Your data, your call.

CreditMaxer is a credit coaching app for individuals in the United States. We help you understand and improve your credit profile by tracking utilization across your credit cards, planning AZEO (All Zero Except One) statement-cycle timing, surfacing payment due dates, advising on credit-limit-increase windows and loan decisions, and offering an educational score simulator. We are not a bank, a lender, a credit bureau, or a credit-repair organization.

The product is currently in private development. Today this website is a marketing site that does not collect personal information from visitors beyond what your browser sends with every request. As we open the dashboard to real users, the practices below are the ones we will follow.

CreditMaxer is operated by GuardianLive (“CreditMaxer,” “we,” “us,” “our”). For privacy questions, requests, or complaints, contact us at admin@guardianlive.com.

We collect only the information we need to coach you well, and we’re explicit about what comes from where.

Account information

When you create a CreditMaxer account, we collect your email address and a password (which we never store directly — authentication is handled by Supabase, our identity provider, using industry-standard hashing). You may also provide an optional phone number for SMS reminders, and a display name.

Connected financial accounts

When you choose to connect a credit card or loan account, CreditMaxer uses Plaid as our account aggregation provider. You authenticate directly with Plaid and your bank — your bank login credentials are never seen, transmitted to, or stored by CreditMaxer. From Plaid we receive:

• Account names, types, and account number masks (last four digits)
• Credit limits, current balances, and statement balances
• Statement close dates and payment due dates
• Minimum payments, APRs, and last payment information
• For installment loans: principal, interest rate, term, and origination date
• Transaction history when relevant to coaching (e.g., to verify a payment posted)

Credit score data

If you choose to connect an official credit score provider in a future release, CreditMaxer receives your score value, the model used (e.g., FICO 8), the bureau the score was sourced from, and the date it was generated. We label every score with its source and model so you always know what you’re looking at. Score consent is collected separately from account aggregation consent.

Coaching activity and content you create

Reminders you confirm or snooze, AZEO plans you accept, score simulator scenarios you save, statement-close dates you correct manually, credit-limit-increase requests you log, and any preferences you set on your account.

AI assistant activity

If you choose to use the in-app AI assistant, we process your chat messages and a minimized summary of your CreditMaxer data so the assistant can answer with context. We do not send bank login credentials, provider access tokens, full account numbers, or raw provider payloads to the assistant.

Device and usage information

When you use the site or the app, we automatically receive limited technical information: IP address, browser type and version, operating system, the pages and features you used, and timestamps. We use this to keep the service secure, debug problems, and understand which features people actually rely on. We do not currently use third-party analytics, advertising trackers, or behavioral profiling tools.

Cookies

We use a small number of strictly necessary cookies, primarily a session cookie set by Supabase to keep you signed in. We do not use advertising or cross-site tracking cookies.

We use the information described above to:

• Provide the coaching service: calculate utilization, generate AZEO plans, schedule reminders, run simulator scenarios, show next-eligible credit-limit-increase dates.
• Deliver reminders through your chosen channels (push notifications, email, SMS, in-app inbox).
• Authenticate you, keep your session secure, and prevent fraud and abuse.
• Communicate with you about service updates, changes to this policy, security alerts, and responses to your support requests.
• Improve the product, in aggregate. When we look at usage to decide what to build, we work with de-identified or aggregated data wherever possible.
• Comply with applicable law and respond to lawful requests.

We do not sell your personal information in the ordinary sense of that word, and we do not sell or rent your personal information for cross-context behavioral advertising. We do not use your financial data to train third-party machine-learning models, including when you use the AI assistant.

We share information only where we need to in order to operate the product, and only with vendors bound by contract to use the data solely on our behalf.

Service providers (subprocessors)

• Plaid— account aggregation. Plaid acts as a data conduit between you, your financial institutions, and CreditMaxer. Plaid has its own privacy policy that governs the data they receive.
• Supabase— authentication and encrypted database hosting. Your account, profile data, reminders, AZEO plans, simulator scenarios, and provider access tokens are stored in a Supabase Postgres database with row-level security enforcing per-user isolation.
• Vercel— web hosting and edge delivery for this website and the web application.
• Email and SMS providers— once notification delivery launches, we will use a transactional email provider and an SMS provider to deliver reminders you opt into. We will list the specific providers here when they’re wired in.

Legal and safety

We may disclose information when required by law, in response to valid legal process, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of CreditMaxer, our users, or the public.

Business transfers

If CreditMaxer is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you before personal information becomes subject to a materially different privacy policy.

You are in control of your data. You can:

• Access and correct the information in your account from the settings screen, or by emailing us.
• Export a machine-readable copy of your CreditMaxer data on request.
• Unlink a financial institutionat any time. Unlinking revokes the upstream Plaid item and removes our access to that institution’s data going forward.
• Delete your accountat any time. Deletion removes your profile, connected institution records, reminders, AZEO history, simulator scenarios, and any stored provider access tokens. See § 08 for retention details.
• Opt out of marketing communications at any time using the unsubscribe link in any marketing email or by emailing us. You cannot opt out of strictly transactional messages (e.g., security alerts, password resets) while you hold an active account.
• Choose which reminder channelsyou receive — push, email, SMS, in-app, or any combination.

We take reasonable and appropriate technical and organizational measures to protect your information.

• All traffic to and from CreditMaxer is encrypted in transit using TLS.
• Data at rest in our database is encrypted by Supabase.
• Provider access tokens (e.g., Plaid items) are never sent to the browser. They are held server-side, encrypted at the application layer, scoped per user, and revocable.
• Row-level security in Postgres enforces that one user can never read another user’s rows, even if application code has a bug.
• We log security-relevant events (sign-ins, account connections, deletions, data exports) to an audit table.

No system is perfectly secure. We will notify affected users without undue delay in the event of a breach that is reasonably likely to result in harm, consistent with applicable law.

We keep your information for as long as your account is active or as needed to provide the service.

• When you unlink an institution, we stop pulling new data and revoke the upstream token immediately. Historical records for that institution stay on your dashboard until you delete your account or specifically request deletion of that institution’s history.
• When you delete your account, we remove your personal information from our active systems within 30 days. Encrypted database backups roll off on a 90-day cycle, after which your data is irretrievable.
• We may retain de-identified or aggregated information indefinitely, and we may retain a minimal record of the fact that an account existed for fraud-prevention and audit-log purposes.
• Where applicable law requires longer retention (e.g., tax records, response to legal process), we will retain the affected information for the period required.

CreditMaxer is intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact admin@guardianlive.com and we will delete it.

CreditMaxer is currently designed for, and offered to, residents of the United States. Our infrastructure providers process data primarily in the United States. If you access the service from outside the United States, you do so on your own initiative and consent to your information being transferred to and processed in the United States.

Several U.S. states grant residents specific rights with respect to their personal information, including the right to know what we’ve collected, the right to a copy of it, the right to correction, the right to deletion, the right to opt out of certain processing, and the right not to be discriminated against for exercising these rights.

If you are a resident of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), or another state with similar protections, you may exercise these rights by emailing admin@guardianlive.com. We will verify your request and respond within the timeframes required by your state’s law.

CreditMaxer does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are defined under California law.

We will update this page when our practices change. If a change is material — for example, if we begin sharing information with a new category of partner, or change how long we retain data — we’ll notify users with active accounts by email and post a prominent notice here for at least 30 days before the change takes effect. The “Effective” and “Last updated” dates at the top of this page always reflect the current version.

Questions, requests, complaints, security reports? Email admin@guardianlive.com. We read every message and will respond within a reasonable time — and within the timeframe required by applicable law for requests that invoke a specific legal right.