A-Score Privacy Policy (United States)

Last updated: April 24, 2026 Version: 1.2

This Privacy Policy explains how Ascore Corp ("A-Score," "we," or "us") collects, uses, shares, and protects personal information when you use the A-Score app and services. The service is intended for users in the United States. If you do not agree with this policy, do not use the app.

1. Information We Collect

Data We Collect Directly

• Account and profile: Name, email, phone number, password hashes, and profile details you provide.
• Transaction, record, and export data: Agreements, record summaries, forms, acknowledgments, external schedules, recorded updates, attachments, asset descriptions, estimated values, user-entered terms, messages, generated PDF/export metadata, and other content you submit.
• Template and policy review data: Service templates, terms templates, category selections, policy classifications, eligibility flags, blocked reasons, detected regulated phrases, moderation notes, appeal information, user attestations, and admin review activity.
• Advertising and sponsored discovery data: Campaign content, targeting preferences, sponsored profile content, linked eligible assets/templates, ad performance metrics (impressions, clicks, conversions), campaign credit reservations, and ad credit purchase history.
• Identity verification (when required): ID images and facial biometrics captured by Stripe Identity to confirm likeness to your government ID. See Section 12 for important information about biometric data.
• Device and usage: Device identifiers, IP address, operating system, app version, language, time zone, crash and performance logs, and interactions with app features.
• Approximate location: If enabled by your device settings to support fraud prevention or relevant feature prompts.
• Purchases and subscriptions: Plan selection, transaction identifiers, renewal status, and credit balances. Payment card data is handled directly by app stores or Stripe.
• Communications and support: Messages you send to us (including email or in-app support), and metadata necessary to route or deliver notifications (e.g., push tokens, SMS/email delivery data).
• Sensitive information you should not provide: A-Score does not need full bank account numbers, full routing numbers, private keys, seed phrases, passwords, login credentials, or similar secrets for ordinary use of the service. If you submit this information anyway, we may process it to detect, block, redact, delete, archive, or secure the content.

Categories of Personal Information (California Residents)

For purposes of the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), we collect the following categories of personal information:

2. How We Use Information

We use information to:

• Provide, operate, and secure the app and its features
• Authenticate users and prevent fraud or misuse
• Facilitate the documents, records, acknowledgments, exports, templates, ads, and transactions you request
• Generate, store, display, export, and reproduce user-entered record summaries, PDF records, acknowledgment logs, version history, and external reference schedules
• Deliver, measure, and improve advertising services
• Review, classify, moderate, block, archive, or remove unsupported, unsafe, deceptive, or regulated content
• Enforce policy limits for assets, templates, ads, public profiles, sponsored discovery, generated documents, and transaction records
• Send transactional notices (security alerts, receipts, service updates)
• Provide customer support and troubleshoot issues
• Analyze usage to improve reliability, performance, and user experience
• Comply with legal, accounting, and tax obligations

We do not use personal information for automated decision-making that produces legal or similarly significant effects without human review.

2.1 Advertising Data

When you use our advertising services, we collect:

• Campaign content and targeting preferences
• Ad performance metrics (impressions, clicks, conversions)
• Payment and transaction information for ad credits
• This data is used to deliver, measure, and improve advertising services

2.2 Policy Review, Moderation, and Automated Tools

We use automated tools and human review to help enforce A-Score policies. These tools may identify regulated phrases, sensitive categories, unsupported templates, ineligible assets, prohibited ad claims, fraud signals, abuse patterns, or content that should be blocked, hidden, archived, converted to a private note, or sent for manual review.

These tools are used for platform safety, policy enforcement, fraud prevention, and product eligibility. They do not provide legal advice, credit decisions, insurance decisions, employment decisions, housing decisions, medical decisions, or other legally significant decisions about you. If content is restricted or removed, you may contact support for review where available.

3. Sharing and Disclosure

We do not sell or share personal information for cross-context behavioral advertising. We share information with:

• Service providers and processors: Hosting and storage (e.g., AWS), payments and identity verification (Stripe), messaging (email, SMS, push providers), analytics and crash reporting, and app distribution platforms (Apple, Google).
• Transaction counterparties: Other users involved in a transaction may see the information you choose to share with them.
• Public, sponsored, and shared surfaces: If you publish a profile, run an ad, share a link, or enable a public/sponsored module, viewers may see the profile, ad, service, eligible asset/template, or record information you choose to make available.
• Moderators and administrators: Authorized A-Score personnel and service providers may review content, policy classifications, appeals, and admin activity where needed for support, moderation, safety, compliance, or abuse prevention.
• Legal and compliance: Authorities or third parties when required by law, legal process, or to protect rights and safety.
• Business transfers: Successors in the event of a merger, acquisition, or similar corporate transaction.

