Privacy Policy
Version 2026-01 · Last updated January 15, 2026
We collect the minimum needed to run the product, we never sell your data, and you can export or delete everything at any time. What follows is the detail.
The short version
- We do not sell your personal or credit information, and we do not share it for advertising.
- We collect what the product needs to work, and nothing we cannot justify.
- Your credit and identity data is classified as restricted and encrypted before it reaches our database.
- You can download everything we hold, and you can delete your account, from Settings.
What we collect
Account information
Your email address, an optional display name, your time zone, and a hash of your password. We never store your password itself.
Credit and financial information
Account balances, credit limits, payment history, statement and due dates, inquiries, collections, public records and credit scores — either as you enter them or as retrieved from a credit data provider you have authorized. We store the last four digits of an account number for identification and never store a complete account number.
Identity information
If you connect a credit bureau, that provider requires identifying data — typically your legal name, date of birth, address and Social Security number — to locate your consumer file. We collect this only when you initiate such a connection, encrypt it with application-level encryption before it reaches our database, and never log it, cache it or include it in an export.
Usage and technical information
IP address, browser type, device identifiers for sessions you have chosen to remember, and records of actions taken in your account. This is what lets us show you your active sessions and detect a sign-in that is not you.
AI conversations
Your questions to the Inside AI Advisor and its answers, together with which tools it used to answer. Conversation content is sent to our AI provider to generate a response and is not used to train any model.
Why we collect it
| Purpose | What it uses |
|---|---|
| Providing the service | Account, credit and financial information |
| Retrieving credit data on your authorization | Identity information |
| Securing your account | Usage and technical information |
| Explaining your data in plain language | AI conversations and the computed results they reference |
| Billing | Account information and payment records held by our payment processor |
| Legal and compliance obligations | Consent records and the audit trail |
What we never do
- We do not sell your personal or credit information to anyone.
- We do not share your data with advertisers or data brokers.
- We do not use your credit data or your conversations to train AI models.
- We do not log Social Security numbers, complete account numbers, passwords, tokens or complete credit report payloads at any level.
Who we share with
We share data only with service providers who need it to deliver the product:
- Credit data providers — only when you have authorized a connection, and only the identifying data required to locate your file.
- Our AI provider — the content of your Advisor conversations and the computed results being explained, for the purpose of generating a response.
- Our payment processor — billing details, which they hold rather than us.
- Our infrastructure providers — hosting, database and storage, under contractual confidentiality obligations.
We may also disclose information where legally required, or to protect the rights and safety of our members. Where we are permitted to notify you first, we will.
How long we keep it
| Data | Retention |
|---|---|
| Credit snapshots and history | 24 months by default |
| AI conversations | 12 months |
| Uploaded documents | 36 months, or until you delete them |
| Audit and security events | 7 years, in a form that no longer identifies you after account deletion |
| Everything else | Until you delete your account |
Your rights
Regardless of where you live, you can:
- Access and export everything we hold, as a complete file, from Settings.
- Correct any account data you entered, at any time.
- Delete your account and data. Deletion runs after a short grace period — which exists so someone who gained access to your account cannot irreversibly delete it before you notice — and is then permanent.
- Withdraw consent for a credit data connection, which stops further retrievals immediately.
- Object or complain by writing to privacy@insidethecreditai.com.
Residents of California, Colorado, Connecticut, Utah, Virginia and other states with comprehensive privacy laws, and residents of the EEA and UK, have these rights under their own legislation as well. We apply them to everyone rather than by jurisdiction.
Children
Inside The Credit AI is not directed to anyone under 18 and we do not knowingly collect information from children. If you believe a child has provided us information, write to privacy@insidethecreditai.com and we will delete it.
Changes to this policy
We version this document. When a change is material we will notify you and, where consent is required, ask for it again — your consent record stores which version you accepted and when. This is version 2026-01.
Contact
privacy@insidethecreditai.com, or through the contact page.