Privacy Policy

1. Introduction

AdvisorHub LLC ("we," "us," "our") operates FundReadi (fundreadi.com), a consumer credit monitoring and funding-readiness service. We are committed to protecting your privacy and to handling your personal and financial information with care and transparency. This Privacy Policy applies to FundReadi and to all surfaces operated by AdvisorHub LLC.

This Privacy Policy explains how we collect, use, store, and protect your information, including sensitive credit report data. By using our Service, you consent to the practices described in this policy.

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

• Account and Identity Information: Your name and email address and, for credit monitoring, your mobile number, home address, and birth year. To verify your identity for credit monitoring you also enter your Social Security number and full date of birth; these pass through our servers to our credit-data provider for verification and are not stored by us (we keep only your birth year)
• Sign-in Data: Your password, which our authentication provider stores in hashed form, or, if you choose to sign in with Google, the basic profile information Google shares with us (your name and email address). If you turn on two-step sign-in, our authentication provider stores the secret your authenticator app uses to generate codes. If you add a passkey, it stores the passkey's public key and a name for the device; the private key never leaves your device. We also keep a record of the browsers and devices you sign in from (browser and operating system family, the approximate city and region derived from your network address, and the time), so we can tell you about a sign-in from a new device
• Billing Information: Your card is stored by our payment processor. We keep the card brand, last four digits, and expiration date, your billing name and address, and your transaction history
• Profile Data: Preferences, account settings, subscription status, and the records of the authorizations and consents you give (the wording and version you agreed to, with the time, IP address, and browser)
• Funding Profile Information You Choose to Provide: For your personal funding journey, answers such as your gross monthly income, monthly housing payment, employment status, funding purpose, and target amount. Answering is optional

2.2 Credit Reports You Upload

If you are on the Upload plan, you upload a copy of your credit report as a PDF. We store the file and extract its contents to run your analysis. An uploaded report can contain:

• Credit Scores: VantageScore and other credit scoring metrics
• Credit Accounts: Account types, balances, payment history, credit limits
• Personal Identifiers: Names, addresses, dates of birth, Social Security Numbers (if present in reports)
• Credit Inquiries: Hard and soft inquiries from lenders and creditors
• Public Records: Bankruptcies, judgments, liens, collections
• Employment Information: Current and past employers (if included in credit report)

2.3 Credit Data From Our Credit-Data Provider

When you enroll in a credit monitoring plan, we obtain the following through our credit-data provider, StitchCredit (operator of the CRS Credit API), after your written authorization and identity verification:

• Credit Reports and Scores: Your VantageScore 3.0 credit scores and credit reports from Equifax and, on tri-bureau plans, Experian and TransUnion, refreshed monthly
• Credit Monitoring Alerts: Changes reported by the bureau, such as new accounts, inquiries, balance changes, and derogatory marks
• Identity Verification Results: Whether your identity was verified, the phone number used for the verification text, and the outcome. Your Social Security number and date of birth are sent to the provider to run the verification and are not stored by us (we keep only your birth year)
• Provider Identifiers: The account identifier the provider assigns to you, so we can retrieve your data and manage your enrollment. We do not hold your bureau login credentials

2.4 Usage and Technical Data

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Analytics: Pages visited, features used, time spent on platform
• Performance Data: Error logs, crash reports, API response times
• Cookies and Tracking: Session cookies, analytics cookies, preference cookies

2.5 Business Journey Information

If you use a business funding journey, you tell us about a business you own. Business journeys are part of your own membership; we do not offer business or whitelabel accounts and do not collect information about anyone's clients.

• Business Information: Business name, formation date, industry, whether the business has an EIN, and whether it has a business bank account
• Financial Information: Monthly revenue and revenue range, and whether and how much funding the business has obtained before

3. How We Use Your Information

3.1 Primary Service Purposes

• Credit Monitoring: Obtain your credit reports, scores, and alerts through our credit-data provider and show them to you
• Funding-Readiness Analysis: Analyze your credit file (monitored or uploaded) and the profile answers you give, using an AI model that receives your credit data with identifying details removed (Section 5.2)
• Report Generation: Create your analysis reports, including the action items in them
• Score Calculation: Calculate funding readiness scores based on credit data
• Trend Analysis: Track changes in your credit profile and scores over time
• Account Emails: Send alerts, monthly updates, receipts, renewal reminders, and security notices

3.2 Account and Service Management

• Create and maintain user accounts
• Process payments and manage subscriptions
• Provide customer support and respond to inquiries
• Send service notifications and account updates
• Enforce Terms and Conditions and prevent fraud

