Privacy Policy

Table of Contents

1. SCOPE AND APPLICATION: What and who this Policy covers
2. COLLECTION OF INFORMATION: The sources of and methods by which we, our service providers, and our advertisers collect information from and about you, including information about your interaction with the Company Services
3. Tailored Advertising
4. Do Not Track Signals
5. Use of your Information
6. Sharing of your information
7. Security: How we store and protect your information
8. Your choices about your information
9. How long we keep your user content
10. Children's privacy
11. Links to other web sites
12. Your California Shine the Light Law Rights
13. Complaints and How to Contact Us
14. Other Important Information
15. CALIFORNIA CONSUMER PRIVACY ACT NOTICE for California Consumers: Other things you should know if you reside in California
16. FOR CONSUMERS IN VIRGINIA, COLORADO, CONNECTICUT, AND OTHER U.S. STATES WITH SIMILAR PRIVACY LAWS: Other things you should know if you are a consumer residing in Virginia, Colorado, Connecticut, or other states with similar privacy laws
17. Gramm Leach Bliley Act (“GLBA”) U.S. Consumer Privacy Notice
18. Contact Us

BY ACCESSING OR USING COMPANY SERVICES, YOU AGREE TO THIS POLICY. IF YOU DO NOT AGREE TO THIS POLICY, PLEASE DO NOT USE THE SERVICE

• Log file information: Log file information is automatically reported by your browser each time you access the Service. When you use our Service, our servers may automatically record certain log file information. These server logs may include information such as your web request, Internet Protocol (“IP”) address, browser type, browser language, operating system, platform type, the state or country from which you accessed the Service, software and hardware attributes (including Device ID), referring / exit pages and URLs, number of clicks and how you interact with links on the Service, domain names, landing pages, pages viewed and the order of those pages, the date and time you used the Service and uploaded or posted content, error logs, files you download, and other such information.
• Location information: When you use the Service, we may automatically collect general location information (e.g., IP address, city/state and or zip code associated with an IP address) from your computer or mobile device. Please note that if you disable such features, you may not be able to access or receive some or all of the services, content, features and/or products made available via the Service.
• Activity Information: When you access and interact with the Company Services, Company and its service providers may collect certain information about those visits. For example, in order to permit your connection to the Company Services, our services receive and record information about your computer, device, and browser, including potentially your IP address, browser type, and other software or hardware information. If you access the Company Services from a mobile or other device, we may collect a unique device identifier assigned to that device, or other transactional information for that device. In certain circumstances, we also may collect geolocation data (including your precise location).
• Cookies and other technologies (such as browser cookies, pixels, beacons, local storage, and other mechanisms) use various approaches to collect and store data. Some of these technologies store data in the browser or on your device. Other technologies may use network-related or other information to recognize your device (e.g., IP Address). Company’s websites, apps, and other services may use these technologies, for example, when you first request a web page and to store data on your computer or other device so the website or app can access information when you make subsequent requests for pages from that service. Depending on your interactions with us, these technologies may also be used to collect and store information about your usage of the Company Service, such as pages you have visited, search history, and the video and other content you have viewed. We and our third-party service providers may use cookies, clear GIFs, pixel tags, beacons, and other technologies that help us better understand user behavior, personalize preferences, perform research and analytics, deliver tailored advertising, and improve the products and services we provide. You can choose to accept or decline certain cookies. Most web browsers automatically accept cookies, but your browser may allow you to modify your browser settings to decline certain cookies if you prefer. If you disable cookies, you may be prevented from accessing or taking full advantage of the Services.
  1. Cookies. When you visit the Service, we may send one or more cookies — a small text file containing a string of alphanumeric characters — to your computer that uniquely identifies your browser or stores information or settings on your device. Cookies let us help you log in faster and enhance your navigation through the site. A cookie may also convey information to us about how you use the Service (e.g., the pages you view, the links you click and other actions you take on the Service), and allow us or our business partners to track your usage of the Service over time. A persistent cookie remains on your hard drive after you close your browser. Persistent cookies may be used by your browser on subsequent visits to the site. Persistent cookies can be removed by following your web browser’s directions. A session cookie is temporary and disappears after you close your browser. Our Service may use HTTP cookies, HTML5 cookies and other types of local storage (such as browser-based or plugin-based local storage).
  2. Clear gifs/web beacons. When you use the Service, we may employ clear gifs (also known as web beacons) which are used to anonymously track the online usage patterns of our Users. In addition, we may also use clear gifs in HTML-based emails sent to our users to track which emails are opened, which links are clicked by recipients, and whether our emails are forwarded. The information allows for more accurate reporting and improvement of the Service.
  3. Session replay technology. Session replay technology. We or our third-party vendors may use tools and software (e.g. FullStory and Jornaya) to monitor and record information (including screenshots and videos) about your interactions with the Service, including keystrokes, mouse movements, form field entries, and overall engagement with the Service.
  4. Web analytics. We may use third-party Web analytics services on our Service, such as those of Google Analytics. These service providers use the technology described above to help us analyze how users use the Service. The information collected by the technology (including your IP address) will be disclosed to or collected directly by these service providers. To prevent Google Analytics from using information for analytics, a user may install the Google Analytics Opt-Out Browser Add-on by clicking here.
  5. Third-Party Ad Targeting. We sometimes use the above technologies for interest-based advertising, which may be based on your device or browser’s signals received across websites or applications, and over time. Please see the section titled Tailored Advertising to learn how you can opt out of these marketing methods and technologies.
  6. Other parties that support the Company Services, for example, by serving advertisements, providing analytics, or other services, may also use these technologies to collect similar information when you use the Company Services or other parties’ services. Those other parties may also use these technologies, along with activity information they collect, to recognize you across the devices you use, such as a mobile device and a laptop or other computer. In some circumstances, their use is governed by the privacy policies of the parties using such technologies. For more information about advertising networks and similar entities that use these technologies, including your choices with respect to them, see the section entitled “Tailored Advertising,” below.
  7. Your browser may be initially set to accept cookies, but you can change your settings to notify you when a cookie is being set or updated, and to block cookies altogether. Please consult the "Help" section of your browser for more information, including on how to clear data from local storage and, depending on your browser, how to turn off other data collection by the browser. For more information about Google Analytics, please review the site “How Google uses information from sites or apps that use our services,” located at www.google.com/policies/privacy/partners/. To opt out of Google Analytics specifically, please go to https://tools.google.com/dlpage/gaoptout.

