Syntrove DISPUTE — Privacy Policy

Syntrove ("Syntrove," "we," "us," or "our" means Syntrove LLC and its subsidiaries and affiliates, collectively) operates a consumer report reinvestigation service on behalf of end-user clients that use consumer reports for permissible purposes under the Fair Credit Reporting Act, 15 U.S.C. § 1681 et seq. Syntrove DISPUTE is the consumer-affairs portal through which reinvestigations are submitted, processed, and resolved. When a business engages Syntrove for identity verification, background screening, or fraud-prevention services, your personal information reaches us through that business or directly through this portal.

Directly from you through this portal:

• Contact data: legal name, mailing address, email address, phone number.
• Identifiers used to match your consumer file: date of birth and last four digits of your Social Security Number.
• Dispute content: the category of dispute, furnisher or bureau involved, and the narrative you supply.
• Supporting documentation you upload (identification, court records, correspondence).
• Communications data based on your exchanges with our consumer-affairs team.

From third-party sources:

• Our end-user clients (such as the employer, landlord, lender, or insurer that ordered the underlying report).
• Public sources, including government agencies and public records.
• Data providers and information licensors used to construct or verify the consumer report at issue.

Automatically:

• Online activity and device data (pages viewed, timestamps, IP address, browser type, operating system) required to preserve the FCRA audit trail and to secure the portal.

• Service delivery: reinvestigate the dispute you submitted, notify the furnisher, and communicate the status and outcome as required by FCRA § 611.
• Compliance and protection: maintain the audit trail required by federal and state consumer-reporting law, respond to lawful requests and legal process, and protect our and others' rights, safety, and property.
• Security: detect and prevent fraud, including third-party impersonation, and enable authentication and access controls.
• Research and improvement: analyze and improve the portal and our reinvestigation workflow, including through aggregated or de-identified data.

We do not sell your personal information. We do not use dispute-portal information for marketing or interest-based advertising.

• The furnisher of the disputed information, so it can conduct its own investigation as required by FCRA § 611(a)(2).
• The consumer reporting agency or bureau involved, where applicable.
• The end-user client that received the underlying report, only to the extent needed to correct the record they received.
• Service providers acting on our behalf (secure hosting, information technology, email delivery, identity verification), bound by confidentiality and use limitations.
• Professional advisors, such as lawyers, auditors, and insurers, where necessary to the services they render to us.
• Authorities and others: law enforcement, government authorities, courts, and private parties as we believe in good faith is necessary or appropriate for the compliance and protection purposes above.
• Business transferees in connection with a corporate reorganization, merger, acquisition, or sale of assets.

We retain dispute records for a minimum of seven (7) years from the date the dispute is resolved, consistent with FCRA record-retention guidance and the audit needs of our end-user clients. Some records may be retained longer where required by law, litigation hold, or the client's contractual retention setting.

We employ technical, organizational, and physical safeguards designed to protect the personal information we collect, including TLS 1.2+ in transit, encryption at rest, role-based access limited to trained consumer-affairs analysts and platform administrators on a need-to-know basis, tenant-level isolation, and logged access. Security risk is inherent in all internet and information technologies, and we cannot guarantee the security of your personal information.

Syntrove is headquartered in the United States and may use employees and service providers that operate in other countries. Your personal information may be transferred to the United States or other locations where privacy laws may not be as protective as those in your state, province, or country.

This portal is not intended for use by children under 13. If we learn we have collected information from a child under 13 without appropriate consent, we will delete it.

You may request access to, correction of, or deletion of the personal information we hold about you, subject to FCRA and other legal record-retention obligations. Where a business engaged Syntrove as a service provider, some requests must be directed to that business. California, New York, and Colorado residents have additional rights described in our Summary of Your Rights Under the FCRA, including the right to know the categories and specific pieces of personal information collected, sources, purposes, and categories of third parties with whom information is shared, and the right to request deletion.

Some browsers may be configured to send "Do Not Track" signals. We currently do not respond to Do Not Track or similar signals.

We reserve the right to modify this Privacy Policy at any time. If we make material changes, we will notify you by updating the effective date above and posting the revised policy through this portal. Modifications take effect upon posting unless otherwise indicated.

• Dispute portal inquiries: consumeraffairs@syntrovedispute.com
• General privacy inquiries: info@syntrove.com
• Mail: Syntrove LLC, PO Box 11, South Park, PA 15129
• Phone: (855) 442-9400

To escalate a dispute you may also contact the Consumer Financial Protection Bureau at consumerfinance.gov/complaint, the Federal Trade Commission, or your state attorney general.