SETTLED / PRIVACY POLICY

Privacy Policy

How SETTLED collects, uses, protects, and communicates about your data — including SMS notifications, document handling, and third-party integrations.

Last updated: May 22, 2026
1. What We Collect

Account information: Your email address. This is the only personal identifier required to create an account on SETTLED.

Documents you upload: Credit reports, collection notices, and other financial documents you submit for analysis. These may contain sensitive personal and financial information including your name, address, Social Security number suffix, account numbers, and credit history.

Generated content: The letters, analysis results, and dispute documentation produced from your uploaded documents.

Payment information: Processed by Stripe. SETTLED does not store your card number, CVV, or full payment details. We receive and store a Stripe customer ID, payment status, and order metadata only.

Communication data: Your phone number and email address when provided for SMS alerts and transactional notifications.

Usage data: Server logs including IP address, timestamps, and pages visited. Used for security and abuse prevention only.

2. SMS Communications and Consent

SETTLED sends SMS notifications to users who explicitly opt in through our website forms or onboarding flow. By providing your phone number and checking the opt-in box, you consent to receive the following types of messages:

• Case status updates and investigation milestone alerts • USPS Certified Mail tracking numbers and delivery confirmations • Dispute submission confirmations and document delivery notices • Federal 30-day investigation window countdown notifications • Platform operational alerts

Message frequency: Varies by case activity. Typically 2–10 messages per case lifecycle.

Message and data rates may apply depending on your mobile carrier plan.

To opt out at any time: Reply STOP to any SMS message. You will receive one confirmation message and then no further texts.

To get help: Reply HELP to any SMS message or email intake@settled.support.

SETTLED does not use your phone number for marketing or sell it to third parties. Your number is used solely for transactional case notifications.

3. How We Use Your Data

We use your data only to provide the SETTLED service:

• To analyze your uploaded documents and generate dispute letters • To send magic link sign-in emails and transactional emails • To send SMS case notifications to opted-in users • To process payments through Stripe • To send letters via USPS Certified Mail through Lob • To provide customer support

We do not use your data to train AI models. We do not sell your data. We do not use your financial documents for any purpose other than generating the letters you requested.

4. Data Storage and Security

Documents you upload are stored in Vercel Blob, a US-based object storage service. Analysis results and account data are stored in a Neon PostgreSQL database (US-based). All data in transit is encrypted via TLS. All data at rest is encrypted by the storage provider.

Session authentication uses HttpOnly, Secure, SameSite=Lax cookies containing signed JWT tokens. We do not use third-party tracking cookies or advertising pixels beyond those disclosed in Section 5.

5. Analytics and Tracking

SETTLED uses the following analytics tools to understand platform usage:

Google Analytics 4 (G-FJ5EZFMD8M): Anonymized session data, page views, and user flows. No personally identifiable information is sent to Google Analytics.

Meta Pixel (921598050909803): Conversion tracking for advertising campaigns. Fires on key events (sign-up, purchase). You can opt out via your Meta account settings.

TikTok Pixel: Conversion tracking for TikTok advertising campaigns.

These tools collect anonymized behavioral data only. No credit report contents, dispute letters, or financial documents are ever sent to advertising networks.

6. Third-Party Services

SETTLED integrates with the following third-party services:

Anthropic (claude.ai): Your uploaded document text is sent to Anthropic's API for analysis and letter generation. Anthropic's privacy policy governs their handling of API inputs. We do not send your email address, payment information, or phone number to Anthropic.

Stripe: Handles all payment processing. Your card information is collected and stored by Stripe, not SETTLED.

Resend: Delivers transactional emails (sign-in links, letter delivery, case notifications).

Twilio: Delivers SMS case notifications to opted-in users. Your phone number is shared with Twilio solely for message delivery.

Lob: Handles USPS Certified Mail. Your mailing addresses are shared with Lob when you use the certified mail feature.

Vercel: Hosts the SETTLED platform and stores uploaded files. US-based.

Neon: Hosts the database. US-based.

We do not integrate with advertising networks, social media trackers, or data brokers beyond the analytics tools disclosed above.

7. Data Retention

Account data and letters: Retained as long as your account is active. You can request deletion at any time.

Uploaded documents: Retained for 90 days after upload, then permanently deleted from storage. Extracted text may be retained in analysis records.

SMS opt-in records: Retained for a minimum of 4 years to comply with carrier compliance requirements.

Payment records: Retained for 7 years to comply with financial recordkeeping requirements.

To request deletion of your account and associated data, email intake@settled.support with the subject "Data Deletion Request." We will process your request within 30 days.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you • Correct inaccurate personal data • Delete your personal data ("right to be forgotten") • Export your data in a portable format • Opt out of SMS communications at any time by replying STOP • Opt out of any data processing beyond what is strictly necessary to provide the service

To exercise any of these rights, email intake@settled.support. We will respond within 30 days. We do not discriminate against users who exercise privacy rights.

9. California Residents (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) including the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. SETTLED does not sell personal information. To exercise your CCPA rights, contact intake@settled.support.

10. Children

SETTLED is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us immediately at intake@settled.support.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users by email of material changes. Continued use of SETTLED after the effective date constitutes acceptance of the updated policy.

12. Contact

Privacy questions, data requests, and SMS opt-out assistance:

intake@settled.support

SETTLED · Document Preparation Platform · settled.support