Security
Is Creditpal secure? Here is our posture
Creditpal is built to be the lowest-risk way to understand your credit. We connect with least-privilege, read-only access, we encrypt your data in transit and at rest, and we never move money, open accounts, or change anything about your credit.
In short
Yes. Creditpal uses read-only access to see your credit profile, so it can explain what is affecting your credit and build a plan. It cannot move money, open or close accounts, file disputes, or take any action on your behalf, and it cannot touch your cards. Data is encrypted in transit and at rest, access is least-privilege and scoped, and you can revoke it at any time.
Security posture
Read-only by design, money-neutral on purpose
Every choice below is made so you can connect Creditpal without handing anyone the ability to move money, open accounts, or change your credit.
Read-only access
We request read-only access to your credit profile and nothing more. Creditpal cannot open or close an account, file a dispute, or change anything about your credit. It reads, it explains, you decide what to do.
We never move money
Creditpal holds no funds, processes no payments, and stores no card numbers. There is no payment rail and no checkout. It is an assistant, not an actor, so even a worst-case compromise cannot spend a dollar of yours or open anything in your name.
Encryption in transit and at rest
All data is encrypted in transit with TLS and encrypted at rest. Access tokens are stored encrypted and are never exposed in logs or to other accounts.
Least-privilege, scoped access
Connections use scoped, least-privilege access with the narrowest permissions that still let us read your credit profile. We do not ask for write access we do not need.
Revoke access anytime
You can disconnect and revoke our access at any moment. Access is yours to grant and yours to remove.
No lender ads, no data sales
We are not a lender and we do not show lender ads or sell your data. We do not steer you toward any product. Creditpal is educational guidance only.
Scope
What we read, and what we never do
What we read
- Your accounts and balances, read-only
- Payment history and credit utilization
- Account age and credit mix
- Recent inquiries, so we can explain what is affecting your credit
What we never do
- Move money, make payments, or hold funds
- Touch, store, or charge your cards
- Open or close accounts, or take any action on your behalf
- File disputes or deletions, or request write access we do not need
Creditpal is read-only, educational guidance only, not financial, credit-repair, or legal advice. Everything it suggests is for you to review and decide on. For your rights and free reports, see annualcreditreport.com and the CFPB.
Security questions
The questions people ask first
It is read-only. We never move money, never open or close accounts, and never make changes on your behalf. Creditpal only reads your credit profile and explains it. You stay in control, and you can revoke access at any time.
No. Creditpal uses a soft view of your credit, which does not affect your score no matter how often you check. A hard inquiry, the kind a lender runs when you apply for credit, can lower your score slightly. Creditpal never does that.
No, and anyone who guarantees you an exact number is a red flag. Credit depends on your own situation and the bureaus. Creditpal gives educational guidance and directional estimates with the reasoning, so you understand the likely direction of a change, not a promise.
Never. Creditpal is not a lender and sells no financial products. There are no lender ads, no affiliate card offers, and no loans pushed on you. You get a plain-English explanation and a plan, and that is all.
More on what we read, what we never do, and how the plan works on the full FAQ.
The lowest-risk way to understand your credit
Connect read-only and see what is affecting your credit, in plain English. We never move money or open accounts, and you can revoke access anytime.