Privacy Policy

1. Introduction

This Privacy Policy explains how CredPacket LLC (“CredPacket,” “we,” “us”) collects, uses, shares, and protects information when you use the CredPacket website and services (the “Service”). By using the Service, you agree to this Policy. It is incorporated into our Terms of Service.

2. Information We Collect

Information you provide. Account details (name, email, password), company profile information, billing contact details, insurance-contact and recipient details you enter, and any communications you send us.

Documents and their contents (“Customer Content”). The files you upload — such as certificates of insurance, licenses, certifications, W-9s, and vehicle and equipment records — and the information extracted from them. These documents may contain sensitive personal information about you and about third parties (for example, your employees), including names, addresses, driver’s license and CDL numbers, medical-card information, and Social Security or taxpayer identification numbers.

Payment information. Subscription and payment processing is handled by our third-party payment processor. We do not store full payment-card numbers; we receive limited billing information (such as plan, status, and partial card details) from the processor.

Usage and device information. We and our service providers automatically collect technical data such as log data, device and browser type, IP address, and usage activity, including through cookies and similar technologies.

3. How We Use Information

We use information to: provide, operate, and improve the Service; read and extract data from your documents (see Section 4); generate reminders and alerts; enable you to share documents with recipients you choose; process payments and manage subscriptions; communicate with you (including service and transactional emails); provide support; maintain security and prevent fraud; and comply with legal obligations.

4. Automated Document Processing and AI Providers

To read your documents and extract information automatically, the contents of uploaded documents — and related metadata such as the filename and any hints you provide — are transmitted to and processed by third-party AI services on our behalf.

AI subprocessors. Document processing is performed by Google’s Gemini models, accessed through the Lovable AI Gateway, which acts as a subprocessor that routes the request to Google. We do not send your account credentials, user ID, or email address to the AI providers as part of document processing — only the document contents and the filename/hint metadata needed to classify and extract fields.

We do not use AI providers other than as described here for document processing. We encourage you to review the privacy practices of Google and Lovable. You are responsible for ensuring you have the right to submit any third-party personal information contained in documents you upload for this processing (see our Terms of Service).

5. How We Share Information

We do not sell your personal information. We share information only as follows:

• With service providers/subprocessors who help operate the Service — including hosting and database (Supabase), the AI gateway and AI provider (Lovable AI Gateway, Google), payment processing (our payment processor), and email delivery (our email provider) — under obligations to protect the information.
• With recipients you choose, when you use the Service to share documents or a “CredPacket.” You control who you send to.
• For legal reasons — to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, safety, and property of CredPacket, our users, or others.
• In a business transfer — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

Changes to subprocessors. CredPacket may add, replace, or change service providers and subprocessors from time to time as necessary to operate, maintain, secure, and improve the Service, provided we continue to require them to protect information consistent with this Policy.

6. Data Storage and Security

We use reasonable administrative, technical, and physical safeguards designed to protect information, including access controls and encryption in transit and at rest as provided by our infrastructure providers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential. If we become aware of a breach of security affecting your personal information, we will notify you and any applicable authorities as required by law, including Florida’s data-breach notification requirements.

7. Data Retention

We retain information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. After account termination, we may retain or delete data after a reasonable period; you are responsible for exporting data you wish to keep. We may retain de-identified or aggregated data that does not identify you.

8. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing. To make a request, contact us at hello@credpacket.com. You can also update much of your information in your account settings, and you can unsubscribe from non-essential emails using the link in those emails (we may still send transactional or service messages).

9. Role of the Parties (Controller / Processor)

For personal information about your own employees and other third parties that you upload, you act as the data controller (or business) and CredPacket acts as a processor (or service provider) handling that information on your behalf and on your instructions. Business customers who require a Data Processing Agreement (DPA) may request one at hello@credpacket.com.

10. Children’s Privacy

The Service is intended for businesses and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will provide reasonable notice (such as by email or in-app notice) and update the “Last Updated” date. Your continued use of the Service after changes take effect constitutes acceptance.

12. Contact Us

CredPacket LLC · hello@credpacket.com
500 S Australian Ave #600, West Palm Beach, FL 33401