Privacy Policy
Effective date: May 2026 · Operated by PingYo, Inc.
PingYo, Inc. ("Company," "we," "us," or "our") operates LiftScoreIQ.com (the "Service"). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use the Service.
The short version: We collect the information needed to provide our credit monitoring service, process your payments securely via Stripe, and retrieve your credit data via Array. We do not sell your personal information. Ever.
1. Information We Collect
| Category | What We Collect | Why |
|---|---|---|
| Identity | First name, last name | To personalize your account and verify your identity for credit services |
| Contact | Email address, phone number, state of residence | To create your account, send transactional emails, and comply with state-specific requirements |
| Payment | Card last 4 digits, card brand, billing zip code | To display your payment method in account settings. Full card details are handled exclusively by Stripe and are never stored on our servers. |
| Credit Data | Credit report data, credit score, account history, inquiries | To power your credit monitoring dashboard. Retrieved via Array (our credit data provider). |
| Usage Data | Log data, browser type, IP address, pages visited, timestamps | To maintain security, debug issues, and improve the Service |
2. How We Use Your Information
We use the information we collect to:
- Create and manage your account and subscription
- Provide, maintain, and improve the Service
- Process billing and prevent fraudulent transactions
- Send you transactional emails (welcome messages, receipts, billing alerts, dispute notifications)
- Respond to your support requests
- Comply with our legal obligations
- Detect and prevent fraud, abuse, and security incidents
We do not use your personal information for advertising purposes or to build behavioral profiles for third-party marketers.
3. Third-Party Service Providers
We share your data with a limited number of trusted service providers who help us operate the Service. Each provider is contractually bound to protect your data and may only use it to perform services on our behalf.
| Provider | Purpose | Data Shared |
|---|---|---|
| Stripe | PCI-compliant payment processing | Name, email, payment card details. Stripe stores and handles all card data under their PCI DSS compliance program. We never receive or store your full card number. |
| Array | Credit report data and monitoring services | Name, date of birth, address, SSN (where required to pull your credit file). This data is transmitted securely and used solely to retrieve your credit information. |
| Resend | Transactional email delivery | Name and email address, used solely to deliver account emails. |
| Railway / Supabase | Application hosting and database | All account data. These are infrastructure providers operating under strict security standards. |
4. We Do Not Sell Your Data
We do not sell, rent, or trade your personal information to any third party for their marketing or commercial purposes. This applies to all users, including California residents under the California Consumer Privacy Act (CCPA).
5. California Residents — CCPA Rights
If you are a California resident, you have the following rights under the CCPA:
- Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you.
- Right to Delete: You may request that we delete the personal information we have collected about you, subject to certain exceptions (such as our need to retain data for legal or billing purposes).
- Right to Opt Out of Sale: We do not sell personal information. No opt-out action is required, but you may contact us to confirm this.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
To exercise your rights, contact us at privacy@liftscoreiq.com. We will respond within 45 days.
6. Data Security
We implement industry-standard security measures to protect your personal information, including:
- TLS/HTTPS encryption for all data in transit
- Encryption of sensitive data at rest in our database
- JWT-based authentication for API access
- PCI DSS-compliant payment processing via Stripe (we never handle raw card numbers)
- Access controls limiting staff access to personal data on a need-to-know basis
Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
7. Data Retention
We retain your personal information for as long as your account is active. After you cancel your account, we retain your data for 3 years to comply with our legal, tax, and accounting obligations. After that period, we securely delete or anonymize your data.
Payment records may be retained for up to 7 years as required by applicable tax law.
8. Children's Privacy
The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete it promptly.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on our website. Your continued use of the Service after the effective date of the revised policy constitutes your acceptance of those changes.
10. Contact Us
For privacy-related questions, requests, or concerns, please contact us at:
PingYo, Inc. — Privacy Team
Email: privacy@liftscoreiq.com
For general support: support@liftscoreiq.com