     Please note that by blocking any or all cookies you may not have access to certain features, content or personalization available through the Company Services.

We may use third-party advertising technologies that allow for the delivery of relevant content and advertising on the Service, as well as on other websites you visit and other applications you use. Please refer to our U.S. Consumer Privacy Notice for more information on your rights to opt-out of the sharing of NPI with non-affiliated third-party advertisers and your rights with respect to the sharing of certain information for marketing purposes with affiliate and non-affiliated third parties. The ads may be based on various factors such as the content of the page you are visiting, information you enter, your searches, demographic data, user-generated content, and other information we or our service providers collect from you. These ads may be based on your current activity or your activity over time and across other websites and online services and may be tailored to your interests.

• To provide you with and manage the Service. We use your information to provide, develop, maintain and improve our Service and the features and functionality of the Service. This may include customization and tailoring the Service features according to the information that you provide. This may include:
  • to measure, maintain and improve those Company Services and features and to develop new products and services, including conducting research and quality and safety assurance measures;
  • to improve your experience with both online and off-line Company Services by delivering content you will find more relevant and interesting, including advertising and marketing messages;
  • to perform identity verification;
  • to provide you with customer support and to respond to inquiries; this may include the use of chatbots. Please note that your inquiries and responses to these chatbots may be transcribed and retained.
  • to make inferences and predictions about your potential areas of interest in order to provide you with content and advertising that is more interesting, personalized, and relevant to you;
  • to maintain our facilities and infrastructure;
  • to comply with internal policies, including accounting, audit, and other internal functions; and
  • to maintain records, conduct risk and security controls, and monitoring.
• To allow service providers to assist us in providing and managing the Company Services. Information we collect from and about you may be made available to certain service providers, such as contractors, chatbot providers, analytics and other measurement companies, and agents or sponsors, who help us analyze and understand your use of the Company Services, and manage and/or provide the Company Services, including to obtain a product, create an account, or similar activities.
• To process and fulfill a request or other transaction submitted to us We use your information to process or fulfill requests or transactions that you have requested.
• Best Rate Guarantee Program. We use your information to administer our Best Rate Guarantee Program (also known as “Credible Best Rate Guarantee,” “Credible $200 Guarantee,” and “$200 Guarantee”).
• To communicate with you. We use the information we collect or receive to communicate directly with you. We may send you emails containing newsletters, promotions and special offers. If you do not want to receive such email messages, you will be given the option to opt out or change your preferences. We also use your information to send you Service-related emails (e.g., account verification, changes/updates to features of the Service, technical and security notices). You may not opt out of Service-related emails.
• To deliver relevant advertisements. Company and our service providers may use information we collect from and about you as described in this Privacy Policy to deliver and measure relevant, more personalized services and advertisements, including content, ads, products or services to you when you use the Company Services or another service (on any of your devices). We may use the information we collect to provide personalized services and advertising to you either through Credible or a third party marketing partner, subject to the requirements of the U.S. Consumer Privacy Notice, shown in section 17 below. This may include, for example, sharing certain information with advertising technology companies (e.g., identity partners), such as advertising identifier for your device, IP address, or a “hash” of an identifier (i.e., a value generated using a cryptographic hash algorithm). In some instances, these entities may return an online identification code that we may store in a first party cookie, or other similar technology, for our use in online and cross-channel advertising, and it may be shared with advertising companies to enable interest-based and targeted advertising. To learn more about your choices in connection with the use of your information for this purpose, please see the section above titled, “Tailored Advertising.” To opt out of this use, please go to https://www.credible.com/legal-pages/do-not-sell.
