Privacy policy

This policy covers HazeScore at hazescore.com — the credit monitoring product, the account area, the affiliate program, and the marketing site.

• EntityHaze Score LLC
• Address1688 Meridian Ave, Miami Beach, FL 33139

Questions about this document, or a request about your own data, go through hazescore.com/contact.

• AccountYour name and email address, and a hashed password. We never store a password in a readable form.
• Credit fileReports and scores retrieved from Equifax and Experian on the schedule your enrollment sets, together with a light per-bureau summary used to compare one pull against the last.
• VerificationA record that an identity check happened, when, by which method, and whether it passed. Not the answers, and not the documents.
• ContactAnything you write into the contact form, and the email address you give with it.
• UsageOrdinary server logs and product telemetry — pages requested, errors, and rate-limit counters. IP addresses are hashed before storage.
• AffiliateIf you join the affiliate program: the referrals attributed to your link, and what you need to be paid.

We do not see or store your Social Security number. Identity verification runs inside our bureau partner's own form. You answer it directly to them; the answers do not pass through us, and we keep only the fact that the check happened and its result.

We do not store TransUnion data. Our bureau partner's terms do not permit it. That is why coverage is Equifax and Experian: a file we may not store is one we cannot compare against a previous pull, so it could not raise an alert even if we displayed it.

We also do not collect bank statements, tax returns, or identity documents. Those belong to lending products. This is not one.

A consumer report may only be retrieved for a permissible purpose. For this product that purpose is your own written authorization: you ask us to pull your file, and when you enroll we record which version of these disclosures you were shown as you did it. That record is what evidences the authorization, which is why the version number appears at the top of this page.

You can withdraw that authorization at any time by cancelling monitoring. We stop pulling on the next scheduled tick.

• Bureau partnerThe consumer-reporting technology provider that performs the identity check and retrieves your reports. They receive what they need to identify you and cannot complete a pull without it.
• haze dispute proA separate company offering dispute services. Your report is sent there only if you are also a client of theirs. If you are not, nothing is sent, and there is no setting to change because the condition is your account, not a preference.
• AffiliatesIf you arrive through an affiliate's referral link and submit your details, that affiliate can see your name and email address in their own dashboard, because attributing and paying a referral requires knowing which one it was. They do not see your credit file, your score, or anything we pull.
• Service providersHosting, database, email and SMS delivery, and error monitoring, each acting on our instructions and holding only what their function requires.

We do not sell, rent or trade your personal or credit information. There is no advertising network in this product, and no data broker relationship behind it.

Separately, our own operational systems receive lifecycle events — an account was created, a message was sent. Those carry no credit data, and the code refuses to send scores, balances, tradelines or verification answers rather than relying on a policy to stop it.

Raw pulls are kept exactly as they arrived so that any change we report can be traced back to the bytes it came from. That is what makes an alert checkable rather than something you have to take on trust.

When you close your account we delete your stored credit data and the personal details in your account.

Four things outlive it, and it is more honest to name them than to write an absolute promise we would then have to break. The record that you authorised us to pull your file — which version of these disclosures you accepted and when — is kept, because it is the evidence the pulls were permitted and deleting it would leave us unable to show that. Records we are required to keep for tax or accounting reasons are kept for as long as that requires. Aggregate counts that identify nobody are kept. And if you arrived through an affiliate's link, the referral record — including the name and email you gave at that point — stays in that affiliate's dashboard, because it is the record of a referral they may be owed a commission on. Ask us and we will remove it.

Deletion propagates to backups as they age out on their normal schedule rather than instantly, which is a property of how backups work rather than a reservation on our part.

Data is encrypted in transit and at rest. Passwords are hashed rather than stored. Stored report payloads are held in private storage, reachable only through a signed, expiring link — there are no public URLs to them. Access to production data is limited to the people who operate the service.

No system is beyond compromise, and any page that tells you otherwise is selling something. If we discover a breach affecting your data we will notify you, and any regulator entitled to notice, in the manner and within the time applicable law requires — and we will tell you what happened, what was involved, and what we did about it.

You are entitled to a free copy of your credit report from each nationwide bureau every twelve months under the Fair Credit Reporting Act. At the time of writing all three also offer a free report every week — that is their arrangement rather than a statutory floor, so it can change — at annualcreditreport.com. You do not need us for that, and we would rather say so here than have you find out later.

You may ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Disputing the contents of a credit report is done with the bureaus themselves, at no cost — see the terms for what this product does and does not do.

Questions about this document, or a request about your own data, go through hazescore.com/contact.

This service is for adults. We do not knowingly collect information from anyone under 18, and we delete it if we discover we have.

When these disclosures change in a way that alters what you agreed to, the version at the top of this page changes with them, and the version you were shown stays recorded against your enrollment. We do not silently edit the text you accepted.