Service Providers

We require service providers to use personal information only to perform services on our behalf and in accordance with this Privacy Policy. Our key service providers include:

4. Cookies and Similar Technologies

The app may use essential cookies or device identifiers for authentication, security, and performance. We do not use third-party advertising cookies or share data for cross-context behavioral advertising.

5. Data Retention

We retain information for as long as needed to provide the service and for legitimate business needs, including security, fraud prevention, accounting, and legal compliance.

After account deletion, we may retain data where required by law, to protect our rights, to prevent fraud or abuse, or to maintain business records.

6. Security

We use reasonable technical and organizational measures such as encryption in transit and at rest, access controls, and monitoring. No system is completely secure. You are responsible for maintaining the security of your devices and credentials.

7. Your Choices and Rights

All Users

• Access, correction, deletion: You may request access to or deletion of your personal information, subject to legal limits. Contact us using the information below. We will verify requests as allowed by law.
• Marketing and notifications: You can opt out of marketing communications and adjust push notification preferences in your device or app settings.
• Location: Control location sharing through your device settings.
• Identity verification: You may decline identity verification, though certain features may be unavailable.
• Public and sponsored content: You can remove or update content you publish, subject to record retention, moderation, legal, or dispute-related limits.
• Policy review: If your content, ad, asset, template, or record is blocked or removed by a policy review process, you may contact support for review where available.

California Residents - Your Privacy Rights

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the following rights:

To exercise your rights:

• Email: privacy@myascore.com
• In-app: Settings > Privacy > Data Request
• We will verify your identity before processing requests
• We will respond within 45 days (may extend by additional 45 days with notice)

Authorized Agents: You may designate an authorized agent to make requests on your behalf. We may require verification of the agent's authority.

Do Not Sell or Share My Personal Information

A-Score does not sell personal information and does not share personal information for cross-context behavioral advertising purposes as defined by the CCPA/CPRA. Because we do not engage in these practices, there is no opt-out mechanism required. If our practices change, we will update this policy and provide an opt-out mechanism.

Sensitive Personal Information

We collect sensitive personal information (government ID, biometric data) only for identity verification purposes and only with your explicit consent. We do not use sensitive personal information for purposes other than those disclosed at collection. You have the right to limit our use of sensitive personal information to what is necessary to provide the services you request.

Shine the Light (California Civil Code § 1798.83)

California residents may request information about disclosure of personal information to third parties for direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

8. Children (COPPA Compliance)

The service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Age Verification

All users must confirm they are at least 13 years old during registration. Users between 13 and 18 must have parental or guardian consent to use the service.

If You Believe a Child Under 13 Has an Account

If you are a parent or guardian and believe your child under 13 has created an account or provided personal information to us, please contact us immediately:

• Email: privacy@myascore.com
• Subject Line: "COPPA - Underage Account Report"

Please include:

• Your relationship to the child (parent, guardian)
• Any information that helps identify the account
• Your contact email for confirmation

Our Response Process

Upon receiving a report of an underage user:

1. Immediate Suspension: The account will be suspended within 24 hours to prevent further data collection
2. Data Deletion: All personal information will be permanently deleted within 48 hours
3. Confirmation: The reporting parent/guardian will receive confirmation when deletion is complete

We do not contact the child directly and will not share any data with third parties.

What Data Is Deleted

When we process a COPPA deletion request, we permanently delete:

• Profile information (name, email, photos)
• All assets and records created by the account
• All notifications and communications
• Usage analytics associated with the account

Transaction records involving other users are anonymized (the child's identity is removed) to preserve the integrity of other users' records.

9. Data Storage and Transfers

The service is operated in the United States. If you access the service from outside the United States (which is not permitted), your information will be transferred to and processed in the United States.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date. For material changes, we will provide notice through the app or by email. Continued use of the app after changes take effect means you accept the updated policy.