• Surveys, Offers, Sweepstakes. We may use your information to conduct surveys and offer sweepstakes, drawings, and similar promotions.
• To provide co-branded services and features. We may offer co-branded services or features, such as contests, sweepstakes or other promotions together with other companies (“Co-Branded Services”). These Co-Branded Services may be hosted on Company Services or on that other party’s service. By virtue of these relationships, we may share information you submit in connection with the Co-Branded Service with that party. That other party’s use of your information will be governed by its privacy policy.
• To contact you: Company may periodically send promotion materials or notifications related to the Company Services. If you want to stop receiving promotional materials, you can contact Credible Customer Support or follow the unsubscribe instructions at the bottom of each email. There are certain service notifications and other non-promotional emails that you may not opt-out of, such as notifications of changes to the Company Services or policies.
• To share with our Company Affiliates. Company may share information we collect from and about you as described in this Privacy Policy with Company Affiliates for the purposes described in this Privacy Policy. A description of our Company Affiliates can be found at the beginning of this policy. Users who visit Company Affiliates’ services should still refer to their separate privacy policies, which may differ in some respects from this Privacy Policy.
• Marketing and Advertising. We may use your information to market and advertise our services and the services of certain third parties we work with.
• To share with business partners. Company may share information we collect from and about you as described in this Privacy Policy with business partners to permit them to send you marketing communications consistent with your choices.
• Unique Identifiers. Sometimes, we (or our service providers) may use the information we collect – for instance, log-in credentials, IP addresses and unique mobile device identifiers – to locate or try to locate the same unique users across multiple browsers or devices (such as smartphones, tablets, or computer), or work with providers that do this, in order to better tailor advertising, content, and features, and provide you with a seamless experience across devices. If you wish to opt out of cross device tracking for purposes of interest-based advertising, you may do so through your Android or Apple device-based settings.
• Research and Analytics. We may use your information for research and analytical purposes, for example, to identify trends and effectiveness of certain marketing campaigns we run.
• Business Operations. We may use your information for certain operational purposes including, for example, perform audits and quality control.
• To protect the rights of Credible and others. We may use your information as we believe is necessary or appropriate to protect, enforce, or defend the legal rights, privacy, safety, security, or property of Credible, its employees or agents, or other users and to comply with applicable law. For example, we may disclose your personal information to third parties: (i) where we have a good faith belief that such disclosure is necessary to meet any applicable law, regulation, legal process or other legal obligation; (ii) to protect or prevent harm or financial loss; (iii) to protect our legitimate interests and legal rights; and (iv) to detect, investigate and help prevent security, fraud or technical issues (collectively, “Special Circumstances”).
• With your consent. We may otherwise use your information with your consent or at your direction.
• To aggregate/de-identify data. We may aggregate and/or de-identify information collected through the Service. We may use de-identified and/or aggregated data for any purpose and without any restrictions, including without limitation for research and marketing purposes, and may also share such data with any third parties, including advertisers, promotional partners, sponsors, event promoters, and/or others.

