Who we are.

CreditMark LLC ("CreditMark," "we," "us"), New York, New York, operates creditmark.io and lender.creditmark.io. This policy describes what we collect, how we use it, and the choices you have.

What we collect.

Account information: name, email address, and sign-in credentials. Business information: company name, industry, entity details, and the financial information you submit — financial statements, bank statements or month-end balances, debt schedules, and manually entered figures. Derived data: the metrics, scores, Momentum signals, and reason codes computed from your submissions. Usage data: log and device information standard to operating a secure web service.

How we use it.

To operate the Service: computing credentials, displaying them to you, and sharing them with the lenders you authorize. To communicate with you about your account. To maintain security and prevent misuse. To improve scoring calibration using de-identified, aggregated data. We do not sell your personal or business information, and we do not share your financial information with any lender except at your direction.

AI processing.

When you upload financial documents, they are processed by AI services to extract and prefill figures for your review. You review and confirm every extracted figure before a credential is computed. Documents and extracted data are handled under the same confidentiality and security practices as the rest of your information.

Sharing with lenders.

A lender sees your credential only through a share link you created or a credential you otherwise directed to them. You choose whether source documents are included. Revoking a share link permanently disables it; lenders may retain copies of what they lawfully received while the link was active.

Service providers.

We use vetted providers for cloud hosting, database and authentication services, AI document processing, and email delivery. They process data on our instructions to operate the Service and are not permitted to use it for their own purposes.

Security.

Data is encrypted in transit and at rest. Access is controlled by role: business users see their own businesses; lender users see only credentials shared with their institution; sharing actions and lender access are logged.

Retention and deletion.

We retain account and credential data while your account is active and as needed for legal and audit purposes. You may request deletion of your account and associated data by emailing hello@creditmark.io; we will honor the request except where retention is legally required or where credentials remain subject to an active share you created.

Your choices and rights.

You can access and correct your account information in the app, revoke share links at any time, and contact us to access, correct, or delete your data. Where state privacy laws grant you additional rights, we will honor them.

Cookies and analytics.

We use only the cookies necessary to keep you signed in and operate the Service, plus minimal analytics to understand aggregate usage. We do not use advertising trackers.

Children.

The Service is for business use and is not directed to anyone under 18.

Changes.

We may update this policy; material changes will be posted on this page with an updated date.

Contact.

CreditMark LLC · New York, New York · hello@creditmark.io