Privacy Policy

Draft — under attorney review. Last updated September 29, 2026.

This Privacy Policy explains what information ClaroCredit (“ClaroCredit”, “we”, “us”; the company’s legal name and address will be added here before this policy is final) collects, how we use it, who we share it with, how we protect it and how long we keep it. It covers the ClaroCredit website at clarocredit.com, the ClaroCredit application at app.clarocredit.com, the e-mail address cases@clarocredit.com, and every related service we provide (together, the “Service”). It is part of our Terms of Service.

ClaroCredit is built for consumer debts only — debts for personal, family or household purposes — not for business or commercial credit.

1. Whose information, and who is in charge of it

ClaroCredit serves consumer-protection law firms. Three kinds of information pass through the Service, and the difference matters:

Information about the people who use ClaroCredit — the attorneys and staff of a law firm who have an account. We decide how this information is used, as this policy describes.
Information about consumers that a law firm puts in — the people whose credit reports a law firm uploads or whose details it enters, usually the firm’s clients or prospective clients. The law firm decides what to put in and why, and we handle that information on the firm’s behalf and under its instructions. If your information is in a report a law firm uploaded, please contact that firm first; we will help it answer you.
Information someone sends us directly — a credit report or a message e-mailed to cases@clarocredit.com. Until a law firm takes up the matter, ClaroCredit decides how that information is handled, and you can reach us directly at info@clarocredit.com.

2. What we collect

When you have an account

your name, your work e-mail address, your law firm’s name and your role in the firm;
if your firm adds them: your bar numbers, whether you work in-house or as outside counsel, and the outside firm you belong to;
your password, which we store only as a one-way scrambled value (a hash) that cannot be turned back into the password;
when you were invited and when you last signed in;
the work you do in the Service — the cases assigned to you, their outcomes, and the goals, statistics and rankings your firm keeps about them; and
a record of important account events, such as sign-ins, invitations, approvals and password changes.

When a law firm puts in information about a consumer

a credit report and everything in it — for example a consumer’s name, addresses, date of birth, their Social Security number (usually in part, as a report shows it), credit accounts and their history, inquiries and public records;
the details the firm enters about the consumer: name, e-mail address, phone number, address, date of birth and Social Security number — in full when the firm enters it;
the notes, findings and case details the firm adds; and
records of outside law firms the firm works with and their contact people.

When someone e-mails cases@clarocredit.com

the sender’s e-mail address and name, the subject, the date and the files attached — usually a credit report, with everything listed above in it. A report sent this way is read and opened as a case, which an attorney then reviews.

When you use the website or the application

technical information such as your device’s IP address, your browser type, the pages you open and the time you open them, which our systems record to keep the Service secure and working; and
a few small items kept by your browser: a sign-in cookie that keeps you signed in, your choice between the light and the dark look, and — only until you close the tab — the e-mail address you just typed, so the next screen can show it. We do not use advertising or tracking cookies.

3. How we use it

to provide the Service: read credit reports, organize what they contain, flag entries for attorney review, keep track of cases, and send account e-mails such as confirmations, approvals and password resets;
to keep the Service and your information secure, and to detect and stop misuse;
to answer questions and requests from law firms and their users;
to improve the Service, using information about how the Service is used rather than the contents of anyone’s credit report; and
to meet our legal obligations and to enforce our Terms of Service.

We do not sell personal information, we do not use consumer information for advertising, and we do not decide anything about a consumer’s credit, insurance, employment or housing.

4. Automated analysis

Parts of the reading and analysis are automated, including by artificial-intelligence and decision-support services that our service providers run for us. Their results are flags for a law firm’s attorneys to review; they are never a legal conclusion, and no one is told they have a claim without an attorney’s decision.

Service providers that help us run the Service — cloud hosting and storage, database hosting, e-mail delivery, and document reading, analysis and decision-support services. They may use the information only to provide their services to us, and we require them to protect it. Some of them may keep what they process for a short time, for example to prevent abuse, as their own terms allow.
The law firm itself. Information a firm puts in is available to that firm’s own users, according to the roles the firm gives them. It is not shown to other law firms, unless the firm shares it — for example with outside counsel it assigns a case to.
When the law requires it, for example to answer a valid court order, or when it is needed to protect the rights, property or safety of ClaroCredit, our customers or others.
If ClaroCredit is reorganized, merged or sold, the information may pass to the new owner, who must keep protecting it as this policy promises.

6. How we protect it

Information travels over encrypted connections and is stored encrypted.
Social Security numbers get an extra layer of encryption, with keys held in a dedicated key-management service, and screens show only the last four digits.
Access is limited by role: each firm sees only its own information, and inside a firm each person sees what their role allows.
Important actions are recorded in an activity log that we add to but never rewrite.
Our team can reach the information only when it is needed to run or support the Service.

No system is perfectly secure. If a security incident affects your information, we will tell the affected law firms, and the people whose information was involved when the law requires it, without undue delay.

7. How long we keep it

We keep account information while the account is open, and for a short time after it closes so we can answer questions and meet legal obligations.
We keep information a law firm puts in while the firm’s account is active, or until the firm asks us to delete it.
When a firm asks us to delete information, or closes its account, we delete it, except records the law requires us to keep. Copies in backups are overwritten on their normal schedule.
The activity log is kept for security and accountability. How long it is kept will be set out here before this policy is final.

8. Your choices and rights

Account holders can ask us for a copy of their account information, or to correct or delete it, by writing to info@clarocredit.com, or ask their firm’s administrator.
Consumers whose information is in a report a law firm uploaded should contact that firm, which decides about that information; we will help the firm respond. For a report you e-mailed to us yourself, write to us directly.
Depending on where you live, the law may give you other rights, such as asking what information we hold about you. Write to us and we will answer as the law requires. We will never treat you differently for asking.

9. Do Not Track

We do not track you across other websites, so we treat every visit the same whether or not your browser sends a “Do Not Track” signal.

10. Where the information is kept

We store the information in the United States.

11. Children

The Service is for law firms and is not meant for anyone under 18. We do not knowingly collect information from children, except as it may appear in a document a law firm puts in or someone sends us.

12. Changes to this policy

We may update this policy. If a change is significant, we will tell law firms by e-mail or in the Service at least 30 days before it takes effect, and we will change the date at the top of this page.

13. Contact

Questions or requests about privacy: info@clarocredit.com. A postal address will be added here before this policy is final.