Privacy Policy
Last updated: June 17, 2026
Information We Collect
We collect: (a) Account information (name, email, password hash); (b) Credit report content you submit for dispute analysis; (c) Dispute history and outcomes; (d) Payment information processed by Square (we do not store raw card numbers); (e) Usage data and logs.
How We Use Your Information
Your data is used to: provide and improve the Service; generate dispute letters; track dispute outcomes; train and improve our AI models (using anonymized, aggregated patterns only); process payments; communicate with you about your account; comply with legal obligations.
Credit Report Data
Credit report text you submit is sensitive financial information. It is stored encrypted in our database, used only to generate your disputes, and is not sold to or shared with third parties. You may request deletion of your credit report data at any time by contacting privacy@expunge.ai.
Data Sharing
We do not sell your personal data. We share data only with: (a) Supabase (database hosting); (b) Anthropic (AI processing — data subject to their privacy policy); (c) Square (payment processing); (d) Law enforcement when legally required. All processors are bound by data processing agreements.
Data Security
We use industry-standard encryption (TLS in transit, AES-256 at rest), row-level security in our database, and access controls. However, no system is 100% secure. In the event of a breach affecting your data, we will notify you as required by law.
Your Rights
You have the right to: access, correct, or delete your personal data; opt out of marketing communications; request a copy of your data in a portable format; withdraw consent where processing is consent-based. To exercise these rights, email privacy@expunge.ai.
California Residents (CCPA)
California residents have additional rights under the CCPA including the right to know what personal information is collected and shared, the right to delete, and the right to opt out of sale (we do not sell personal information). To exercise CCPA rights, contact privacy@expunge.ai.
Cookies
We use essential cookies for authentication (Supabase session) and no third-party tracking cookies. We do not use advertising cookies.
Children
The Service is not directed at children under 18. We do not knowingly collect data from minors.
Contact
For privacy questions or requests: privacy@expunge.ai. We will respond within 30 days.