Privacy Policy

What we collect

CreditKaren is designed to minimize data collection. Your credit report itself is never stored. We do collect a small amount of contact and usage data when you use specific features:

• Credit report text. When you upload a PDF from Equifax, Experian, or TransUnion, we extract the text in your browser and send only that extracted text to our servers for analysis. We do not store the original PDF file, and the extracted text is discarded once your results are returned.
• Email address for rate limiting. Before an AI-assisted report review, we ask for your email address to enforce a limit of 3 analyses per email every 24 hours. This is how we prevent automated abuse and keep the service free. Your email is stored with a timestamp in our usage log and automatically deleted after 7 days.
• Email address for letter delivery. If you ask CreditKaren to email your dispute letters, we store your email address, the fact that you requested delivery, and the number of letters and flagged items included. We use this to deliver your letters and to send occasional CreditKaren updates. Every update email includes a one-click unsubscribe link.
• Expert consult request details. If you submit the form to speak with a credit repair expert, we store your name, email address, phone number, and a summary of your results (the number of flagged items and your dispute-potential tier — never your credit report text). See "Expert consult requests" below.
• Usage analytics. We use Google Analytics to understand how visitors interact with the site — for example, which pages are most helpful and where users drop off. This data is aggregated and anonymized where possible.

How we process your data — AI disclosures

CreditKaren uses a large language model (Gemini, via Google) to analyze the text extracted from your credit report. Here is exactly what happens:

• Client-side extraction. PDF parsing happens in your browser using pdfjs-dist. The raw PDF never leaves your device.
• Edge-function analysis. The extracted text is sent to a Supabase Edge Function, which forwards it to Gemini for structured analysis. The prompt instructs the model to flag potentially inaccurate, incomplete, or unverifiable items and cite relevant FCRA considerations.
• No training on your data. We do not use your credit report text to train or fine-tune AI models. Each analysis is an isolated inference request.
• No human review. AI-generated output is presented to you automatically. We do not have a team reading your report text unless you explicitly reach out to us for support.

Expert consult requests and lead sharing

After your review, you may optionally ask to speak with a credit repair expert. If you submit that form, here is exactly what happens:

• What we store. Your name, email address, phone number, the number of flagged items in your review, and your dispute-potential tier.
• Who receives it. We share those details with a vetted credit repair professional so they can contact you by phone or email about their services. We do not share your credit report text or your uploaded documents.
• Your control. Submitting the form is optional and is never required to use the free review or receive your dispute letters. You can ask us to delete your consult request at any time by emailing hello@creditkaren.ai.

How long we keep your data

CreditKaren never stores your credit report. For the contact and usage data described above, retention works like this:

• Credit report text. Never stored. It is processed in memory to produce your results and discarded immediately after the analysis completes.
• Rate-limit records (email address + timestamp used to enforce the 3-per-day limit). Automatically deleted after 7 days by a scheduled daily purge.
• Letter-delivery and email-list records. Kept until you unsubscribe or ask us to delete them, so we can deliver your letters, avoid duplicate sends, and honor your preferences.
• Expert consult request details. Kept until you request deletion, so the credit repair professional can follow up with you.
• Email delivery logs (recipient address, message type, delivery status, timestamps). Automatically deleted after 12 months by a scheduled daily purge.
• Unsubscribe and suppression records. Kept for as long as needed to honor your opt-out, as required by email marketing law. If you unsubscribe, we keep a minimal record of your address solely to make sure you are not emailed again.
• Analytics data. Google Analytics retains aggregated usage data according to its own policies, which you can review in Google's Privacy Policy.

What we do NOT do

• We do not sell your credit report data or use it for advertising targeting.
• We do not store your original PDF files after extraction.
• We do not store your credit report text after your results are returned.
• We do not share your information with credit repair professionals unless you explicitly submit an expert consult request.
• We do not run a credit bureau, lender, or debt-collection service.
• We do not guarantee any specific credit score improvement.

Third-party services

We rely on a small number of trusted providers to run the service. Each of these subprocessors may process data on our behalf:

• Supabase — hosts our Edge Functions and database, including the rate-limit, email-list, and delivery-log records described above. Data is encrypted in transit (TLS) and at rest.
• Google (Gemini AI) — powers the credit report analysis. Text is sent via API and is not used to train models.
• Transactional email delivery — our hosting platform's email service delivers your dispute letters and optional CreditKaren updates. Delivery status (sent, delivered, bounced) is logged for up to 12 months.
• Credit repair professionals — receive your name, email, and phone number only when you explicitly submit an expert consult request.
• Google Analytics — provides aggregated site usage statistics.
• Google AdSense — serves advertisements on this site. Google and its third-party vendors and partners may use cookies to serve ads based on your prior visits to our website or other websites. You can opt out of personalized advertising by visiting Google Ads Settings. You can also opt out of third-party cookies via aboutads.info.

Cookies and similar technologies

CreditKaren uses a minimal set of cookies. Google Analytics sets cookies to distinguish unique visitors and track session activity. Google AdSense and its partners may also set cookies to display ads and measure ad performance. You can block or delete cookies through your browser settings. The core educational report review functionality does not require cookies to work.

• Personalized ads. Google uses cookies to serve ads based on your interests and prior visits. Manage or opt out at Google Ads Settings.
• Third-party ad cookies. Some ads are served by third-party vendors that may set their own cookies. Opt out at aboutads.info/choices.

Your choices and rights

• Unsubscribe. Every marketing or tip email includes a one-click unsubscribe link. You can also request removal by emailing hello@creditkaren.ai.
• Access or deletion. If you want to know what data we hold about you — including rate-limit records, letter-delivery records, or an expert consult request — or you want us to delete it, email hello@creditkaren.ai with the subject line "Privacy Request." We will confirm completion within 30 days. Note that if you have unsubscribed, we may keep a minimal suppression record of your address so we do not email you again.
• No account required. Because CreditKaren does not require registration, there is no account profile to manage.

Children's privacy

CreditKaren is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Contact us

Questions about this policy or how we handle your data? Email hello@creditkaren.ai.

Changes to this policy

We may update this Privacy Policy as our practices evolve or as required by law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.