Privacy Policy

Quantyra Labs LLC · Effective September 28, 2026 · Last updated September 28, 2026

This Privacy Policy describes how Quantyra Labs LLC (“we”, “us”, or “our”) collects, uses, shares, and protects information on the Service (freecreditdispute.org). Quantyra Labs LLC is the sole operator and controller. Individual members and managers are not separate controllers.

If you later apply for a mortgage with a named lender or mortgage broker, that party’s own privacy notice (including any Gramm-Leach-Bliley notice) applies to the application file. This policy does not cover that file unless you uploaded it here.

1. Who we are

Quantyra Labs LLC
7901 4th St N, Ste 300, St. Petersburg, FL 33702
[email protected]

We are not Equifax, Experian, or TransUnion. We are not a consumer reporting agency. We do not pull your credit report.

2. Information we collect

2.1 You provide

Depending on the screens you complete, this can include:

• Account: name, email, password, mobile number, mailing street, city, state, ZIP.
• Identity used to fill letters: optional date of birth and Social Security number last four. We do not accept full Social Security numbers.
• Dispute file: creditor or furnisher names, account type, account number last four, balances, status, dispute reasons, free-text notes, target bureau or furnisher, round number, and outcomes you record.
• Debt planner: debt names, balances, rates, minimum payments, extra payment / surplus figures, and the strategy you selected.
• Optional mortgage-interest profile (only if you choose it): ZIP, purchase or refinance timeline, homeownership status, self-reported credit-score range, estimated loan amount, and a TCPA consent flag. The letter tool works without this profile.
• Communications and consents: support messages, consent timestamps, and the exact text of the consent you accepted.

You decide how much identity information to type. A letter that omits information a bureau requires may be rejected. Enter only the last four SSN digits. Never enter a full SSN in notes, support messages, or other fields.

2.2 We collect automatically

• device and browser type, IP address, approximate location derived from IP, pages viewed, referring URL, and timestamps;
• essential cookies needed to keep you logged in, protect against CSRF, and remember wizard state;
• server and security logs.

2.3 We collect from vendors acting for us

• Email delivery providers (to send one-time codes, password messages, and reminders you triggered).
• Apple Push Notification service and Firebase Cloud Messaging process device tokens and deliver generic account-update notifications if you enable them. Sensitive dispute content is retrieved only after sign-in.
• Hosting, CDN, and DNS providers that run the application.

We do not pull your credit report from Equifax, Experian, or TransUnion. Anything that looks like report data on the Service was typed or selected by you.

3. How we use information

We use information to:

• create and secure your account, including one-time-code verification;
• generate, store temporarily, and let you download PDFs you requested;
• remember dispute rounds, deadlines you asked us to track, and outcomes you entered;
• run the optional debt-payoff calculator;
• send transactional mail: verification codes, password resets, and follow-up reminders for rounds you started;
• detect abuse, false-identity use, and security incidents;
• comply with law and respond to lawful process;
• improve templates, addresses, and reliability;
• only if you give separate mortgage-contact consent: let our staff review your inquiry and contact you. This release does not automatically send inquiries to lenders;
• keep consent and security records as long as reasonably needed to defend a claim.

We do not use your Social Security number, date of birth, or account numbers to sell advertising. We do not sell consumer credit-file contents to data brokers.

4. How we share information

We share information only as follows:

• Service providers / processors acting on our instructions (hosting, email, push notifications, and backup).
• Quantyra Labs LLC administrators who need access to operate support, security, or (if you asked for help) to provision an account or a plan PDF.
• You, when you download a letter or plan and then mail it. Once you mail a letter, the bureau or furnisher has whatever you put in that envelope. That is your sending, not our disclosure.
• Professional advisors under confidentiality (counsel, accountants) when needed.
• Legal requirement: a valid subpoena, court order, or similar process; or to protect a person from imminent harm. Quantyra Labs LLC may object to a demand that is legally deficient.
• Corporate transaction: a merger, financing, or sale of the product, subject to this policy or a successor policy that is at least as protective for Social Security and dispute-file data.
• Mortgage inquiries: only our administrators review and export inquiries for which you gave separate contact consent. No automated lender integration is enabled. Dispute letters, dates of birth, SSN digits, and account numbers are excluded from that export.