11. Contact

If you have questions or privacy requests, contact us:

• General inquiries: info@myascore.com
• Privacy requests: privacy@myascore.com
• Mailing address: Ascore Corp Attn: Privacy [Address]

12. Biometric Information Notice

What Biometric Data We Collect

If you use identity verification features, facial geometry data may be captured and compared against your government-issued ID. This process is powered by Stripe Identity.

How Biometric Data Is Used

• Purpose: Solely to verify that you are the person depicted on your government ID
• Processing: Biometric comparison is performed by Stripe, not A-Score
• Storage: A-Score does not store raw biometric data; Stripe processes and stores data per their privacy policy
• Retention: Biometric data is retained only as long as necessary to complete verification, typically deleted shortly after the verification process

Your Consent and Rights

• Biometric data collection requires your explicit consent before capture
• You may decline identity verification, though certain features requiring verified identity will be unavailable
• You may request deletion of biometric data by contacting us or Stripe directly

Illinois Residents - Biometric Information Privacy Act (BIPA) Notice

If you are an Illinois resident, the following additional terms apply:

PLEASE READ CAREFULLY. BY USING IDENTITY VERIFICATION FEATURES, YOU CONSENT TO THE COLLECTION AND USE OF YOUR BIOMETRIC DATA AS DESCRIBED BELOW.

• Purpose: We collect biometric identifiers (facial geometry) solely for identity verification to prevent fraud and comply with legal requirements
• Disclosure: Biometric data is shared only with Stripe Identity for processing. We do not sell, lease, or trade biometric data
• Retention: Biometric data will be permanently destroyed when the initial purpose for collection has been satisfied or within three (3) years of your last interaction with A-Score, whichever occurs first
• Storage: Biometric data is stored using reasonable security measures, including encryption
• Consent: By proceeding with identity verification, you provide written consent to the collection, use, and storage of your biometric data as described in this notice

To request deletion of biometric data or withdraw consent, contact privacy@myascore.com.

Texas and Washington Residents

If you are a resident of Texas or Washington, similar protections apply to your biometric data under state law. The collection, use, and retention practices described above apply equally to residents of these states.

13. Credit Score Information Disclaimer (FCRA Notice)

IMPORTANT: A-SCORE IS NOT A CONSUMER REPORTING AGENCY

A-Score is not a consumer reporting agency ("CRA") as defined by the Fair Credit Reporting Act, 15 U.S.C. § 1681 et seq. ("FCRA"). The scores, analyses, recommendations, and educational content provided through the A-Score application are:

• For educational and informational purposes only
• Not official credit scores from Equifax, Experian, TransUnion, or any other consumer reporting agency
• Not intended for use in making credit, employment, insurance, housing, or any other decisions covered by the FCRA
• Not a substitute for obtaining your official credit reports and scores from the three major credit bureaus

What A-Score Provides

No Credit Bureau Data Access

A-Score does not:

• Pull, access, or retrieve credit reports from Equifax, Experian, TransUnion, or any credit bureau
• Access your actual credit score from any consumer reporting agency
• Report your payment history or financial information to any credit bureau
• Make credit decisions or furnish information used for credit decisions

Educational Purpose

All scores and analyses within A-Score are generated from:

• Information you voluntarily provide
• Proprietary educational algorithms
• General credit education principles

These are designed to help you understand credit concepts and track your personal financial goals, not to provide official credit assessments.

Your Official Credit Reports

For official credit reports and scores, you should:

• Visit AnnualCreditReport.com for free annual reports from each bureau
• Contact Equifax, Experian, or TransUnion directly
• Use services that access actual bureau data (these are subject to FCRA)

No Guarantee of Credit Improvement

A-Score does not guarantee any specific improvement in your actual credit score or creditworthiness. Results will vary based on individual circumstances and actions. Educational content should not be considered financial, legal, or credit repair advice.

14. Additional State Privacy Rights

Residents of States with Comprehensive Privacy Laws

If you are a resident of a state with an applicable comprehensive privacy law, you may have additional rights under your state's law, including:

• Right to access your personal data
• Right to correct inaccuracies
• Right to delete your personal data
• Right to data portability
• Right to opt out of targeted advertising, sale of personal data, or profiling

We do not engage in targeted advertising, sale of personal data, or profiling for legally significant effects as defined by these laws. To exercise your rights, contact privacy@myascore.com.

Nevada Residents

Nevada residents may opt out of the sale of certain personal information. We do not sell personal information as defined by Nevada law. If you have questions, contact privacy@myascore.com.

This Privacy Policy is effective as of April 24, 2026.