Is my data safe with CreditRefresh?

Yes. Bureau pulls run as soft inquiries that don't affect your score. Credentials are encrypted in transit and at rest. Data is used only for the dispute work you signed up for — finding errors, drafting letters, and tracking bureau responses. It isn't sold to advertisers, shared with marketers, or used to train models for other companies. You can cancel any time and access ends.

What data CreditRefresh handles

To do its job, the platform needs to see what the bureaus see. That means access to your credit reports from Equifax, Experian, and TransUnion, plus the personal information needed to authenticate those pulls — name, address, date of birth, Social Security number, and the answers to bureau identity questions.

We also keep records of the dispute letters generated, the items disputed, and the bureau responses. That history is what makes second rounds, Method of Verification requests, and CFPB escalations possible later if needed.

How bureau pulls work

The pulls CreditRefresh runs on your reports are soft inquiries. Soft inquiries don't affect your credit score and don't appear to lenders reviewing your file. This is the same category of pull used when you check your own credit, when an employer runs a background check, or when a company shows you a pre-approval offer.

You can run CreditRefresh's scans without worrying about score drops from the pulls themselves. The work the platform does on your reports is what's designed to move the score over time, not the act of looking at them.

How credentials are stored

The credentials and answers used to authenticate bureau pulls are encrypted at rest and in transit. They're used to access your reports for the purposes you signed up for — finding errors, drafting letters, tracking responses — and nothing else.

CreditRefresh uses Array as its bureau data provider. Array is a regulated credit data infrastructure company that handles authentication and report retrieval. The connection is read-only: the platform can pull reports, but it can't open accounts, change anything on your reports, or take actions outside the dispute process you approve.

What CreditRefresh does not do with your data

A short list, because trust is built on specifics:

• We don't sell your data to advertisers or marketers.
• We don't share your reports with third parties outside the bureau and furnisher communications required to run a dispute.
• We don't post anything to your credit report. Only the bureaus can change what's on your report, and only in response to verified information from data furnishers.
• We don't use your data to train AI models for other companies. The AI's job is to analyze your reports inside the platform.

What you control

You can cancel your account at any time. Cancellation stops new pulls and ends the platform's ongoing access to your bureau data. Records of past disputes and outcomes may be retained for compliance and record-keeping reasons required by federal law and standard business practice.

If you want to review what we hold on you, or have questions about a specific piece of data, email support@creditrefresh.ai. Requests get reviewed by a human, not the AI agent.

When to be extra careful

If you're dealing with active identity theft, a fraud investigation, or a security breach on accounts that affect your credit, please reach support@creditrefresh.ai before doing anything else. There are specific federal protections that apply in those situations — including FTC identity theft reports and bureau-level fraud alerts — and we'd rather route you through the right channel than have you guess.