Effective date: May 7, 2026

Privacy Policy

ScoreToClose — a credit-coaching platform operated by Tigh Gunderson.

Operator

ScoreToClose is a credit-coaching platform operated by Tigh Gunderson. References to "we," "us," or "our" in this Privacy Policy refer to Tigh Gunderson operating ScoreToClose. Mailing address: 7533 S Center View Ct, Ste R, West Jordan, UT 84084. Canonical website: https://scoretoclose.com.

Scope

This policy describes how we collect, use, disclose, and protect personal information of consumers who interact with ScoreToClose. The service is currently available to residents of Utah only. ScoreToClose is a self-service tool: we do not act as your agent in any dispute, do not transmit any letter or communication on your behalf, and do not share your personal information with credit bureaus, furnishers, or other third parties beyond the service providers and the referring realtor or solar representative (with your opt-in) described below. You alone send any letters generated through the service.

Categories of Personal Information We Collect

Depending on how you use ScoreToClose, we may collect: • Identifiers: name, email address, phone number (if you provide one), mailing address, and account login information. • Demographic / verification information: partial date of birth and the last four digits of your Social Security number, when you choose to provide them to auto-fill dispute correspondence. • Credit-report data you upload or enter, including tradelines, balances, payment history, inquiries, and public records. • Communications you send to us or that we send to you (email, in-app messages, support requests). • Usage data such as pages visited, features used, device and browser information, and IP address.

Sources of Information

We collect personal information directly from you when you create an account, complete forms, upload documents, or communicate with us. If you arrive through a real-estate professional's referral link, we receive that professional's referral code, but we collect your personal information from you, not from the realtor.

How We Use Personal Information

We use personal information to: • Provide the credit-coaching service, including reviewing the credit data you upload and helping you build an action plan. • Communicate with you about your account, your progress, and the service. • Share progress updates with the realtor or solar representative who referred you, only if you have given consent (see Partner Sharing below). • Operate, maintain, secure, and improve the service. • Comply with applicable law and respond to lawful requests.

We Do Not Sell or Share for Cross-Context Behavioral Advertising

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. We have not done so in the preceding 12 months.

Service Providers and Third Parties

We share personal information with vendors that operate the service on our behalf, under contracts that limit their use of the data. Current vendors include: • Supabase — database, authentication, and file storage. • Vercel — application hosting. • Resend — transactional email delivery. • Twilio or Telnyx — text-message delivery, only if you have agreed to receive texts. • Google (Gemini API) — AI provider used, when enabled, to draft dispute-letter language and coaching content. Inputs are processed solely to return a response and are not used to train models in our configuration. We may also disclose personal information when required by law, to protect rights and safety, or in connection with a corporate transaction.

Sensitive Personal Information

If you choose to provide the last four digits of your Social Security number, we store those four digits only — never the full number — mask them in the user interface, and restrict access to authorized advisors. Those four digits are protected by database access controls and by encryption at rest at the database layer; they are not encrypted at the field level, and we state that plainly rather than imply a control we do not have. An advisor cannot read them from a page: the value must be requested explicitly, with a stated reason, and every request is written to an access log recording the advisor's identity and the time. Requests are rate-limited to five per advisor per hour, and you can see your own access log in your account. Tamper-evident logging — where an entry cannot be altered after the fact — is not in place yet; it is on our security roadmap, and we will update this policy when it is.

Partner Sharing

Sharing your progress with the real-estate professional or solar representative who referred you is opt-in. You choose whether to authorize sharing during sign-up, and you can revoke that authorization at any time from your account settings. When sharing is active, the partner sees a limited dashboard view: your name and contact details, your current score and score progress, your stage, and key milestones. Partners do not see your uploaded credit reports, account numbers, full Social Security number, or message contents.

Retention

We retain personal information for the periods described below, except where a longer or shorter period is required by law: • Credit-report uploads: for the duration of active service plus 90 days. • Account-level information (name, email, settings): while your account is active. • Communications and support records: 3 years. You may request deletion of your account and associated data at any time. Some records may be retained as needed for legal, audit, or fraud-prevention purposes.

Your Privacy Choices

Regardless of where you live, ScoreToClose offers the following choices: • Right to know what personal information we hold about you. • Right to request correction of inaccurate information. • Right to request deletion of your information. • Right to limit the use of sensitive personal information to what is necessary to provide the service. • Right to opt out of marketing email at any time using the unsubscribe link or by emailing privacy@scoretoclose.com. To exercise any of these rights, use the in-app settings page or email privacy@scoretoclose.com. We will verify your request using your account credentials and respond within the timeframes required by applicable law.

Security

We use TLS to encrypt information in transit and encryption at rest for stored data. Database access is governed by row-level security policies designed to ensure each user can access only their own information. No system is perfectly secure, and we cannot guarantee absolute security.

Children

ScoreToClose is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please email privacy@scoretoclose.com and we will delete it.

Communications and TCPA

If you provide a phone number and check the box authorizing text contact, you consent to receive SMS text messages from ScoreToClose at the number provided. Consent is not a condition of using the service. Message and data rates may apply. You may revoke consent at any time by replying STOP to a text message or emailing privacy@scoretoclose.com.

Changes to This Policy

If we make material changes to this policy, we will notify you by email and through the application. The "Effective date" below indicates when the current version took effect.

Contact

Questions or requests can be sent to privacy@scoretoclose.com or to: ScoreToClose c/o Tigh Gunderson, 7533 S Center View Ct, Ste R, West Jordan, UT 84084.

Effective date: May 7, 2026