SECURITY & PRIVACYHere is exactly how we protect what you upload — the engineering, the access controls, the deletion rules, and the honest limits.
Every uploaded document — credit reports, ID files, USPS receipts, bureau responses — is encrypted before it reaches storage. Sensitive fields (SSN, DOB, full account numbers) get an additional cell-level cipher.
We do not sell, rent, or share your personal data. We never train AI models on the contents of your credit reports or vault documents. Zero third-party advertising pixels on authenticated pages.
One click in your dashboard purges every document, letter draft, and dispute record. We honor deletion requests within 24 hours and confirm by email. Backups roll off within 30 days.
Engineers do not have routine access to user data. Production database access is logged, audited, and gated behind hardware-key MFA. No support agent can read your vault.
No full SSN required for the generator. No hard credit pull, ever. No bank account linking. The free tier works without an account at all.
We are not a law firm. We are not a CROA credit repair organization. We do not act on your behalf with bureaus. You sign and send every letter — this preserves your rights and keeps you in control.
Data handling, at a glance
Compliance frameworks
FCRA
Fair Credit Reporting Act — every dispute path
FDCPA
Fair Debt Collection Practices Act — collector defenses
FACTA
Fair and Accurate Credit Transactions Act — ID theft workflow
CROA
Credit Repair Organizations Act — we are not one, by design
HIPAA
Medical-collection privacy override, aware and applied
GLBA
Gramm-Leach-Bliley Safeguards Rule alignment
Security researchers are welcome. Email security@justdisputeit.com with a description of the issue and reproduction steps. We respond within 48 hours and credit researchers in our acknowledgements.
This page describes our commitments and engineering practices. It is not a substitute for our binding Privacy Policy and Terms of Service.