• Providers and cosigners. We may share your information with Providers for the purpose of providing the Service to you such that they may provide you with information about your request for prequalified rates, offers, and information related to other products and services they offer.
  • You agree that when you submit information to a Provider or third-party through the Service, such submission of your information may also be governed by Provider or third-party privacy and security policies which differ from our Privacy Policy. For details of these policies, please consult the policies of the Providers or third-parties directly.
  • You understand that, subject to any applicable laws or regulations, Providers may keep your information that relates to any submission of information that you may make through your use of the Service and any other information provided by Credible in the processing of any submission of information, whether or not you are eligible for the Provider’s products or services. You agree to notify any particular Provider directly if you no longer want them to keep your information.
  • As a prospective borrower or applicant of a Provider’s products or services, you agree that when you nominate a cosigner/co-applicant, Credible may share Provider responses, information you provide, and information we receive from Service Providers relating to your submission with your nominated cosigner/co-applicant, and, as a cosigner/co-applicant, we may share Provider responses, information you provide, and information we receive from Service Providers relating to your submission with the prospective borrower or applicant.
• Affiliates. We may share information with our parent company and any of our or our parent company’s parents, affiliates, or subsidiaries.
• Service Providers. We may share your personal information with third parties who work on behalf of, or with, us such as vendors, processors, agents and other representatives. Service providers assist us with a variety of functions. This includes, for example, assisting with customer service-related functions, providing advertising (including interest-based advertising) and analytics services (e.g., Google Analytics and Facebook Custom Audiences), real estate agent match services, helping us verify your identity, obtain your credit report, providing website hosting services (e.g., Amazon Web Services), assisting with auditing functions, and helping us with marketing and related research activities.
• Marketing partners. We may share your personal information with third-party marketing partners including partners with whom we conduct joint-marketing activities with or with whom we offer a co-branded service. Marketing partners also include entities who maintain a link to our Services, a Credible widget or embedded prequalification experience on their site; we may receive or share information with such Marketing Partners, when you click on or interact with that link, widget or embedded prequalification experience and utilize our Services, Marketing Partners also include entities to whose services we link on our site, or whose widget or form appears on our site, when you interact with that widget or click from our site to the Marketing partner's services.
• Other parties when required by law or as necessary to protect our users and services. Credible may share your information where required to do so by law or subpoena or if we reasonably believe that such action is necessary to (a) comply with the law and the reasonable requests of law enforcement; (b) enforce our Terms of Use or to protect the security or integrity of our Service; and/or (c) exercise or protect the rights, property, or personal safety of Credible, our Users or others.
• To complete a merger or sale of assets or other corporate transaction. If Company sells all or part of its business or makes a sale or transfer of its assets or is otherwise involved in an acquisition, reorganization, merger, or transfer of all or a part of its business (including in connection with a bankruptcy or similar proceedings), or other corporate transaction, Company may transfer or disclose information we collect from and about you as described in this Privacy Policy to the party or parties involved in the transaction as part of that transaction. Your information, which may include NPI, user names and email addresses, User Content and other user information related to the Service may be among the items sold or otherwise transferred in these types of transactions.
• Public Forums. Any information or content that you voluntarily disclose for posting to the Service or any third party website, such as User Content, becomes available to the public, as controlled by any applicable privacy settings. Subject to your profile and privacy settings, any User Content that you make public is searchable by other Users. If we or any third party site remove information that you posted to the Service, copies may remain viewable in cached and archived pages of the Service, or if other Users have copied or saved that information. We are not responsible for the information that you choose to submit in your User Content.
• Aggregated or de-identified information. We may also aggregate or de-identify data and may share that data without restriction.
• Otherwise with your consent or at your direction. In addition to the sharing described in this Privacy Policy, we may share information about you with third-parties whenever you consent to or direct such sharing. Credible will not purchase consent, or sell, rent, or share consent Credible receives from Credible users to opt-in to receiving calls, text, or SMS from Credible. If a user specifically consents to a Provider or Marketing Partner sending them calls, texts, or SMS messages, Credible may transfer that consent to that Provider or Marketing Partner.