3.3 Product Improvement

• Review and improve the quality and accuracy of our analyses, using the redacted AI inputs and outputs described in Section 5.2 (your name, Social Security number, date of birth, street address, phone number, email address, and full account numbers removed)
• Develop new features and functionality
• Use product analytics (Section 5.2) to understand how the Service is used and to fix problems
• Test and optimize platform performance

3.4 Legal and Compliance

• Comply with applicable laws and regulations (including FCRA, GLBA, state privacy laws)
• Respond to legal requests, subpoenas, and court orders
• Protect our rights, property, and safety
• Detect and prevent fraud, security threats, and illegal activity

4. Data Storage and Security

4.1 Security Measures

We use the following measures to protect your sensitive financial information:

4.2 Data Retention

• While You Are a Member: We keep your account, credit reports, analyses, and uploaded reports so you can use them in the Service
• After You Cancel: Monitoring and access continue until the end of the period you have paid for. Your records are kept, so they are available again if you return
• Closing Your Account: You can close your account by emailing info@fundreadi.com. Closing stops monitoring and billing and deactivates the account. We do not delete accounts when they are closed: your records are kept under our retention schedule, so a returning member does not have to start over
• Records Kept for Legal Reasons: Billing and tax records, and the authorizations and consents you give, are kept for 7 years
• Deletion Requests: Where a privacy law that applies to you gives you the right to have your personal information deleted, we will honor a verified request, except for information that the law allows or requires us to keep (Section 15.2)
• Backup Systems: Database backups roll off on our database provider's standard backup schedule

4.3 Data Location

Your data is stored on servers located in the United States. We do not transfer personal data outside the United States except when using third-party service providers with appropriate safeguards in place.

5. Information Sharing and Disclosure

5.1 We Do Not Sell Your Data

5.2 Service Providers

We share data with the service providers who help us operate the platform:

• Credit Data and Identity Verification: StitchCredit (operator of the CRS Credit API), which obtains your credit data from Equifax, Experian, and TransUnion. It receives your name, address, date of birth, Social Security number, mobile number, and email address to verify your identity and enroll you in monitoring
• Database, Sign-in, and File Storage: Supabase
• Hosting: Vercel, which runs our website and servers; our server logs are kept there for a limited period
• Payment Processing: NMI, which processes your payments and stores your card. Your card details pass through our servers on their way to NMI and are not stored by us
• AI Analysis: Anthropic (Claude). It receives your credit data after an automated redaction step removes your name, Social Security number, date of birth, street address, phone number, email address, and full account numbers. It also receives your funding profile and business journey answers (your income only as part of a debt-to-income ratio, never the amount). Submitted data is not used to train Anthropic’s models
• AI Quality Review: Langfuse, an AI monitoring tool we run on our own server hosted by Fly.io. It stores the same redacted AI inputs and outputs, linked to an internal account number, so we can check and improve analysis quality
• Product Analytics: PostHog. It receives an internal account number, your name and email address (so our team can find your sessions when you ask for help or report a problem), the pages you visit and the actions you take in the Service, your plan, and device and browser information, including your IP address. It does not receive your credit data. We may also record sessions with all on-screen text and form entries masked
• Email Delivery: Resend, which delivers our emails and so receives your email address, your first name, and the content of each email, which can include your scores, alert details, and analysis highlights
• Address Autocomplete: Google Maps Platform, which receives the address text you type into address fields

We share personal information with these providers only as needed for them to provide their services to us.

5.3 Business Transfers

If AdvisorHub LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email and/or prominent notice on our platform before your information is transferred and becomes subject to a different privacy policy.

5.4 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal obligations, court orders, or subpoenas
• Enforce our Terms and Conditions
• Protect our rights, property, or safety
• Investigate fraud, security issues, or violations
• Comply with credit reporting regulations and financial crimes investigations

5.5 Sharing You Choose

Your analysis reports are shared with someone outside AdvisorHub LLC only when you share them: by creating a share link, by emailing a link from the Service, or by exporting a report. Anyone you share with can see what the shared report contains. Shared and exported reports are built without your name, contact details, Social Security number, or account numbers; a business journey report may show the business's name. Share links expire after 30 days, and you can revoke one sooner. We do not offer business or advisor accounts that can see your file.

6. Your Privacy Rights

6.1 Access and Control

You have the right to:

• Access: Request a copy of your personal data and credit information we have stored
• Correction: Update or correct inaccurate personal information
• Deletion: Request deletion of your personal information. We honor deletion requests as required by the privacy law that applies to you; closing your account on its own does not delete your data (Section 4.2)
• Export: Download your analysis reports on plans that include export, and request a copy of your data
• Restrict Processing: Limit how we use your data in certain circumstances
• Object: Object to processing of your data for specific purposes

6.2 State-Specific Rights

California Residents (CCPA/CPRA):

• Right to know what personal information is collected, used, and shared
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising privacy rights
• Right to correct inaccurate personal information
• Right to limit use of sensitive personal information

Other State Privacy Laws:

We extend similar privacy rights to residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with comprehensive privacy legislation.

