1. Introduction
Cosmic Dispute AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our credit dispute platform.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, password
- Credit Reports: PDF files you upload from credit bureaus
- Personal Information: Information contained in your credit reports (SSN, addresses, account numbers, etc.)
- Payment Information: Credit card details (processed securely through Stripe)
- Communications: Messages you send us for support
2.2 Automatically Collected Information
- Usage Data: Pages visited, features used, time spent on the platform
- Device Information: IP address, browser type, operating system
- Cookies: Session cookies for authentication and functionality
3. How We Use Your Information
We use your information to:
- Provide and maintain the Service
- Process credit reports using AI to identify disputable items
- Generate personalized dispute letters
- Process payments and manage subscriptions
- Send service-related notifications and updates
- Respond to customer support requests
- Improve our Service and develop new features
- Detect and prevent fraud or abuse
- Comply with legal obligations
4. Data Security
We implement industry-standard security measures to protect your data:
- Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256)
- Secure Storage: Credit reports are stored in AWS S3 with strict access controls
- Authentication: OAuth 2.0 authentication with secure session management
- Access Controls: Role-based access with principle of least privilege
- Regular Audits: Security assessments and vulnerability scanning
5. Data Sharing and Disclosure
5.1 We DO NOT Sell Your Data
We will never sell, rent, or trade your personal information or credit report data to third parties for marketing purposes.
5.2 Service Providers
We may share data with trusted service providers who assist us:
- AWS (Amazon Web Services): Cloud hosting and file storage
- Stripe: Payment processing (they never see your credit reports)
- Manus AI: AI processing for credit report analysis
All service providers are contractually obligated to protect your data and use it only for specified purposes.
5.3 Legal Requirements
We may disclose your information if required by law or in response to:
- Valid legal process (subpoena, court order)
- Government requests
- Protection of our rights or safety
- Investigation of fraud or security issues
6. Data Retention
We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your account and data at any time. After deletion:
- Credit reports are permanently deleted from our systems within 30 days
- Account information is anonymized or deleted within 90 days
- Some data may be retained longer if required by law or for legitimate business purposes (e.g., billing records)
7. Your Privacy Rights
7.1 Access and Portability
You have the right to:
- Access your personal data
- Request a copy of your data in a portable format
- Review what information we have about you
7.2 Correction and Deletion
You can:
- Update your account information at any time
- Request correction of inaccurate data
- Delete your account and request data deletion
7.3 Opt-Out Rights
You can opt out of:
- Marketing emails (service emails still required)
- Non-essential cookies
- Data processing for certain purposes (may limit Service functionality)
8. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of sale of personal information (we don't sell data)
- Right to deletion of personal information
- Right to non-discrimination for exercising CCPA rights
9. Children's Privacy
Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we discover we have collected data from a child, we will delete it immediately.
10. International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in compliance with applicable laws.
11. Cookies and Tracking
We use cookies for:
- Essential Cookies: Authentication and security (required)
- Functional Cookies: Remember your preferences
- Analytics Cookies: Understand how you use the Service
You can control cookies through your browser settings, but disabling essential cookies may affect Service functionality.
12. Third-Party Links
Our Service may contain links to third-party websites (e.g., CFPB, credit bureau websites). We are not responsible for the privacy practices of these sites. Please review their privacy policies.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via:
- Email notification
- Prominent notice on the Service
- Updated "Last updated" date at the top of this policy
Continued use of the Service after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:
Email: [email protected]
Address: [Your Business Address]
Data Protection Officer: [DPO Contact if applicable]
15. Consent
By using Cosmic Dispute AI, you consent to the collection and use of your information as described in this Privacy Policy.