Privacy Policy

1. Who we are

That.You Credit ("we", "us", "our") operates the website at that.you (the "Site"). We provide free credit education, tools, and guides to help consumers understand and improve their credit. We are not a credit repair organization, a law firm, or a financial institution.

2. Data we collect

We collect information in the following ways:

Information you provide directly

Account registration: When you create an account or sign in with Google, we receive your name, email address, and profile photo from Google.
Profile information: You may optionally provide your phone number, date of birth, city, state, ZIP code, credit score range, employment status, income range, credit history details (collections, late payments, number of accounts), and your primary financial goal. This information is used solely to personalize your dashboard and recommendations.
Saved tool results: If you save the output of a calculator or letter generator, we store that data linked to your account.
Messages and feedback: Any message you send through our contact or feedback system.

Information collected automatically

Log data: Your IP address, browser type, operating system, referring URL, pages visited, and time spent on pages. This is standard server log data.
Cookies and session data: We use cookies to keep you logged in and to maintain your session. See our Cookie Policy for details.
Analytics: We use privacy-respecting analytics to understand which content is most useful. This data is aggregated and not linked to individual users.

Information we do NOT collect

We do not collect your Social Security Number.
We do not collect payment card information — the Site is completely free.
We do not pull your credit report or score from any bureau.

3. How we use your information

We use the information we collect for the following purposes:

To provide the Site: Authenticate your account, display your dashboard, save your tools and letters, and personalize your experience.
To improve content: Understand which guides and tools are most useful so we can improve them.
To respond to you: Reply to feedback messages and support requests.
To send account notifications: Important updates about your account or material changes to our policies. We do not send marketing emails unless you explicitly opt in.
To maintain security: Detect and prevent fraud, abuse, and unauthorized access.

We do not sell your personal information. We do not share your data with advertisers, data brokers, or marketing platforms.

We may share limited data only in these circumstances:

Service providers: We use third-party services to operate the Site, including hosting, email delivery, and analytics. These providers process data only on our behalf and under strict confidentiality agreements.
Legal compliance: We may disclose data if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the safety of any person or to address fraud or security issues.
Business transfer: If That.You Credit is acquired or merged with another company, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

5. Cookies and tracking

We use essential cookies to keep you signed in and protect forms. We may use analytics cookies to understand how the Site is used in aggregate. We do not use advertising cookies or cross-site tracking cookies. See our full Cookie Policy.

6. Data security

We take reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), secure password handling, and access controls limiting who on our team can access user data. However, no internet transmission is 100% secure. We encourage you to use a strong, unique password and to log out when using shared devices.

7. How long we keep data

Active accounts: We retain your account data and saved content for as long as your account remains active.
Deleted accounts: When you delete your account, we delete your profile, saved tools, and messages. Server logs and aggregated analytics data may persist for up to 90 days.
Legal holds: We may retain certain data longer if required by law or to resolve a dispute.

8. Your rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the data we hold about you.
Correction: Update or correct inaccurate information in your account settings.
Deletion: Delete your account and all associated data directly from your account settings at any time.
Portability: Request your data in a portable format.
Opt-out: Opt out of any non-essential communications at any time.

California residents may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to non-discrimination for exercising your rights. To exercise any of these rights, contact us.

9. Children's privacy

This Site is not directed to children under the age of 13. We do not knowingly collect personal information from anyone under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through a notice on the Site. Your continued use of the Site after any change constitutes your acceptance of the updated policy.

11. Contact us

If you have questions, concerns, or requests related to this Privacy Policy, please contact us. We will respond within 10 business days.