Report Recon

Privacy Policy

Last updated: July 30, 2026

Report Recon (“we” or “us”) provides services that analyze credit reports you upload for potential Fair Credit Reporting Act (FCRA) issues, prepare bureau-specific dispute letters, and track dispute responses (the “Services”). This Privacy Policy describes how we collect, use, store, and protect information from users of the Services, and applies when you use our websites and online products or otherwise interact with us. We may periodically post changes to this Privacy Policy on this page by revising the date at the top. We encourage you to review it whenever you use the Services to stay informed about our practices and the choices available to you.

Information We Collect

Information You Provide to Us

When you use Report Recon the following data is collected directly from you:

  • Account data such as your name, email address, and password when you register, and your email address if you request a recovery link for a demo analysis.
  • Credit reports you upload as PDF files. Credit reports contain sensitive personal and financial data — identifiers, addresses, account numbers, balances, and payment history — and we treat the entire document as personal information.
  • Profile data you provide during onboarding, such as your legal name and mailing address, used to prepare dispute letters in your name.
  • Content you create in the Services, such as dispute selections, letter edits, and mailed-letter dates you record for response tracking.
  • Billing details when you subscribe. Card numbers are entered into fields hosted by our payment processor and are tokenized by the processor directly — your full card number never touches our servers.
  • Any feedback, support requests, or other communications you send us.

Information We Collect Automatically

We use product analytics to understand page and feature usage. When you are signed in, analytics events can be associated with your account identifier. We also collect standard server and infrastructure logs (browser type, access times, pages viewed, IP address), production error reports (configured to exclude personal identifiers, without tracing), and signals from the bot-protection services that guard sign-up and upload against abuse, which are governed by their providers’ own privacy policies.

Information From Other Sources

We do not purchase data about you, pull your credit report from bureaus or resellers, or enrich your profile from data brokers or social networks. The only credit data we process is what you upload yourself.

How We Use Your Information

Primarily, we use your personal information to provide the Services:

  • Analyze your uploaded report for potential FCRA violations and arbitration-relevant items. Automated analysis uses AI models; personal identifiers are redacted by our systems before report content is sent to a model.
  • Generate and save dispute letters in your name and track bureau response windows.
  • Create and secure your account, verify your identity at sign-in, and process payments.
  • Send transactional messages — email verification, password resets, demo recovery links, and the “email me when my analysis finishes” notification when you request it.
  • Provide customer support, troubleshoot problems, and respond to your requests.
  • Measure, analyze, and improve the Services.
  • Prevent and investigate fraud, abuse, and violations of our Terms of Service, and protect the rights and safety of Report Recon and others.

We do not use your personal information for behavioral advertising, and we do not deliver third-party promotional offers based on the contents of your credit report.

How We Store Your Data

All personal data is stored in encrypted form with industry-standard security controls, and we take reasonable measures designed to protect it from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. Access is limited to systems and personnel with a business reason to have it. We retain your data only as long as it is necessary to provide the service or as required by law: demo uploads made without an account are retained for up to 24 hours and then deleted automatically, and when you delete your account, deletion remains reversible for a 7-day grace period before your data is permanently removed from our systems.

Sharing of Personal Information

We do not sell, trade, or share your personal data with third parties for marketing purposes. We disclose information only as follows:

  • With service providers that process data on our behalf to operate the Services — hosting and infrastructure, payment processing, product analytics, error monitoring, and abuse prevention — under contractual obligations that protect your privacy.
  • To comply with an applicable law, regulation, or legal process, or to protect against fraud, unauthorized transactions, or threats to the rights, property, and safety of Report Recon or others.
  • In connection with a proposed or actual sale, merger, or transfer of all or a portion of our business, in which case this Privacy Policy continues to apply to your information.
  • With your consent, when you direct us to share information in a particular way.

We may also share aggregated or de-identified information that cannot reasonably be used to identify you.

Cookies and Local Storage

We use localStorage for draft autosave and theme preference persistence, and session storage for short-lived state such as checkout hand-offs. Analytics may use browser storage, including local storage and cookies. No advertising identifiers are placed on your device. Most browsers let you remove cookies and clear site storage; doing so may sign you out or reset your preferences.

Analytics storage is opt-in: the analytics library is not loaded and no analytics cookie is written until you allow it, and you can change or withdraw that choice at any time. Allowing analytics also turns on session recording, which masks all text and blocks images and other media; withdrawing stops any recording already in progress.

Transfer of Information to the United States

Report Recon is based in the United States and the information we collect is governed by U.S. law. By using the Services or otherwise providing information to us, you consent to the processing and transfer of information in and to the U.S., where you may not have the same rights as you do under local law.

Your Rights and Choices

You have the right to access, correct, and delete your personal data at any time. You can update account details and delete your account yourself from Settings, and you can opt out of optional notifications wherever they are offered; we will still send transactional messages about your account. If you are a California resident, you may exercise additional rights under the CCPA. If you are located in the European Economic Area, GDPR rights apply. To exercise any of these rights, contact us at the address below.

Contact Us

If you have questions about this privacy policy or your personal data, please contact us at privacy@reportrecon.ai.