Our Core Privacy Commitment
We do not sell your personal information. We do not share your credit report data, identity documents, or dispute information with third parties for advertising or marketing purposes. Your data is used exclusively to provide the Service to you.
1. Who We Are
3B Credit Builder is operated by Bounce Back Brian LLC ("Company," "we," "us," "our"). This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our platform at credit.bouncebackbrian.com ("Service"). For questions, contact us at credit@bouncebackbrian.com.
2. Information We Collect
2a. Information You Provide Directly
- Account information: Name, email address, and password when you create an account.
- Profile information: First name, last name, mailing address (street, city, state, ZIP), and phone number. This is used to auto-fill dispute letters.
- Credit reports: PDF files of your credit reports, which you upload voluntarily. We extract and store structured data from these reports to power your dispute dashboard.
- Identity documents: Government-issued ID and proof of address documents uploaded to your Evidence Vault. These are stored in a private, access-controlled storage system and are never publicly accessible.
- Dispute content: Information about accounts you dispute, dispute letters you generate, and bureau responses you log.
- Cancellation feedback: Optional reasons you provide when cancelling your subscription.
- Communications: Any messages or emails you send to us.
2b. Payment Information
Payment processing is handled by Stripe, Inc. We do not collect or store your payment card number, CVV, or bank account information. Stripe provides us with a customer ID and subscription status. Stripe's privacy policy governs the handling of your payment data: stripe.com/privacy.
2c. Information Collected Automatically
- Usage data: Pages visited, features used, timestamps, and audit events (e.g., letter generated, document uploaded).
- Device information: Browser type, operating system, IP address, and user agent string.
- Cookies and local storage: We use session cookies for authentication and preferences. We do not use third-party advertising cookies.
3. How We Use Your Information
- To create and manage your account and authenticate you securely.
- To analyze your credit report and power your dispute dashboard.
- To auto-fill your name and mailing address into dispute letter templates.
- To store and retrieve your identity documents from your private Evidence Vault.
- To process subscription payments and manage billing.
- To send transactional communications: billing receipts, subscription confirmations, dispute timeline reminders, and bureau response notifications.
- To detect and prevent fraud, abuse, and unauthorized access.
- To improve the platform, fix bugs, and analyze how features are used (using aggregated, non-identifying data).
- To comply with applicable laws and legal process.
4. How We Share Your Information
We do not sell your personal information. We share information only as described below:
- Supabase: Our database and authentication infrastructure provider. Your data is stored in Supabase's hosted PostgreSQL database and object storage.
- Stripe: Payment processing. We share the minimum data needed to process payments (email, name, subscription intent).
- Mailing partners: When you purchase certified mailing, your mailing address and dispute letter content are transmitted to our certified mail provider to fulfill the mailing order. No other personal data is shared.
- AI processing (Anthropic): Credit report data is sent to Anthropic's Claude API for analysis and dispute letter generation. This data is processed under Anthropic's data usage policies for API customers. We do not send your name, contact information, or identity documents to the AI API — only structured account data from your credit report.
- Legal requirements: We may disclose information if required by law, court order, or government authority, or to protect the rights, property, or safety of the Company, our users, or the public.
- Business transfers: In the event of a merger, acquisition, or sale of substantially all assets, your information may be transferred as part of the transaction, subject to the same privacy commitments.
5. Your Identity Documents — Special Handling
We treat government-issued ID and proof of address documents with heightened care because of their sensitivity:
- Documents are uploaded to a private storage bucket that is not publicly accessible.
- Access requires authentication as you, the document owner.
- When these documents must be accessed for letter packet assembly, we use signed, time-limited URLs that expire automatically.
- We maintain an audit log of every document access for security purposes.
- We do not use your identity documents for any purpose other than assembling your dispute packets.
6. Data Retention
- Account data is retained for as long as your account is active and for up to 2 years after account closure for legal and business purposes.
- Credit report data and dispute records are retained for the duration of your account and up to 2 years after closure.
- Payment records are retained as required by law (typically 7 years).
- You may request deletion of your data by contacting us (see Section 9). Deletion requests are processed within 30 days subject to legal retention requirements.
7. Security
We implement industry-standard security measures including TLS encryption in transit, encrypted database storage, access-controlled document storage, authentication via secure session tokens, and audit logging. No system is 100% secure. If you believe your account has been compromised, contact us immediately at credit@bouncebackbrian.com.
8. Cookies
We use essential cookies for authentication (session management) and security. We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies that share data with advertisers. You may disable cookies in your browser, but doing so will prevent you from logging in.
9. Your Rights and Choices
You have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Update your profile information in the 3B Profile settings.
- Deletion: Request deletion of your account and associated data. Contact us at credit@bouncebackbrian.com.
- Opt-out of marketing emails: Use the unsubscribe link in any marketing email. Transactional emails (billing, security) cannot be opted out of while your account is active.
- Data portability: Request an export of your credit report analysis, dispute cases, and generated letters.
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt-out of sale (we do not sell data). Contact us to exercise these rights.
10. Children
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-app notice at least 14 days before they take effect. The current policy is always available at this URL.