Privacy Policy

Which privacy role we play depends on whose data it is, and the distinction matters for who you contact about it.

• We are the controller of your account relationship: your name, email, login and security records, billing records, support messages, and diagnostic logs. We decide how that data is used to run the business, and you can exercise your rights over it directly with us.
• We are a processor of consumer data uploaded by a professional user — a credit repair organization, law firm, or other business acting for a consumer. That firm is the controller. We process it only on their instructions, and a consumer whose file was uploaded by a firm should direct access, correction, and deletion requests to that firm first. We will assist them and will not release or delete their records without instruction, unless the law requires it.
• For consumers using the Service directly for their own credit file, we are the controller of that data and you can exercise your rights with us.

Professional users are covered by our Data Processing Addendum, which sets out our processor obligations, subprocessor categories, breach notice, and deletion commitments.

Account information: name, email, workspace details, authentication metadata.

Consumer data you upload: credit reports, personal identifiers of consumers you represent, and dispute correspondence. You are the controller of this data; we act as a processor on your behalf.

Billing information: processed by Stripe. We store only Stripe customer identifiers, not full card numbers.

Technical data: IP address, device type, application version, and diagnostic logs required to operate the Service.

To operate the Service, deliver features you request, process payments, prevent fraud and abuse, comply with legal obligations, and improve product quality. We do not sell personal information.

We share information only with (a) service providers acting under contract (hosting, database, payment processing, email delivery, analytics), (b) parties you explicitly direct us to communicate with (e.g. credit bureaus and furnishers when sending dispute correspondence), and (c) authorities when required by law.

Account and consumer records are retained for the life of your subscription. Specific timelines:

• In-app deletion: begins immediately and completes in live systems within 24 hours.
• Email deletion requests: verified and completed within 30 days of receipt.
• Encrypted backups: purged on the next rotation cycle, no later than 30 days after live deletion.
• Inactive accounts: data may be deleted after 24 months of inactivity following email notice.
• Diagnostic and access logs: retained up to 90 days, then deleted or anonymized.
• Billing and tax records: retained up to 7 years as required by law, in restricted-access archives.
• Legal hold: records subject to an active legal, regulatory, or fraud investigation are retained until the hold is lifted.

Full details are on our Delete Your Account & Data page.

Data is encrypted in transit and at rest. Access is scoped by row-level security. No system is perfectly secure — you should safeguard credentials and use strong, unique passwords.

Depending on jurisdiction (including under GDPR and CCPA), you may have the right to access, correct, delete, or export your personal data, and to object to certain processing. Submit requests to privacy@disputedocs.app.

DisputeDocs Pro is intended for adults age 18 and older. The Service is not directed to minors, we do not knowingly collect personal information from anyone under 18, and we delete such information promptly if we learn we have it.

Our Android application collects only the data described above. Data is transmitted over TLS to our secure backend. We do not use tracking SDKs for advertising. You may request deletion of account data at any time via the in-app Settings screen or by emailing privacy@disputedocs.app.

We may update this policy periodically. Material changes will be communicated in-app or by email.

Data controller: DisputeDocs Pro. Contact: privacy@disputedocs.app.