6.3 Exercising Your Rights

To exercise any of these rights, contact us at info@fundreadi.com, as described in Section 15.2. We will respond to verified requests within 30 days. You may designate an authorized agent to make requests on your behalf.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to provide and improve our Service:

7.1 Types of Cookies

• Essential Cookies: Required for authentication, security, and core functionality, including the cookie that keeps you signed in and, if you choose “Remember this browser” when entering a two-step code, a cookie that lets this browser skip the code for 30 days
• Analytics Cookies: Help us understand how users interact with the platform
• Preference Cookies: Remember your settings and customization choices
• Performance Cookies: Monitor platform performance and identify issues

7.2 Cookie Management

You can control cookies through your browser settings. Note that disabling essential cookies may limit your ability to use certain features of the Service.

8. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have collected information from a child under 18, we will promptly delete it. If you believe we have inadvertently collected such information, contact us at info@fundreadi.com.

9. Third-Party Services and Links

Our Service may contain links to third-party websites, including credit bureaus, lenders, or financial service providers. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

When you connect to credit data APIs or third-party services through our platform, those services may collect additional information subject to their own privacy policies.

10. Data Breach Notification

In the event of a data breach that affects your personal or credit information:

• We will notify affected users without unreasonable delay after discovering the breach, and as required by applicable law
• Notifications will be sent via email to your registered address
• We will provide details about the nature of the breach and data affected
• We will outline steps we are taking to address the breach and prevent future incidents
• We will offer guidance on protective measures you should take
• We will comply with all applicable data breach notification laws

11. International Users

Our Service is operated from the United States and is subject to United States law. If you are accessing the Service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer and processing.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of material changes by:

• Sending an email to your registered address
• Posting a prominent notice on our platform
• Updating the effective date at the top of this policy

Your continued use of the Service after notification constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Regulatory Compliance

AdvisorHub LLC is committed to complying with applicable privacy and financial regulations:

• Fair Credit Reporting Act (FCRA): We adhere to FCRA requirements when accessing or using consumer credit information
• Gramm-Leach-Bliley Act (GLBA): We protect the security and confidentiality of financial information
• State Privacy Laws: CCPA, VCDPA, CPA, CTDPA, UCPA, and other state regulations
• Data Protection Standards: We follow industry best practices and security frameworks

15. Your Privacy Choices

This section summarizes the choices you have and how to use them. It adds to Section 6 and does not replace it.

15.1 We do not sell or share your personal information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined by the California Consumer Privacy Act and similar state laws. We do not run advertising on our sites, we do not currently use advertising cookies or tracking pixels, and we do not give your credit data to data brokers, lenders, or marketers. Because we do not sell or share personal information, there is no "Do Not Sell or Share My Personal Information" opt-out to exercise: the protection applies to everyone automatically. We use sensitive personal information (such as your Social Security number and credit data) only to provide the Service you asked for, to verify your identity and protect your account, and to meet our legal obligations.

15.2 How to request access, correction, or deletion

Email info@fundreadi.com from the email address on your account (or from the support address shown in the footer of the product you use) with the subject line "Privacy request" and tell us what you would like: a copy of the personal information we hold about you, a correction, or deletion of your account and data. We will confirm receipt, verify that the request comes from the account holder (or from an authorized agent with the account holder's written permission), and respond within 30 days, or tell you if we need more time and why. We will never ask for your full Social Security number to verify a request. We honor deletion requests as the privacy law that applies to you requires (Section 4.2); some records must be kept after closure to meet legal, tax, and dispute-handling obligations, and we will tell you what we keep and why.

15.3 Communications

You can turn off non-essential email (for example monthly updates, score-change digests, and product updates) from Notifications or Settings in your account, or from the unsubscribe or email-preferences link at the bottom of those emails. Transactional messages needed to run your account, such as renewal reminders, receipts, security notices, and identity-verification messages, are not optional while your account is open. We send text messages only for identity verification, only when you request one, and never for marketing; an email alternative is offered during verification.

15.4 Analytics and cookies

We use PostHog, a product analytics service that we reach through our own domain, to understand how the Service is used and to fix problems. It receives an internal account number together with your name and email address, so our team can find your sessions when you ask for help or report a problem, and analytics events do not contain your credit data (Section 5.2). You can limit analytics through your browser's cookie and site-data controls as described in Section 7; doing so does not affect your account.

15.5 No discrimination

We will not deny you the Service, charge you a different price, or provide a different level of service because you exercised any privacy right.