Effective date: May 7, 2026
Security & Trust
How we protect your information at ScoreToClose, and what we’re still working on. For the full data-handling story, see our Privacy Policy.
Operator
ScoreToClose is operated by Tigh Gunderson. Read more in our Privacy Policy.
What we collect (and what we don't)
We collect only what we need to run a credit-coaching service: • Account identifiers: name, email, phone (if you provide one). • Credit-report data you upload or enter. • The last four digits of your Social Security number, only if you choose to provide them. • In-app messages and support communications. We do NOT collect your full Social Security number. We do NOT pull credit reports on your behalf. We do NOT have access to your bank accounts, financial logins, or payment cards. For the full categories list, see our Privacy Policy.
How we protect your information
Encryption: TLS in transit; encryption at rest at the database layer. Access controls: every database table is governed by row-level security policies. A user can only read or write rows they're authorized to see. Advisor-level access is gated by an explicit role on the user's profile. SSN handling: only the last four digits are stored. The value is masked by default in every interface. Each reveal is logged with a reason, auto-clears from the screen after 60 seconds, and is rate-limited to 5 reveals per hour per advisor. Clients can view their own SSN access log under Preferences. Audit logs: every sensitive action — SSN reveals, account deletions, dispute-letter generation, score updates — is recorded. Vendor list: Supabase (database, auth, storage), Vercel (hosting), Resend (transactional email), Twilio (SMS), Google (Gemini API, only when AI letter drafts are enabled — inputs are not used to train models in our configuration).
What we don't do
• We don't sell your data. • We don't share your information for cross-context behavioral advertising. • We don't act as your agent in any dispute. You alone send any letter or communication generated through the service. • We don't charge any fees.
Your rights
You can access, correct, export, or delete your data at any time. Manage account settings, sharing, and notification preferences from your Preferences page. Read more in our Privacy Policy and Your Privacy Choices.
Reporting concerns
If you believe you've found a security issue or want to report a vulnerability, email security@scoretoclose.com. We take every report seriously and will respond promptly.
Honest disclaimers
ScoreToClose has not yet undergone third-party SOC 2 certification or penetration testing. We are committed to following industry security best practices and to commissioning independent audits as the service grows. We will update this page when those reviews are complete. No system is perfectly secure. We work to follow best practices but cannot guarantee absolute security.
Effective date: May 7, 2026