Privacy Policy | Credit Worth Finance

We collect personal and financial data you provide directly — including name, date of birth, Social Security Number (for identity verification), income, net worth, investment objectives, risk tolerance, and existing portfolio holdings. This is necessary to deliver our financial services.

Your information powers portfolio strategy, risk assessment, fraud detection, regulatory compliance, and platform improvement. We use transaction history to detect anomalies, behavioral data to personalize investment recommendations, and aggregated data to refine our AI models.

We monitor transactions in real time for fraud, market manipulation, and money laundering indicators as required by federal regulations including the Bank Secrecy Act and FINRA rules. Suspicious activity reports may be filed with FinCEN without notice.

Your holdings, transaction history, performance data, and strategic allocation are visible only to you, your assigned advisor, and the operations team responsible for executing your strategy. Internal access is role-based and audit-logged.

When you apply for loans, insurance, or margin privileges, we may pull credit reports from Equifax, Experian, and TransUnion. We also use income verification, debt-to-income calculations, and asset verification to assess creditworthiness per FINRA Rule 2111.

Insurance applications require health, lifestyle, and property data which we share only with the specific underwriter involved. We comply with GLBA (Gramm-Leach-Bliley Act) and applicable state insurance regulations. Your insurance data is stored separately from investment records.

Our digital payment infrastructure uses tokenization and point-to-point encryption (P2PE) to protect cardholder data. We are PCI-DSS compliant, meaning we never store raw credit card numbers on our servers, reducing risk in the event of a breach.

We employ bank-grade 256-bit AES encryption at rest, TLS 1.3 in transit, mandatory multi-factor authentication, hardware security modules (HSMs) for cryptographic key management, and segregated client asset accounts at FDIC-insured custodial banks. SOC 2 Type II audited.

We share data only with necessary partners: custodial banks (Schwab, Fidelity, Apex), credit bureaus, insurance underwriters for policy issuance, and tax preparation software providers. All partners operate under strict data processing agreements (DPAs).

We use only essential cookies (authentication, fraud prevention) and analytical cookies (privacy-preserving, aggregated metrics). No advertising cookies. No cross-site tracking. No data sold to ad networks. You may adjust preferences in your browser settings.

We retain financial records for the period required by law (typically 7 years post-account closure for SEC and FINRA compliance). After this period, data is securely destroyed. You may request deletion of non-mandatory personal data at any time.

Our privacy program is reviewed annually by external privacy counsel and audited by independent firms. We comply with GLBA, CCPA, GDPR, HIPAA (where applicable), state insurance regulations, and federal financial regulations. Audit reports are available upon request under NDA.