Privacy Policy
Your trust matters. Here's exactly what we collect, why we collect it, and how we protect it.
What We Collect
We only collect information necessary to help you claim your SCRA benefits. Here's a complete breakdown:
- Name and email address
- Phone number (optional)
- Date of birth
- Account password (encrypted)
- Bank/lender names
- Account numbers (partial)
- Account types & balances
- Interest rates
- Active duty start/end dates
- Branch of service
- DMDC verification status
- Pages visited
- Feature usage patterns
- Device & browser info
About Plaid: We use Plaid to securely connect your financial accounts. Plaid handles all authentication—we never see or store your banking login credentials.
What We NEVER Do
How We Use Your Data
Account Management: To create your account, authenticate you, and provide customer support when you need it.
SCRA Claims Processing: To verify your military status, identify eligible accounts, generate claim letters, and submit claims to your lenders.
Communications: To send you claim status updates, important account notifications, and respond to your inquiries. Marketing emails only with your consent.
Service Improvement: To understand how people use SCRA Saver so we can make it better. This data is anonymized and aggregated.
Legal Compliance: To comply with laws, respond to legal requests, and protect our rights and the safety of our users.
Your Rights
To exercise any of these rights, email support@scrasaver.com. We'll respond within 30 days.
Data Security
We protect your data with multiple layers of security:
Encryption in Transit: All data sent between your browser and our servers is encrypted with 256-bit SSL/TLS—the same standard used by major banks.
Encryption at Rest: Your data is stored using AES-256 encryption. Even if someone accessed our databases, the data would be unreadable.
Access Controls: Only authorized personnel can access customer data, and all access is logged and audited.
Regular Audits: We undergo regular security assessments and maintain SOC 2 Type II compliance.
No system is 100% secure. While we implement industry-best practices, we cannot guarantee absolute security. If you suspect unauthorized access to your account, contact us immediately.
Data Retention
We keep your data only as long as necessary:
Active accounts: Data retained while your account is active and for a reasonable period afterward to handle any follow-up claims or support requests.
Deleted accounts: When you delete your account, we remove your personal data within 30 days. Some anonymized data may be retained for analytics.
Legal requirements: We may retain certain data longer if required by law (e.g., financial records for tax purposes).
Policy Updates
We may update this policy occasionally. Here's our commitment:
Material changes: If we make significant changes to how we handle your data, we'll email you at least 30 days before they take effect.
Minor changes: Small clarifications or formatting updates won't trigger email notifications, but we'll update the "Effective Date" at the top.
Your choice: If you disagree with changes, you can delete your account before they take effect. Continued use after changes means you accept them.
Contact Us
If you have questions about this policy or want to exercise your data rights, we're here to help.
support@scrasaver.com
Operated by: Revlent LLC
Related:
Terms of Service ·
Security