Privacy Policy

Effective: March 30, 2026

Information We Collect

From landlords:

Name, email address, business name, property addresses, and tenant information including tenant name, date of birth, last four digits of Social Security Number, address, lease dates, rent amount, payment history, and amount owed.

From consumers (via disputes):

Name, date of birth, last four digits of Social Security Number, mailing address, email address, phone number, dispute details, and uploaded supporting documents.

Automatically:

IP address, browser type, device information, and usage data.

How We Use Information

  • To furnish rental payment data to consumer reporting agencies (Equifax, Experian, TransUnion) on behalf of landlords
  • To investigate consumer disputes as required by the Fair Credit Reporting Act
  • To send required notices, including negative information notices and dispute outcome notifications
  • To operate and improve the Debtpin platform
  • To communicate with landlords about their accounts
  • To comply with legal obligations

How We Share Information

With Equifax, Experian, and TransUnion. This is the core function of Debtpin. We transmit rental payment data to the three major consumer reporting agencies in Metro 2 format on behalf of landlords.

With landlords. In connection with dispute investigations, we may share the fact that a dispute was received and request verification of the reported data.

With service providers. We use third-party service providers to operate the platform, including Supabase (database and storage), Stripe (payment processing), and Vercel (hosting). These providers access data only as needed to perform their services.

As required by law. We may disclose information in response to court orders, subpoenas, or regulatory requests.

We do NOT:

  • Sell consumer information
  • Share consumer information for marketing purposes
  • Share consumer information with data brokers

Data Security

Social Security Number data is encrypted at rest and in transit. Access to consumer personally identifiable information is restricted to authorized personnel. We use industry-standard security measures including TLS encryption for all data in transit, AES-256 encryption at rest, role-based access controls, and row-level security policies on all database tables containing consumer data.

Data Retention

  • Lease documents, enrollment data, and reporting records: retained for the duration of the reporting period plus 7 years, consistent with the FCRA reporting window.
  • Dispute records: retained for 7 years from the resolution date.
  • Account data for cancelled accounts: retained for 7 years from cancellation.

Consumer Rights

  • Right to access: consumers may request a copy of information Debtpin has reported about them by contacting disputes@debtpin.com.
  • Right to dispute: see debtpin.com/disputes.
  • Right to request deletion of inaccurate information: handled through the dispute process.
  • California residents: under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. Debtpin does not sell personal information.

Children's Privacy

Debtpin does not knowingly collect information from individuals under 18.

Changes to This Policy

We may update this policy from time to time. We will post the updated policy on this page with a revised effective date.

Contact

For privacy-related questions: support@debtpin.com

For disputes about reported information: disputes@debtpin.com

By mail: Debtpin LLC, PO Box 42177, Philadelphia, PA 19101