Privacy Policy

Effective Date: March 5, 2026 | Last Updated: March 5, 2026

1. Who We Are

Mr. Pull LLC ("we," "us," "our") is a credit intelligence service that provides credit reports and scores to verified professionals with permissible purpose under the Fair Credit Reporting Act (FCRA). We operate as an authorized end-user of credit bureau data through our partnership with licensed credit report providers.

2. Information We Collect

2a. From Business Users (Professionals)

• Account Information: Name, email address, company name, industry, phone number
• Business Verification: Business license, EIN, state registration
• Payment Information: Processed securely via Stripe — we never store full card numbers
• Usage Data: Pull history, login timestamps, IP addresses

2b. From Consumers (Credit Check Subjects)

• Identity Information: Full name, date of birth, Social Security Number (last 4 or full, depending on pull type)
• Address Information: Current and previous addresses
• Contact Information: Email address, phone number
• Consent Records: Digital signature, timestamp, IP address of consent

2c. Credit Data (From Bureaus)

• Credit scores (VantageScore, FICO)
• Account summaries (number of accounts, credit utilization)
• Public records and collections
• Inquiry history

3. How We Use Your Information

• To fulfill credit report requests with proper permissible purpose
• To verify the identity of business users and consumers
• To process payments for services
• To maintain audit trails as required by FCRA
• To communicate service updates and account information
• To comply with legal obligations and regulatory inquiries

4. Legal Basis for Processing (FCRA Compliance)

We only access and share consumer credit information when there is a valid permissible purpose as defined under FCRA Section 604 (15 U.S.C. § 1681b), including:

• Credit transactions initiated or authorized by the consumer
• Review of existing accounts
• Employment purposes (with consumer consent)
• Tenant screening (with consumer consent)
• Insurance underwriting
• Legitimate business needs involving a transaction with the consumer

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in Transit: All data transmitted via TLS 1.2 or higher
• Encryption at Rest: SSN and sensitive fields are encrypted before storage
• Access Controls: Role-based access — only authorized personnel can view consumer data
• Audit Logging: Every data access event is logged with user, timestamp, and IP address
• Secure Payments: Stripe PCI DSS Level 1 compliant payment processing

6. Data Retention

• Consumer Consent Records: Retained for 5 years (credit bureau requirement)
• Credit Report Data: Retained for 25 months maximum, then securely purged
• Business Account Data: Retained while account is active, plus 7 years for tax/legal
• Audit Logs: Retained for 5 years

7. Information Sharing

We do NOT sell your personal information. We share data only in these situations:

• Credit Bureaus: To fulfill authorized credit report requests
• Payment Processor: Stripe, for payment processing
• Legal Compliance: When required by law, subpoena, or regulatory inquiry
• Bureau Audits: Credit bureaus may audit our records for compliance

8. Your Rights Under FCRA

As a consumer, you have the right to:

• Know what is in your credit file
• Dispute incomplete or inaccurate information
• Have inaccurate information corrected or deleted
• Know who has accessed your credit report
• Consent before your credit report is provided to employers
• Limit prescreened offers of credit and insurance
• Seek damages from violators of the FCRA

9. State-Specific Rights

Residents of certain states (California, Illinois, Texas, and others) may have additional rights under state privacy laws. Contact us for state-specific disclosures.

10. Children's Privacy

Our services are not intended for individuals under 18. We do not knowingly collect personal information from minors.

11. Changes to This Policy

We may update this Privacy Policy as our practices or legal requirements change. We will notify registered users of significant changes via email.

12. Contact Us