Privacy Policy

Effective. This is the current Privacy Policy for MCP Dispute OS as a software vendor — it covers operator and prospect account data, not the separate per-operator consumer Privacy Notice.

MCP DISPUTE OS — VENDOR PRIVACY POLICY

Effective Date: July 12, 2026

This Privacy Policy is provided by Multiservice Credit Plus LLC, d/b/a MCP Dispute OS ("Provider," "we," "us," "our"), a Pennsylvania limited liability company (PA Dept. of State entity no. 0014174795), with its registered office at 20 Dundee Apts, Hanover Township, PA 18706-1121.

This Policy explains what we collect from OPERATORS (the businesses that create an account and subscribe to the Service) and PROSPECTS (visitors who submit an inquiry or sign up), how we use and share it, how we secure it, and your rights. It governs the vendor's own site and account data.

IT IS NOT the consumer-facing Privacy Notice an operator gives to its own clients. Each operator has its own, separate Consumer Privacy Notice (built from the operator's own agreement template) governing the consumer data an operator uploads to run its business. See Section 3 below for exactly how we treat that operator-uploaded consumer data.

1. WHAT WE COLLECT

- Operator account information: business/legal name, contact name, email address, phone number, mailing address, and other business details you provide at signup or in Settings.
- Authentication data: your password (stored as a salted hash, never in plain text), session tokens, and login timestamps.
- Billing and payment identifiers: your Stripe customer ID and subscription/plan status. We do NOT store your full card number, CVV, or bank account number on our servers — those are collected and held directly by our payment processor, Stripe.
- Usage and technical data: IP address, browser user-agent, request timestamps, and pages/routes visited, captured in ordinary web-server and application logs and in the in-app events log.
- Prospect/inquiry data: whatever you submit through a contact or inquiry form (name, email, message) before you become a subscriber.

2. HOW WE USE THIS INFORMATION

We use operator and prospect information to:

- Provide, operate, and support the Service (create your account, authenticate you, run the workflow engine you subscribed to).
- Process subscription billing through Stripe and manage your plan/tier.
- Respond to inquiries and provide customer support.
- Send operational email (password resets, billing notices, service updates) and, where you have agreed, product updates.
- Maintain security logs and detect abuse, fraud, or misuse of the Service.
- Comply with legal obligations and enforce our Operator Terms of Service.

We do not sell operator or prospect personal information, and we do not share it for cross-context behavioral advertising.

3. OPERATOR-UPLOADED CONSUMER DATA (CREDIT REPORTS, IDS, SSNS)

When you, as an operator, upload a consumer's credit report, government ID, Social Security number, or other consumer data into the Service, YOU are the data controller for that data. MCP Dispute OS processes it ONLY as your service provider, solely to deliver the software functionality you direct (case tracking, letter drafting, document storage, and display back to you or, where you enable it, to your client's portal). We do not use your clients' data for our own purposes, and we do not sell it. Your obligations to your own clients — including your own Privacy Notice, security safeguards, and breach-notification duties — are yours alone; see the Operator Terms of Service, Section 8.

4. SUB-PROCESSORS

We use the following categories of sub-processors to run the Service. Each is contractually limited to processing data only to provide its service to us:

- Hosting / application infrastructure: Render.
- Payment processing: Stripe.
- Transactional email delivery: Resend.
- CDN / edge network: Cloudflare.

5. HOW LONG WE KEEP INFORMATION

We retain operator account information for as long as your account is active, and for a reasonable period afterward to satisfy billing, tax, legal, and dispute-resolution needs. Prospect/inquiry data that never converts to a subscription is retained only as long as reasonably useful to follow up, and is deleted or de-identified thereafter. Operator-uploaded consumer data is retained per the operator's own configuration and instructions (Section 3); we do not independently set a retention period for data we process solely as your service provider.

6. SECURITY

We use commercially reasonable measures to protect the information described in this Policy, stated here honestly and without overstatement:

- Encryption in transit (TLS) for all network traffic to and from the Service.
- Uploaded documents (credit reports, identification, and similar files) are encrypted at rest using AES-256-GCM. Database contents and other data at rest are additionally protected by operating-system access controls and host-provider (Render) disk security.
- Passwords are stored as salted hashes, never in plain text.
- Access to production systems is limited to those who need it to operate the Service.
- An in-app events log records account-relevant actions for audit purposes.

No system is perfectly secure. If we become aware of a security incident that materially affects your information, we will notify you as required by applicable law.

7. YOUR RIGHTS

You may request access to, correction of, or deletion of the operator/prospect account information we hold about you, subject to our legitimate need to retain billing and legal records. To exercise these rights, or with any question about this Policy, contact us at services@multiservicecreditplusllc.com. We will respond within a reasonable time, generally within thirty (30) days.

8. CHILDREN'S PRIVACY

The Service is intended for business use by adults age 18 and older. We do not knowingly collect personal information from children under 18.

9. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. The effective date above identifies the current version. Material changes will be posted here with an updated effective date; continued use of the Service after that date constitutes acceptance of the revised Policy.

10. CONTACT US

Multiservice Credit Plus LLC, d/b/a MCP Dispute OS
Attn: Privacy
20 Dundee Apts, Hanover Township, PA 18706-1121
services@multiservicecreditplusllc.com

This Privacy Policy is provided by MCP Dispute OS as a software vendor; a licensed attorney's review is advisable before reliance.

— End of Privacy Policy —