Privacy Policy

Tradelines.AI — a service of Learning Machines LLC, a Texas limited liability company
2267 Trawood Dr, Suite A-2, El Paso, Texas 79935

Learning Machines LLC d/b/a Tradelines.AI ("we," "us," "our") provides credit services that require us to handle some of the most sensitive information a person has. This policy describes what we collect, why, how we protect it, with whom we share it, and your rights. It applies to the tradelines.ai website and all interactions with our team.

You provide directly: your name, mailing address, email address, and telephone number; identity-verification information including date of birth and Social Security number; your tradeline selection and order details; your uploaded Payment Confirmation (which, depending on your payment method, may include your bank's name and account information, or a Bitcoin wallet address); if you opt in, your mobile number and your consent to receive marketing text messages; the content of your communications with us, including with our site assistant; and, when you sign an agreement or acknowledgment on our site, the name you type together with the date, time, your IP address, and the version of the document you signed.

Collected automatically: IP address, browser and device information, pages viewed, and referring URLs; session cookies required for the Site to function, and limited preference and analytics cookies you can control through your browser.

From third parties: confirmation from the issuing bank that your authorized-user enrollment posted; confirmation from our business banking institution that your payment has been received, or, for a Bitcoin payment, confirmation from the public ledger.

We collect and use this information only to: perform the service you purchased (registering you as an authorized user); verify your identity and prevent fraud; process payments and any refunds as described in your Consumer Agreement; communicate with you about your order; meet our legal obligations, including contract, disclosure, and recordkeeping requirements under the Texas Credit Services Organization Act, and tax law; and improve our services using only aggregated, de-identified data. We will not use your information for a materially different purpose without first giving you notice and any opt-out the law requires.

We share your information only as needed to perform the service or as the law requires:

• The Cardholder for each tradeline you purchase: your name, date of birth, address, and Social Security number, solely so the Cardholder can add you as an authorized user on their account. Only the accountholder can make that addition, so this disclosure is necessary to perform the service you requested. Each Cardholder is bound by written agreement to use your information only for that purpose, to retain no copy, and to disclose it to no one else.
• The issuing bank for the card on which you are enrolled: the same information, submitted by the Cardholder, solely to register you as an authorized user. The bank's own privacy policy governs its use.
• Our business banking institution: information needed to identify your incoming payment and to issue refunds, including any originating account information shown on your uploaded Payment Confirmation and your mailing address on file.
• Our AI provider (Anthropic): the text you type into our site assistant or recommendation tools, to generate a response. The assistant may see whether your payment has been received. We do not send your Social Security number, date of birth, payment amounts, payment methods, or account numbers.
• Our email delivery provider: your email address and the contents of order-related messages we send you.
• Our website host and analytics provider (Vercel): page-level usage data and the technical information needed to serve the Site.
• Our text-message provider: if you have opted in to text messages, your mobile number and the content of the messages we send you, solely to deliver them.
• Our infrastructure providers (database and hosting): encrypted operational data, under contractual data-protection obligations.
• Referral partners: if you sign up through a partner's link or code, that partner sees an anonymous entry for your referral (for example, 'Referral 3'), the date you joined, the general stage of your order, and the commission they earn. Partners never see your name, contact details, payment information, or credit information. Partners who choose to connect with each other share their names and email addresses only after both accept.
• Government authorities when required by law, regulation, or valid legal process, or to protect our legal rights.
• A successor entity in a sale, merger, or change of control, subject to this policy's protections continuing.

We do not sell your personal information, and we do not share it with anyone for third-party marketing. We may use or share aggregated, de-identified information that cannot identify you.

We maintain an information security program designed to meet the Gramm-Leach-Bliley Act Safeguards Rule (16 C.F.R. Part 314). Current measures include:

• Field-level encryption of your Social Security number and date of birth, in addition to full-database encryption at rest; encryption keys are stored separately from the database.
• Secure file storage for uploaded documents: Payment Confirmations and other documents you upload are stored in encrypted object storage, accessed only through short-lived signed links, and never embedded directly in our application logs. Any bank account or routing information present on an uploaded document is protected at the file level by this storage layer; we do not extract or separately store those numbers.
• Encryption in transit over TLS for all communication between your device and our servers and between our servers and our service providers.
• Least-privilege access controls: your sensitive information is accessible only to personnel whose role requires it, and our operations role cannot access Social Security numbers at all.
• Multi-factor authentication required for every administrative account with access to customer information.
• Access auditing: every read and write of sensitive fields — including each time a Social Security number is accessed or an uploaded Payment Confirmation is opened — is recorded in an append-only audit log.

No security program eliminates all risk. Section 7 describes what we will do if a breach occurs.

We retain: signed agreements and refund records for at least 5 years after the customer relationship closes; transaction records as tax law requires, typically 7 years; and communications consent records, including text-message consent, for the duration of consent plus 5 years. When information is no longer required, we delete or irreversibly anonymize it using secure disposal procedures.

Access and correction: request a copy of your information, or correction of inaccurate information, at privacy@tradelines.ai. We verify identity before honoring any request.

Deletion: request deletion at the same address. Deletion is subject to the retention obligations in Section 5; we will tell you what must be retained and why, and delete the rest.

Text messages: marketing text messages are optional. You receive them only if you check the separate, unchecked text-message consent box, and consenting is not a condition of any purchase. Message frequency varies, and message and data rates may apply. Reply STOP to any message to stop receiving them, or HELP for help. We do not share your mobile number or your text-message consent with any third party or affiliate for their marketing purposes.

Order-update texts: if you opt in at checkout, we may also send automated texts about your order and account, such as order confirmations and enrollment status. Message frequency varies, and message and data rates may apply. Reply STOP to any message to stop receiving them, or HELP for help.

GLBA sharing opt-out: federal law gives you the right to opt out of certain sharing with non-affiliated third parties for marketing. We do not engage in that sharing, so there is nothing to opt out of; if that ever changes, we will provide the required notice and opt-out first.

Texas residents: you have the breach-notification rights described in Section 7, under Tex. Bus. & Com. Code § 521.053.

If a security incident affects your sensitive personal information (your name combined with your Social Security number, government-ID number, or financial account identifier), we will: notify you without unreasonable delay and no later than 60 days after determining a breach occurred; notify the Texas Attorney General within 30 days if 250 or more Texas residents are affected; notify the nationwide consumer reporting agencies if 10,000 or more individuals are affected at one time; and give you the information you need to protect yourself, including what data was involved and the protective steps available to you. Our internal incident-response procedures are maintained as part of our information security program.

Our services are for adults. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact privacy@tradelines.ai and we will delete it.

Our services are intended for U.S. residents in the states where we operate (see tradelines.ai/availability). Information is processed in the United States under U.S. law.

Material changes will be communicated to you by email at least 30 days before they take effect. The current version, with its effective date, is always available on the Site.

Email: privacy@tradelines.ai · Phone: (915) 593-9431
Mail: Learning Machines LLC, Attn: Privacy, 2267 Trawood Dr, Suite A-2, El Paso, TX 79935