1. Person Responsible for the Protection of Personal Information
In accordance with Quebec's Law 25 (Act to modernize legislative provisions as regards the protection of personal information), ScoreCo has designated a person responsible for the protection of personal information.
For any questions regarding your personal data, contact us at: privacy@scoreco.ca
2. Personal Information Collected
We collect the following information:
Email address — for authentication and communication
Credit file (PDF) — voluntarily uploaded by the user for analysis
Payment data — processed by Stripe; we do not store any card numbers
Budget data — voluntarily entered for budget optimization
3. Purposes of Processing
Your information is used exclusively to:
Analyze your credit file and generate personalized recommendations
Provide an action plan to improve your credit score
Optimize your budget based on your financial situation
Process your payment and manage your account
4. Consent
By uploading your credit file and using our services, you explicitly consent to the collection and processing of your personal information for the purposes described in this policy. You may withdraw your consent at any time by contacting us.
5. Data Protection and Anonymization
We take the security of your data seriously:
PDF files are stored in encrypted form on secure servers (Supabase Storage)
Personally identifiable information (SIN, addresses, account numbers) is automatically filtered before AI analysis
Analysis is performed on anonymized text — the AI model never receives your raw data
Communications are encrypted via TLS/HTTPS
Data access is restricted to the strict minimum necessary
6. Data Retention
Your personal information is retained as long as your account is active. You may request complete deletion of your data at any time. We will carry out the deletion within 30 days of the request.
7. Sharing with Third Parties
We never sell your data. Your information may be shared only with:
Stripe — for secure payment processing
Anthropic (Claude) — for AI analysis, using anonymized data only
Supabase — for secure data hosting and authentication
No third party has access to your raw credit file.
8. Your Rights (Law 25)
In accordance with Quebec's Law 25, you have the right to:
Access the personal information we hold about you
Request the correction of inaccurate information
Request the deletion of your information
Withdraw your consent to processing
Obtain the portability of your data in a structured and commonly used technological format
Be informed of any privacy incident concerning you
To exercise these rights, contact: privacy@scoreco.ca
9. Privacy Incident
In the event of a privacy incident presenting a serious risk of harm, we undertake to notify the Commission d'accès à l'information du Québec (CAI) and the affected individuals in accordance with Law 25.
10. Amendments
We may update this policy periodically. Any substantial change will be communicated by email. The date of the last update is indicated at the top of this page.
11. Contact
For any questions or requests regarding this policy: privacy@scoreco.ca