Trust & Security — Platinum Credit Group

This page is maintained by Platinum Credit Group to answer common security and privacy questions about the PCG member platform. It describes practices and platform capabilities currently in use; it is not an independent certification or audit attestation.

Access & Authentication

Email/password and Google sign-in, with password reset over verified email.
Role-based access: members, partner staff, and administrators each see only what their role allows.
Row-level security is enforced in the database, so requests are scoped to the signed-in user even if a client bug occurs.
Privileged operations (admin actions, role changes) run server-side and verify the caller's role on every request.

Platform & Hosting

The application runs on managed cloud infrastructure with TLS in transit. Database, authentication, file storage, and server functions are provided by our managed backend platform. Shared responsibility applies: the platform secures the underlying infrastructure; PCG configures access policies, application logic, and the data we choose to collect.

Data We Collect

We collect only information needed to deliver the services you engage us for: contact and identity details, the credit and financial information you submit, and the documents you upload. See our Privacy Policy for the full list and how it is used.

Sensitive Data Handling

Business EIN values are stored encrypted at rest using symmetric encryption; reads go through an audited server function that logs access.
Uploaded documents are kept in a private storage bucket and served through short-lived signed URLs to the member or authorized staff.
Access to sensitive PII fields is logged for compliance review.

Subprocessors & Integrations

We share data with a small set of subprocessors strictly to operate the service: our managed backend/hosting provider, our payment processor, and email delivery. We do not sell personal information or share it for third-party advertising.

Retention & Deletion

Member data is retained for the life of your account and for the period required to meet legal, tax, and regulatory obligations. You may request export or deletion of your account data at any time by contacting us at the address below.

Cookies & Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising cookies that identify you personally.

Reporting a Security Issue

If you believe you've found a security vulnerability, please email admin@platinumcreditgroup.com with a description and steps to reproduce. Please do not publicly disclose the issue until we've had a reasonable opportunity to investigate and remediate.

Compliance Posture

PCG operates under CROA, FCRA, and applicable state credit-services laws — see Compliance. We do not claim SOC 2, ISO 27001, HIPAA, or PCI certification on this page; any such attestation, when available, will be linked here directly.