Privacy Policy

Last Updated: January 2025

1. Introduction

AdvisorHub LLC ("we," "us," "our") operates AdvisorHub.ai, a credit analysis and funding readiness assessment platform. We are committed to protecting your privacy and handling your personal and financial information with the highest level of security and transparency.

This Privacy Policy explains how we collect, use, store, and protect your information, including sensitive credit report data. By using our Service, you consent to the practices described in this policy.

Contact Information:

AdvisorHub LLC

1209 Mountain Road Pl NE, Ste R

Albuquerque, NM 87110

Email: support@advisorhub.ai

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

  • Account Information: Name, email address, phone number, business name (for business accounts)
  • Authentication Data: Login credentials, OAuth tokens (Google authentication)
  • Billing Information: Payment method details, billing address, transaction history
  • Profile Data: User preferences, account settings, subscription status

2.2 Credit Report Data

When you upload credit reports for analysis, we collect and process:

  • Credit Scores: FICO scores, VantageScore, and other credit scoring metrics
  • Credit Accounts: Account types, balances, payment history, credit limits
  • Personal Identifiers: Names, addresses, Social Security Numbers (if present in reports)
  • Credit Inquiries: Hard and soft inquiries from lenders and creditors
  • Public Records: Bankruptcies, judgments, liens, collections
  • Employment Information: Current and past employers (if included in credit report)
  • Financial Data: Income information, debt-to-income ratios, account utilization

2.3 Credit Data API Information (Future)

When we implement credit data API integrations, we will collect:

  • Real-time Credit Data: Live credit scores, account balances, payment updates
  • Credit Monitoring Data: New inquiries, account openings, score changes
  • Credential Information: API access tokens, authentication credentials
  • Bureau Relationships: Connections to Experian, Equifax, TransUnion, or similar services

2.4 Usage and Technical Data

  • Device Information: IP address, browser type, operating system, device identifiers
  • Usage Analytics: Pages visited, features used, time spent on platform
  • Performance Data: Error logs, crash reports, API response times
  • Cookies and Tracking: Session cookies, analytics cookies, preference cookies

2.5 Business and Whitelabel Data

  • Business Information: Company name, EIN, business address
  • Branding Assets: Logos, color schemes, custom domain names
  • Client Data: Information about end-users served by business accounts
  • Usage Metrics: Number of analyses run, credit consumption, API usage

3. How We Use Your Information

3.1 Primary Service Purposes

  • Credit Analysis: Process uploaded credit reports using AI to generate funding readiness assessments
  • Report Generation: Create comprehensive analysis reports with recommendations
  • Score Calculation: Calculate funding readiness scores based on credit data
  • Trend Analysis: Track changes in credit profile over time (future feature)

3.2 Account and Service Management

  • Create and maintain user accounts
  • Process payments and manage subscriptions
  • Provide customer support and respond to inquiries
  • Send service notifications and account updates
  • Enforce Terms and Conditions and prevent fraud

3.3 Product Improvement

  • Improve AI algorithms and analysis accuracy (using anonymized data)
  • Develop new features and functionality
  • Conduct research and analytics to enhance user experience
  • Test and optimize platform performance

3.4 Legal and Compliance

  • Comply with applicable laws and regulations (including FCRA, GLBA, state privacy laws)
  • Respond to legal requests, subpoenas, and court orders
  • Protect our rights, property, and safety
  • Detect and prevent fraud, security threats, and illegal activity

4. Data Storage and Security

4.1 Security Measures

We implement industry-leading security measures to protect your sensitive financial information:

  • Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256)
  • Database Security: Hosted on secure, SOC 2 compliant infrastructure (Supabase)
  • Access Controls: Role-based access, multi-factor authentication, audit logging
  • File Storage: Credit reports stored in secure cloud storage with restricted access
  • Regular Audits: Security assessments, penetration testing, vulnerability scanning
  • Employee Training: Staff trained on data protection and security best practices

4.2 Data Retention

  • Active Accounts: Data retained as long as your account is active
  • Uploaded Reports: Stored until you delete them or close your account
  • Analysis Reports: Retained for 7 years for business accounts, 3 years for consumer accounts
  • Financial Records: Retained for 7 years to comply with tax and accounting regulations
  • Deleted Accounts: Personal data deleted within 90 days of account closure (except as required by law)
  • Backup Systems: Backups retained for 30 days and securely destroyed

4.3 Data Location

Your data is stored on servers located in the United States. We do not transfer personal data outside the United States except when using third-party service providers with appropriate safeguards in place.

