Privacy Policy

Last updated: July 29, 2026

This Privacy Policy explains how Credara, Inc. ("Credara," "we," "us") collects, uses, shares, and protects information when you use the Credara platform, including our member dashboard, credit-union underwriter tools, and any third-party account connections (such as Google Sign-In or a connected income platform).

Credara produces a credit score (the "Credara Score") used by credit unions and other lenders to evaluate creditworthiness. Because of this, Credara may act as a consumer reporting agency under the Fair Credit Reporting Act ("FCRA"), and certain rights described below (see "Your FCRA Rights") apply specifically for that reason.

1. Information We Collect

We collect the following categories of information:

Account information — name, email address, and profile identifiers provided when you sign in with Google.
Member profile data — income history, payment behavior, cash-flow figures, platform tenure, and related financial data submitted by you, your credit union, or a connected income platform, used to calculate your Credara Score.
Connected platform data — if you choose to connect a third-party account (for example, YouTube), we receive the data you authorize during that connection's consent screen — currently, estimated revenue figures reported by that platform's own analytics — via an OAuth token you can revoke at any time.
Usage and device data — log data, IP address, browser type, and interactions with our website, collected automatically for security and reliability purposes.

2. How We Use Information

To calculate and explain your Credara Score.
To provide the member dashboard and the credit-union underwriter dashboard.
To generate FCRA-compliant adverse action notices when a score contributes to a credit decision.
To maintain the security, integrity, and audit trail of our scoring pipeline.
To comply with legal, regulatory, and examiner requirements.
To communicate with you about your account or our services.

3. How We Share Information

Credit unions and lenders you or your data have been submitted to, so they can make underwriting decisions.
Service providers who process data on our behalf, including Google Cloud / Firebase (hosting, authentication, and database infrastructure) and Google OAuth (for sign-in and platform connections).
Legal and regulatory disclosures where required by law, subpoena, or examiner request.

We do not sell your personal information.

4. Data Retention

We retain member profile and scoring data for as long as needed to provide the service, meet regulatory recordkeeping obligations (including FCRA requirements), and resolve disputes. You may request deletion of your account data as described in Section 6, subject to any retention we are legally required to maintain.

5. Security

We restrict access to stored data to authorized systems and personnel, encrypt data in transit, and store OAuth credentials and other secrets using access-controlled secret storage rather than in application code or client-accessible databases. No system is completely secure, and we cannot guarantee absolute security.

6. Your Rights and Choices

You may request access to, correction of, or deletion of your personal information by contacting us at the email below.
You may revoke a connected platform's access at any time from that platform's own account permissions page (for Google/YouTube: myaccount.google.com/permissions), or by contacting us to disconnect it on your behalf.
Residents of certain states (e.g., California, Colorado, Virginia) may have additional rights under applicable state privacy law; contact us to exercise them.

7. Your FCRA Rights

Because your Credara Score may be used in a credit decision, you have the right to:

Obtain a copy of the information Credara used to generate your score.
Dispute information you believe is inaccurate or incomplete, and have it reinvestigated.
Receive a clear, specific explanation of the reasons behind an adverse credit decision that relied on your Credara Score.

8. Children's Privacy

Credara is not directed to individuals under 18, and we do not knowingly collect information from them.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date.

10. Contact Us

Questions about this policy or requests regarding your data can be sent to:
ashtonliu88@gmail.com
Credara, Inc. — kaustubhjosyula@gmail.com