We do not sell personal information as “sale” is commonly understood (money for a list). We also do not share personal information for cross-context behavioral advertising. If that ever changes, we will update this policy and offer any required opt-out.

Optional mortgage contact is not consideration for letter generation and is not a sale of your dispute file.

5. Social Security numbers and other sensitive data

SSN last-four digits, dates of birth, and account identifiers are treated as sensitive. Do not submit full Social Security numbers.

• We collect only SSN last-four digits. Historical full-SSN values are erased during the launch migration.
• Access is limited to the systems that generate your PDFs and to administrators who have a support or security reason.
• Letter content is available only to its owner and authorized administrators.
• We do not use SSN as a customer number in marketing systems.
• SSN is not included in optional mortgage-lead sharing.

If we discover unauthorized acquisition of a Social Security number, driver’s license number, or other data covered by the Florida Information Protection Act or another state breach law, we will notify you and regulators as those laws require. This is not a warranty that a breach cannot occur.

6. Cookies

• Essential cookies for login, CSRF protection, and wizard state. The Service will not work correctly if you block these.
• No third-party advertising cookies as of the effective date.

The public home page may use Cloudflare Web Analytics when configured. Account, verification, password-reset, and dispute pages exclude that analytics script. The native apps contain no advertising SDK.

7. Retention

We keep account and dispute-file data while the account is open. Confirmed in-app deletion immediately revokes sessions and removes live account records; deletion of stored PDFs is retried if storage is unavailable.

Typical targets (we may shorten these):

• verification codes: hours;
• generated letter PDFs: 72 hours after they are created, after which we stop serving them and delete them from storage. Deletion runs on a scheduled sweep, so the file is removed shortly after the window closes rather than at the exact minute. Your dispute record stays in your account, so the letter can be regenerated whenever you need it again. A letter you already downloaded is regenerated with its original date;
• server logs: up to 90 days unless an incident is open;
• closed accounts: live account data is erased on confirmed deletion. Backup copies expire within 35 days; deletion records must be reapplied before a backup is restored to service;
• minimal deletion records: a user identifier, email hash, and deletion time are retained to prevent restored backups from resurrecting deleted accounts. Account-linked consent records are deleted with the account.

You can delete your account from Settings in the web and native apps. See account deletion. You can also request help at [email protected] from the email on the account. We will need to verify it is you. Deleting the account does not retract letters you already mailed.

8. Your choices and rights

You may:

• access and update profile fields in Settings;
• download letters you generated;
• withdraw optional mortgage-contact consent by saving the mortgage inquiry with consent unchecked, or by emailing [email protected]. You can turn off reminder email and push separately in notification settings;
• request a copy or deletion of personal information we hold.

California, Colorado, and other state privacy laws. If a state consumer-privacy statute applies to you, you may have rights to know, delete, correct, and opt out of sale or targeted advertising. We do not sell personal information and do not run third-party ad pixels as of this date. Send requests to [email protected]. We will not discriminate against you for exercising a privacy right.

Do Not Track. The Service does not change behavior based on a DNT browser signal.

9. Children

The Service is for U.S. adults aged 18 or older managing their own information. We do not knowingly collect personal information from children. If you believe we have, email [email protected] and we will delete it.

10. Security

We use HTTPS, hashed passwords (Argon2id), access-controlled administration, and private document storage. No method of transmission or storage is perfectly secure. You should not email us an unencrypted full Social Security number.

11. International visitors

We process and store information in the United States. If you use the Service from another country, you understand that U.S. law applies to that processing.

12. Changes

We will post updates on this page and change the “Last updated” date. Material changes to how we use Social Security numbers or how we share dispute files will be called out on the Service.

13. Contact and complaints

Quantyra Labs LLC
Attn: Privacy, freecreditdispute.org
7901 4th St N, Ste 300, St. Petersburg, FL 33702
[email protected]

You may also complain to the Federal Trade Commission (ftc.gov) or to your state attorney general. Florida residents may contact the Florida Attorney General’s Office, Consumer Protection.

If you are a California resident, you may contact the California Privacy Protection Agency or the California Attorney General for information about the CCPA / CPRA.