Privacy Policy

Effective date: November 14, 2026 · Operator: Browns Assorted Merchandise, Las Vegas, NV · Contact: [CONTACT EMAIL]

Template notice: this page contains bracketed placeholders the operator must replace before launch. It is not legal advice.

1. What SecondLook Reports collects

Account data: your email address and a hashed (never plain-text) password. Content you enter: cases (module, bureau, denial date, notes), the errors you tick, your evidence checklist progress, letters you generate, dispute-sent dates, and outcomes you record. An audit log records account and case events (register, login, case created, letter generated, dispute marked sent, outcome recorded) for security and support.

What SecondLook Reports never collects: full Social Security numbers — there is no field for one anywhere, and text that looks like a full SSN is rejected. The letter form accepts only an optional SSN last 4. We also never ask for bank login credentials or payment card numbers in the current version (checkout is a placeholder).

2. How it is used

Only to run the service for you: building your checklists and letters and tracking your deadlines. We do not sell personal data and do not use your content for advertising. Your letters are mailed by you; we do not send your case data to any reporting agency.

3. Sharing

We do not share your case content with reporting agencies, landlords, employers, or banks. If analytics or other processors are added later, they will be named in this policy before use.

4. Retention

We keep your account data for [RETENTION PERIOD] after account deletion requests are processed, except records we must keep longer for tax or legal reasons. You can delete your account and all associated data instantly, yourself, from Settings — deletion does not require contacting us.

5. Your controls

From Settings you can export all of your data as JSON at any time, and delete your account and all associated data. Questions or requests: [CONTACT EMAIL].

6. Security

Passwords are stored hashed with bcrypt. Sessions use signed tokens, authentication routes are rate-limited, every case query is scoped to your user account, and the app is served over HTTPS in production. No system is perfectly secure; use a unique password.

7. Governing law

This policy is governed by the laws of the State of Nevada.

Browns Assorted Merchandise · Las Vegas, NV