Privacy Policy
Information handled
The platform may process account details, user-provided credit documents, extracted report information, progress data, and billing status needed to provide the service.
How information is used
Information is used to operate accounts, secure report access, provide user-requested analysis and document tools, maintain workflow history, prevent abuse, and support billing. Payment card details are handled by Stripe rather than stored by this application.
Safeguarding and sharing
EZKredit AI uses administrative and technical safeguards designed to protect the confidentiality and security of customer information. Uploaded reports are kept in private, account-restricted storage and are not made public or sold. Access is limited to the user and the systems and service providers needed to deliver requested features, prevent abuse, maintain security, and comply with law. No online system can guarantee absolute security.
Credit-report retention
Uploaded credit reports expire after 365 days by default. EZKredit AI securely disposes of customer information no later than two years after its most recent use to serve the customer unless a documented legal requirement, legitimate business need, or technical feasibility exception applies.
AI processing
Before report text is sent to OpenAI, EZKredit AI removes high-risk identity fields and limits the submitted text. API responses are requested with provider-side response storage disabled. OpenAI states that API data is not used for model training by default and that abuse-monitoring logs may be retained for up to 30 days unless a qualifying zero-data-retention configuration applies.
Knowledge Center progress
For eligible accounts, EZKredit AI stores the lesson identifier, started or completed status, selected quiz answer, quiz result, and update times. The learning-progress record does not contain credit-report text. Coarse workspace signals may reorder recommended lessons, while completed lessons remain attached to the account until the user deletes the account.
Controlled-beta applications
A beta application collects a name, email address, state or U.S. territory, general testing goal, device category, and required acknowledgments. It does not ask for a credit report, Social Security number, account number, score, debt details, or payment information. Applications are reviewed by a person and do not automatically grant access. Application records are scheduled for deletion within 180 days. If a selected application is linked to an account, it is included in the user's account export and removed with the account or at retention expiry, whichever occurs first.
Analytics and campaign attribution
Essential storage supports security and account operation. Optional analytics activates only after the visitor chooses to allow it. The growth system is designed to record a random session identifier, page path, general campaign labels, referral host, and bounded interaction categories for no more than 90 days. It does not send credit-report contents, account emails, form entries, or identity-verification information to analytics. Advertising storage and personalization remain disabled unless a separately reviewed and consent-controlled integration is approved.
Deletion and export
A signed-in user can export account records, permanently delete an individual report and its linked analysis, or permanently delete the entire account and private report files from Privacy & Account settings. If Stripe reports an active subscription, the user must separately acknowledge immediate cancellation; EZKredit AI must cancel and verify every active subscription before account deletion can continue.
Operational records
Security audit records avoid raw report contents and are retained for 365 days. Payment, tax, fraud-prevention, or legal records held by service providers may follow separate required retention periods.