5. Information Sharing and Disclosure

5.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information or credit data to third parties for marketing purposes. Your financial information is never shared with data brokers or advertisers.

5.2 Service Providers

We share data with trusted service providers who help us operate the platform:

  • Database Hosting: Supabase (authentication, database, storage)
  • Payment Processing: Stripe (payment processing, subscription management)
  • AI Services: OpenAI/Anthropic (credit report analysis - data is not used for model training)
  • Cloud Infrastructure: Google Cloud Platform, Vercel (hosting, file storage)
  • Analytics: Usage analytics providers (anonymized data only)
  • Email Services: Transactional email providers for account notifications

All service providers are bound by strict confidentiality agreements and are only authorized to use your data as necessary to provide their services to us.

5.3 Business Transfers

If AdvisorHub LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email and/or prominent notice on our platform before your information is transferred and becomes subject to a different privacy policy.

5.4 Legal Requirements

We may disclose your information when required by law or to:

  • Comply with legal obligations, court orders, or subpoenas
  • Enforce our Terms and Conditions
  • Protect our rights, property, or safety
  • Investigate fraud, security issues, or violations
  • Comply with credit reporting regulations and financial crimes investigations

5.5 Business Account Sharing

For business and whitelabel accounts, analysis reports may be shared with the business entity that created your account or requested the analysis on your behalf. This is done only with appropriate consent and authorization.

6. Your Privacy Rights

6.1 Access and Control

You have the right to:

  • Access: Request a copy of your personal data and credit information we have stored
  • Correction: Update or correct inaccurate personal information
  • Deletion: Request deletion of your account and associated data
  • Export: Download your analysis reports and data in portable formats
  • Restrict Processing: Limit how we use your data in certain circumstances
  • Object: Object to processing of your data for specific purposes

6.2 State-Specific Rights

California Residents (CCPA/CPRA):

  • Right to know what personal information is collected, used, and shared
  • Right to delete personal information
  • Right to opt-out of the sale of personal information (we do not sell data)
  • Right to non-discrimination for exercising privacy rights
  • Right to correct inaccurate personal information
  • Right to limit use of sensitive personal information

Other State Privacy Laws:

We extend similar privacy rights to residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with comprehensive privacy legislation.

6.3 Exercising Your Rights

To exercise any of these rights, contact us at support@advisorhub.ai. We will respond to verified requests within 30 days. You may designate an authorized agent to make requests on your behalf.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to provide and improve our Service:

7.1 Types of Cookies

  • Essential Cookies: Required for authentication, security, and core functionality
  • Analytics Cookies: Help us understand how users interact with the platform
  • Preference Cookies: Remember your settings and customization choices
  • Performance Cookies: Monitor platform performance and identify issues

7.2 Cookie Management

You can control cookies through your browser settings. Note that disabling essential cookies may limit your ability to use certain features of the Service.

8. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have collected information from a child under 18, we will promptly delete it. If you believe we have inadvertently collected such information, contact us at support@advisorhub.ai.

9. Third-Party Services and Links

Our Service may contain links to third-party websites, including credit bureaus, lenders, or financial service providers. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

When you connect to credit data APIs or third-party services through our platform, those services may collect additional information subject to their own privacy policies.

10. Data Breach Notification

In the event of a data breach that affects your personal or credit information:

  • We will notify affected users within 72 hours of discovering the breach
  • Notifications will be sent via email to your registered address
  • We will provide details about the nature of the breach and data affected
  • We will outline steps we are taking to address the breach and prevent future incidents
  • We will offer guidance on protective measures you should take
  • We will comply with all applicable data breach notification laws

11. International Users

Our Service is operated from the United States and is subject to United States law. If you are accessing the Service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer and processing.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of material changes by:

  • Sending an email to your registered address
  • Posting a prominent notice on our platform
  • Updating the "Last Updated" date at the top of this policy

Your continued use of the Service after notification constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

AdvisorHub LLC

Privacy Officer

1209 Mountain Road Pl NE, Ste R

Albuquerque, NM 87110

Email: support@advisorhub.ai

We will respond to all inquiries within 30 days.

14. Regulatory Compliance

AdvisorHub LLC is committed to complying with applicable privacy and financial regulations:

  • Fair Credit Reporting Act (FCRA): We adhere to FCRA requirements when accessing or using consumer credit information
  • Gramm-Leach-Bliley Act (GLBA): We protect the security and confidentiality of financial information
  • State Privacy Laws: CCPA, VCDPA, CPA, CTDPA, UCPA, and other state regulations
  • Data Protection Standards: We follow industry best practices and security frameworks