1. Scope and product status
BorrowAware is a product under development that provides educational readiness planning, progress tracking and a manual bureau-comparison workspace. This notice applies to the website, authenticated workspace, partner-interest form and product-update list.
2. Information collected
Depending on how you use the service, we may process your authenticated account email and short-lived sign-in or session records; answers to the readiness assessment; generated action plans; task progress; account nicknames, types, balances and statuses you manually enter; product-update requests; support requests; and partner-application information.
Passwordless sign-in links expire after 15 minutes and work once. Session and link tokens are stored only as one-way hashes. Public measurement records anonymous daily totals for broad campaign categories, resource views, readiness-check activity and PDF downloads. It does not store raw campaign parameters, referring URLs, assessment answers, cookies, advertising identifiers or a persistent visitor identifier.
The pilot does not request Social Security numbers, full creditor account numbers, bank credentials, credit-bureau credentials or credit-report file uploads. Do not submit those items in free-text fields.
3. How information is used
- Provide, secure and improve your private readiness workspace.
- Generate and save educational action plans.
- Display manual comparisons you choose to create.
- Respond to support, product-update or partnership requests.
- Prevent abuse, diagnose reliability problems and meet legal obligations.
4. Commercial use and sharing
We do not sell access to your private readiness workspace. We do not silently transmit your plan to lenders or other partners. A future partner handoff will require a separate, explicit consumer request and a clear compensation disclosure when applicable.
Service providers may process limited information to host, secure and operate the service under contractual and security obligations. Information may also be disclosed when reasonably necessary to comply with law, protect rights and safety, or complete a business transaction subject to appropriate safeguards.
5. Retention and deletion
Authenticated users can delete plans, tasks, manual bureau entries and the associated pilot profile from Data Controls. Product-update requests, support requests, partner submissions, notification-delivery records, security records and legally required records may be retained separately for the period reasonably necessary for their purpose. Encrypted recovery backups are ordinarily retained for up to 30 days, so a deletion may remain in protected backups until the applicable copy expires.
6. Security
We use platform authentication, encrypted transport, access checks on account-specific requests, minimum-data design and managed infrastructure. No system can guarantee absolute security. The product will not add higher-risk data categories without additional security and legal review.
7. Your choices
You may avoid entering optional information, download a portable copy of your workspace, remove manual accounts, delete the readiness workspace, stop product-update emails from the readiness guide, decline partnership communications or stop using the service. Browser and authentication providers may offer additional account or device controls.
8. Children
The service is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children.
9. Changes and contact
Material changes will be reflected by an updated date and, when appropriate, an in-product notice. Use the Support page for product, accessibility and privacy requests. When transactional delivery is enabled, a limited email service provider may process the address and operational message needed to deliver acknowledgments and owner alerts.