Privacy Policy

Account Information

When you create an account, we collect your email address, full name, and password (stored as a hashed value via Supabase Auth).

Profile Information

To generate dispute letters, we collect your mailing address (street, city, state, ZIP), phone number, and self-reported credit score. This information is optional but required for letter generation.

Credit Report Data

You upload credit report documents (PDF) to our platform. We extract and store structured data including creditor names, account numbers, balances, and dispute-relevant details. We do not sell or share this data with third parties except as described below.

Payment Information

Payments are processed by Stripe, Inc. We do not store your credit card number, CVV, or full payment details. We store a Stripe Customer ID to manage your subscription.

Usage Data

We automatically collect log data including your IP address, browser type, pages visited, and actions taken within the service. This is used for security and service improvement.

Service Delivery

To generate dispute letters, analyze credit reports, track responses, and send you correspondence related to your disputes.

AI Processing

Credit report data and dispute strategies are processed using Anthropic's Claude API to generate dispute letter content. Anthropic processes data according to their enterprise privacy terms and does not use API-submitted data to train models.

Email Communication

We send dispute letters and service notifications to your email address via Resend. You will receive transactional emails related to your account and dispute letters you generate.

Account Management

To authenticate you, manage your subscription, and provide customer support.

Infrastructure

Your data is stored on Supabase (PostgreSQL), hosted on AWS infrastructure with encryption at rest and in transit (TLS 1.2+).

Access Controls

Access to your data is restricted to you and, where necessary for service operation, to Disputely administrators. Row-level security policies restrict database access.

Retention

We retain your data for as long as your account is active. Upon account deletion, we remove your personal data within 30 days, except where required by law.

Stripe

Payment processing. Privacy policy: stripe.com/privacy

Anthropic

AI letter generation via Claude API. Enterprise API — data is not used for model training. Privacy policy: anthropic.com/privacy

Supabase

Database and authentication hosting. Privacy policy: supabase.com/privacy

Resend

Transactional email delivery. Privacy policy: resend.com/legal/privacy-policy

Vercel

Application hosting and CDN. Privacy policy: vercel.com/legal/privacy-policy

Access & Portability

You can request a copy of all personal data we hold about you by contacting support@disputely.pro.

Correction

You can update your profile information at any time via Settings → Profile.

Deletion

You can request deletion of your account and all associated data by emailing support@disputely.pro. We will complete deletion within 30 days.

California Residents (CCPA)

California residents have the right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information. We do not sell personal information.

We use session cookies necessary for authentication (Supabase Auth). We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this will prevent you from logging in.

Disputely is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you become aware that a minor has provided us with personal information, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice within the application. Continued use after changes constitutes acceptance of the updated policy.

For privacy-related questions or requests, contact us at: support@disputely.pro