DRAFT for attorney review. Not yet in effect. Replace every [bracketed] item before launch.
Privacy Policy
What we collect
- Account: your email address and a password (stored encrypted by our database provider).
- If you post a debt: first name, city, debt type, amount and story (public once verified), plus the creditor name, account number, payoff amount, payment method, a statement and a photo ID (private).
- If you pay a debt: your pledge, the confirmation number you enter, and any receipt you upload.
- Problem reports you send.
We do not collect payment card or bank details. Payments happen between the donor and the creditor.
Who sees what
- Everyone: verified listings (first name, city, debt type, amount, story) and whether a debt is open, being paid or paid.
- Verifiers: your submission, documents, email address, payment confirmations and problem reports, so they can verify debts and follow up.
- One approved donor: the creditor name, account number, payoff amount and payment method for the debt they are paying.
- The poster: the donor's payment confirmation for their debt.
We do not sell, rent or share your information with advertisers or anyone else, and we earn no money from it.
How long we keep it
Creditor account details, statements, photo IDs and proof of service are deleted when a debt is confirmed paid in full or is not verified. The creditor's paid-in-full letter and the donor's payment confirmation are kept as the record that the debt was paid. You can ask us to delete your account and data at [contact email].
Service providers
We use Supabase (database, file storage and sign-in), Vercel (website hosting) and [email provider] (account emails). They process data only to run the service.
Security
Private documents are stored in access-controlled storage and are only viewable through links that expire after 5 minutes. Verifiers must sign in with two-factor authentication to see them. No system is perfectly secure.
Contact
[Operator legal name], [contact email].