Privacy Policy

1. Introduction & About Us

Creditfern ("we", "us", or "our") operates creditfern.com and related services (the "Service"). Our principal place of business is located at 550 South Tryon Street, Suite 1800, Charlotte, NC 28202.

We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information, with specific disclosures required by the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), effective January 1, 2023.

For privacy inquiries, contact us at:
Email: [email protected]
Postal: Privacy Team, Creditfern, 550 South Tryon Street, Suite 1800, Charlotte, NC 28202

2. Categories of Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information as defined by the CCPA:

2.1 Sources of Personal Information

• Directly from you — forms, account registration, pilot inquiry submissions, support requests;
• Automatically — cookies, web beacons, server logs when you use our Service;
• Third parties — analytics providers, advertising partners, data enrichment providers.

3. Business & Commercial Purposes for Collection & Use

We collect and use personal information for the following business and commercial purposes:

• Providing, maintaining, and improving our products and services;
• Processing pilot inquiries and managing institution accounts;
• Sending transactional communications (receipts, account alerts, service notices);
• Providing customer support and responding to inquiries;
• Personalising your experience and content;
• Conducting analytics to understand how our Service is used;
• Sending marketing communications (where you have opted in or where permitted);
• Fraud prevention, security monitoring, and protecting legal rights;
• Complying with applicable laws, regulations, and legal process;
• Evaluating or conducting a merger, divestiture, or other business transaction.

4. Disclosure, Sale & Sharing of Personal Information

4.1 Categories Disclosed for Business Purposes

In the past 12 months, we have disclosed the following categories of personal information to service providers and contractors for business purposes:

• Identifiers (A) — to cloud hosting, email providers, analytics providers;
• Commercial information (D) — to payment processors;
• Internet / electronic activity (F) — to analytics and advertising platforms;
• Inferences (K) — to content personalisation platforms.

4.2 Sale & Sharing of Personal Information

4.3 Do Not Sell or Share — Opt-Out

California residents have the right to opt out of the sale or sharing of their personal information at any time. To exercise this right:

• Email: [email protected] with subject "CCPA Opt-Out Request".
• Global Privacy Control (GPC): We honour GPC signals. If your browser transmits a GPC signal, we will treat it as an opt-out request.

Once we receive your opt-out request, we will cease the sale or sharing of your personal information within 15 business days.

4.4 Sensitive Personal Information

We collect only account log-in credentials (username + hashed password) as sensitive personal information and use it solely to authenticate your account. We do not use or disclose sensitive personal information for purposes beyond those necessary to provide the Service.

5. Your California Privacy Rights

If you are a California resident, you have the following rights under the CCPA/CPRA:

• Right to Know — Request disclosure of categories and specific pieces of personal information we have collected about you.
• Right to Delete — Request deletion of personal information we have collected, subject to certain exceptions.
• Right to Opt-Out of Sale/Sharing — Direct us not to sell or share your personal information with third parties for cross-context behavioural advertising.
• Right to Non-Discrimination — We will not discriminate against you for exercising your CCPA rights.
• Right to Correct (CPRA) — Request correction of inaccurate personal information we maintain about you.
• Right to Limit SPI Use (CPRA) — Direct us to limit our use of sensitive personal information.

5.1 How to Submit a Consumer Request

California residents may submit requests by:

• Email: [email protected] with subject "CCPA Privacy Request";
• Postal mail: Creditfern, Attn: Privacy Team, 550 South Tryon Street, Suite 1800, Charlotte, NC 28202.

5.2 Verification of Requests

To protect your information, we must verify your identity before fulfilling a request. We will ask you to provide information that matches what we have on file. We will acknowledge your request within 10 business days and respond within 45 calendar days.

6. Retention of Personal Information

7. Security of Personal Information

We implement reasonable and appropriate technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction, including AES-256 encryption at rest, TLS 1.3 in transit, access controls, and employee training. No system is 100% secure; please notify us promptly of suspected unauthorized access.

8. Children's Privacy

We do not knowingly collect personal information from consumers under 16 years of age. If you believe we have collected personal information from a minor under 16, please contact us at [email protected] and we will delete it promptly.

9. Privacy Rights for Other Jurisdictions

Residents of other U.S. states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, and others) may have similar rights. For more information about your state-specific rights, please contact us at [email protected].

10. Cookies & Online Tracking

We and our partners use cookies, web beacons, pixels, and similar tracking technologies to collect internet/electronic activity data. Some of this data is used for cross-context behavioural advertising, which constitutes "sharing" under the CCPA. You may opt out by using our cookie consent banner, enabling the Global Privacy Control (GPC) in your browser, or contacting us at [email protected]. See our Cookie Policy for full details.

11. Changes to This Privacy Policy

We may update this Privacy Policy as required by changes in law or our practices. When we make material changes, we will update the "Last updated" date and provide appropriate notice. We encourage you to review this policy periodically.

12. Contact Us

For questions, concerns, or to exercise your privacy rights:

• Company: Creditfern
• Email: [email protected]
• Phone: +1 (704) 760-6701
• Address: 550 South Tryon Street, Suite 1800, Charlotte, NC 28202