Privacy Policy.

1. Information we collect

Account information: name, email address, business name and login details (including through Google sign-in if you choose it).

Assessment information: your answers about your business, your resulting readiness scores and action plan, and task progress.

Advisor conversations: messages you send to the AI business advisor and its responses.

Billing information: subscription status, invoices and limited payment details (such as card brand and last four digits) received from our payment provider. We never receive or store your full card number.

Technical information: device, browser, IP address, pages visited and error logs, used to operate and secure the Service.

We do not ask for, and you should not submit, Social Security numbers, bank login credentials or full credit reports.

2. How we use information

To provide the assessment, results, action plan, member dashboard and advisor; to process payments and manage your membership; to communicate with you about your account, security and policy changes; to prevent fraud and abuse; to maintain and improve the Service; and to comply with legal obligations.

Your assessment information and action plan are used to personalize advisor responses for you only. We do not use one member’s data to answer another member.

3. How we share information

We do not sell your personal information or share it for cross-context behavioral advertising.

We share information only with service providers that help us run the Service, under contractual obligations: hosting and database providers, our payment processor (Stripe), email delivery providers, and AI model providers that generate advisor responses on our behalf. We may also disclose information when required by law, to protect rights and safety, or as part of a merger or acquisition with notice to you.

4. Guest assessments

If you take the assessment without an account, your progress is linked to a private token stored on your device. If you later create an account, your results are transferred to it.

5. Security

We use encrypted connections, access controls that restrict each member’s data to that member, and limited administrative access. No system is perfectly secure; please use a strong, unique password.

6. Uploaded documents

Members may optionally upload supporting documents (PDF, PNG or JPG) inside missions. Files are stored in private, access-restricted storage that is encrypted at rest by our hosting provider and transmitted over encrypted connections. They are never available through public links: each viewing link is generated for the signed-in owner and expires after 60 seconds. Kredura staff do not browse member documents.

Please black out Social Security numbers, full EINs, account numbers and passwords before uploading, and never upload bank login credentials or full credit reports.

You can delete any document at any time from the mission where you uploaded it; deletion removes the file from active storage immediately.

7. Retention

We keep account information while your account is active. We propose to delete uploaded documents within 90 days after an account is closed, and earlier when you ask us to, where the law allows. Other personal information is deleted or de-identified within a reasonable period after account closure, except where we must keep records (for example, billing, tax and payment records, or information needed for legal claims, fraud prevention or to comply with a legal request) for as long as the law requires.

Backups: our hosting provider keeps encrypted, access-restricted system backups for a limited rolling period for disaster recovery. Deleted information may remain in those backups until they expire; it is not restored or used for any other purpose.

8. Your choices and rights

You can view and update your profile in the app and cancel your membership at any time. You may request access to, a copy of, correction of, or deletion of your personal information by contacting us. Depending on where you live (for example, California), you may have additional rights, and we will not discriminate against you for exercising them. We will verify your identity before acting on a request.

9. Cookies and local storage

We use essential browser storage to keep you signed in and save assessment progress. We do not use third-party advertising cookies. See our Cookie Policy at kredura.com/cookies for details.

10. Children

The Service is for adults operating or planning businesses. We do not knowingly collect information from children under 13.

11. Changes

We may update this policy and will post the new version with a new effective date, notifying members of material changes.

Contact us

Kredura Technologies LLC is a limited liability company registered in North Carolina. Registered agent address (for service of process only, subject to verification against the company’s official registration): 4030 N Wake Forest Road, Raleigh, NC 27609, United States.

Questions about this policy or your account? Email support@kredura.com or visit our contact page. For privacy questions or to exercise your privacy rights (access, correction or deletion of your information), email privacy@kredura.com. You can also browse our legal FAQ for quick answers.