1. Providers. We may share your personal information with third parties we give you opportunities to interact with through the use of our Services. For example as when you request prequalified rates for a personal, request that Credible submit your inquiry relating to a mortgage loan to a mortgage refinance or to home purchase lender, or request that Credible submit your loan application or request for a private student loan (including a student loan refinance) to a lender, Credible shares your personal information with Providers. The term “Provider” referenced here is defined in our Terms of Use. In some cases, if you click to go to a Provider’s site, you will automatically be sending your personal information to that Provider (e.g., when clicking on an option to learn more about debt service providers, high yield savings providers, specialty loan product providers, or ancillary services providers such as insurance providers where offered. Remember that any information you provide to the Provider, whether through us or on your own, will be subject to their privacy practices and terms and conditions
2. Service Providers. We may share your personal information with third parties who work with or on behalf of, us such as vendors, processors, agents and other representatives (collectively, “Service Providers”). Service Providers assist us with a variety of functions. This includes, for example, assisting with customer service-related functions, providing advertising (including interest-based advertising) and analytics services (e.g., Google Analytics and Facebook Custom Audiences), helping us verify your identity, obtaining your credit report, providing website hosting services (e.g., Amazon Web Services), assisting with auditing functions, and helping us with marketing and related research activities.
3. Marketing partners. We may share your personal information with third-party marketing partners including partners who we conduct joint-marketing activities with or who we offer a co-branded service with (collectively, “Marketing Partners”). Marketing partners also include entities who maintain a link to our Services, a Credible widget, or embedded prequalification experience on their site; we may receive or share information with such Marketing Partners when you click on or interact with that link, widget, or embedded prequalification experience and utilize our Services, Marketing Partners also include entities to whose services we link on our site, or whose widget or form appears on our site, when you interact with that widget or click from our site to the Marketing partner's services.
4. Cosigners. As a prospective borrower or applicant of a product or service, your personal information may be shared with a cosigner or co-applicant that you designate (“Cosigners”). As a prospective Cosigner for a product or service, your personal information may be shared with the primary borrower or applicant.
5. Public Forums. In certain circumstances, we may provide opportunities for you to publicly post reviews, questions, comments, suggestions or other content, which may include Personal Information (like your name and email address). This information, of course, may be visible to the public and posted on our Sites. For the purpose of this CCPA Notice, third parties who are able to view and access personal information in accordance with this section shall be referred to as the “General Public.”
6. Company Affiliates. We may share personal information with our parent company, and its parents, affiliates, or subsidiaries (collectively, “Company Affiliates”).
7. Special Circumstances. We may disclose your personal information to third parties: (i) where we have a good faith belief that such disclosure is necessary to meet any applicable law, regulation, legal process or other legal obligation; (ii) to protect or prevent harm or financial loss; (iii) to protect our legitimate interests and legal rights; and (iv) to detect, investigate and help prevent security, fraud or technical issues (collectively, “Special Circumstances”). For the purpose of this CCPA Notice, third parties who receive personal information in accordance with this section shall be referred to as “Special Circumstances Recipients”.
8. Corporate Transactions. We may transfer your personal information in the event we sell or transfer, or are considering selling or transferring, all or a portion of our business or assets (collectively, “Corporate Transactions”). For the purpose of this CCPA Notice, third parties who receive personal information in accordance with this section shall be referred to as “Corporate Transaction Recipients.”

1. Request to Know.You have a right to request that the Company disclose what personal information it collects, uses, discloses, and sells. It includes a request for any or all of the following:
   1. The categories of Personal Information we collected about you and the categories of sources from which we collected such Personal Information;
   2. The specific pieces of Personal Information we collected about you for the applicable time period;
   3. The business or commercial purpose for collecting, disclosing, or selling Personal Information about you;
   4. The categories of Personal Information about you that we sold and the categories of third parties to whom we sold that Personal Information;
   5. The categories of Personal Information about you that we otherwise shared or disclosed and the categories of third parties with whom we shared or disclosed that Personal Information.
2. Request to Delete. You have a right to request that the Company delete your personal information that we have collected from you. However, certain information regulated by other privacy and data protection laws (including, for example, the Gramm-Leach-Bliley Act) may be exempt from, or outside the scope of, any deletion request (i.e., the GLBA’s requirement to retain the information may preempt your request that we delete it. In other words, we may be legally required to retain your data for a certain period of time and therefore we cannot delete your data at your request. if this happens, we will let you know in response to your request). As a result, in some instances, we may decline all or part of a deletion request if related to this type of exempt information.
3. Right to Request Correction. You have the right to request that we correct inaccurate Personal Information we collected about you.
4. Request to Opt-Out of Sale or Sharing. We do not provide personal information about you to other companies for money. The advertising services we use may collect certain information, including cookies and similar information stored on your browsers, advertising identifiers on your mobile devices, and/or the IP address of your devices when you visit our sites or use our apps. Those advertising services we use may tailor and deliver ads to you on your devices. Even though we do not provide personal information to these companies for money, California law may characterize this activity by the advertising providers as “sales” or “sharing” of personal information. You have a right to request that these companies discontinue these targeted advertising activities.
5. Right to Be Free from Discrimination.You have a right not to receive discriminatory treatment by the Company for the exercise of the privacy rights conferred by the CCPA.

If you have questions about this Privacy Policy, please contact us at: