors (legal, accounting) under confidentiality obligations when needed
• Authorities, courts, or opposing parties when required by law, legal process, or to protect rights, safety, and security, or in connection with a good-faith legal claim
• A buyer or successor in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to confidentiality and continued protection consistent with this Policy
• Other parties with your direction or consent (for example, if you export and send data yourself)

7. What we do not do with your dispute data

We do not automatically contact, submit to, or transmit your disputes, letters, identity documents, or credit-file contents to credit bureaus, furnishers, creditors, or collectors. Any such communication is performed by you outside our automated systems. Tracking statuses in the Product (for example, that you marked a draft as sent) reflect what you report to us, not actions we take with third parties.

8. Cookies and similar technologies

We and our providers may use cookies, local storage, session storage, and similar technologies to keep you signed in, remember preferences, maintain security, and understand aggregate usage. You can control cookies through browser settings; disabling some cookies may limit functionality. Local device storage may also hold drafts or report data for product features.

9. Retention

We retain personal information for as long as your account is active and as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, enforce agreements, and maintain security backups. Retention periods vary by data type. When no longer needed, we delete or de-identify information in accordance with our practices, subject to residual copies in secure backups until overwritten in the ordinary course.

10. Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information, which may include encryption in transit, access controls, and encryption at rest for certain sensitive profile fields. No method of transmission or storage is completely secure. You are responsible for using a strong unique password and for securing devices you use to access the Service.

If we become aware of a security incident affecting your personal information, we will take appropriate steps consistent with applicable law, which may include notification where required.

11. Your choices and rights

Depending on your location and applicable law, you may have rights to access, correct, delete, or export certain personal information; to opt out of certain processing; and to appeal a denial of a consumer request. California residents may have additional rights under the CCPA, including the right to know, delete, correct, and limit use of sensitive personal information, and not to be discriminated against for exercising rights.

To exercise privacy rights, email support@creditraccoon.com (or support@creditraccoon.com) with the subject line "Privacy Request," and describe the request and the email associated with your account. We will verify your identity to a reasonable degree of certainty before fulfilling requests. Authorized agents may submit requests where permitted by law with appropriate authorization proof.

You may update profile fields in-product where available, stop uploading reports, disable optional AI features, or request account deletion. Marketing emails, if any, will include an unsubscribe mechanism. Transactional and security messages may still be sent as needed to operate the Service.

12. Children's privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children under 13 (or under 16 where CCPA minor rules apply for sale/share, which we do not engage in as described above). If you believe a child provided personal information, contact us and we will take appropriate steps to delete it.

13. International users and transfers

The Service is operated from the United States. If you access the Service from outside the United States, you understand that your information may be processed in the United States and other countries where we or our processors operate, which may have different data-protection rules than your country.

14. "Do Not Track"

Some browsers offer a "Do Not Track" signal. There is no uniform industry standard for responding. Aside from the practices described in this Policy, we do not currently alter collection in response solely to DNT signals.

15. Changes to this Policy

We may update this Policy from time to time. The Effective date above will change when we do. Material changes may be highlighted by notice (email or in-product). Continued use after the effective date constitutes acknowledgment of the updated Policy, except where applicable law requires additional consent. Version: 2026-07-14.

16. Contact

Privacy questions and consumer requests: support@creditraccoon.com

General support: support@creditraccoon.com

Operator: the operators of the CreditRaccoon service at CreditRaccoon.com / CreditRaccoon.com