Trust & Security

Access & Authentication

• Email/password and Google sign-in, with password reset over verified email.
• Role-based access: members, partner staff, and administrators each see only what their role allows.
• Row-level security is enforced in the database, so requests are scoped to the signed-in user even if a client bug occurs.
• Privileged operations (admin actions, role changes) run server-side and verify the caller's role on every request.

Platform & Hosting

The application runs on managed cloud infrastructure with TLS in transit. Database, authentication, file storage, and server functions are provided by our managed backend platform. Shared responsibility applies: the platform secures the underlying infrastructure; PCG configures access policies, application logic, and the data we choose to collect.

Data We Collect

We collect only information needed to deliver the services you engage us for: contact and identity details, the credit and financial information you submit, and the documents you upload. See our Privacy Policy for the full list and how it is used.

Sensitive Data Handling

• Business EIN values are stored encrypted at rest using symmetric encryption; reads go through an audited server function that logs access.
• Uploaded documents are kept in a private storage bucket and served through short-lived signed URLs to the member or authorized staff.
• Access to sensitive PII fields is logged for compliance review.

Subprocessors & Integrations

We share data with a small set of subprocessors strictly to operate the service: our managed backend/hosting provider, our payment processor, and email delivery. We do not sell personal information or share it for third-party advertising.

Retention & Deletion

Member data is retained for the life of your account and for the period required to meet legal, tax, and regulatory obligations. You may request export or deletion of your account data at any time by contacting us at the address below.

Cookies & Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising cookies that identify you personally.

Reporting a Security Issue

If you believe you've found a security vulnerability, please email admin@platinumcreditgroup.com with a description and steps to reproduce. Please do not publicly disclose the issue until we've had a reasonable opportunity to investigate and remediate.

Financial Intelligence Methodology

Every deliverable follows the same path: data → automated analysis → findings → recommendations → professional review → your decision. Analysis is AI-assisted; paid deliverables are reviewed by our staff before delivery. Automated analysis does not make legal determinations, and no deliverable promises a score increase, a deletion, a funding approval, or any other outcome. Downstream services are optional, separately priced, and governed by their own written agreement.

Security-Control Maturity

PCG does not hold a SOC 2, ISO 27001, PCI, or HIPAA report or certification, and we do not represent ourselves as certified or compliant with any of them. Internally we are developing and documenting security controls with SOC 2 readiness as a goal; no independent examination has been performed. If an attestation is ever issued, it will be linked from this page and named with its report type and period. We publish no compliance badges.

Your Responsibilities

• Use a unique, strong password and keep your email account secure.
• Upload only documents you are authorized to share.
• Tell us immediately if you suspect unauthorized access to your account.

Security & Compliance Center

• Privacy Policy — what we collect, why, and your rights.
• Terms of Service — platform use terms.
• Services Agreement — service terms and required disclosures.
• Compliance — CROA, FCRA, and state credit-services disclosures.
• Pricing — current published prices and billing terms.

Compliance Posture

PCG operates under CROA, FCRA, and applicable state credit-services laws — see Compliance. See “Security-Control Maturity” above for our attestation status.