Encrypted Connection
HTTPS / TLSThe hosted CSD website uses HTTPS/TLS for information sent between your browser and the site. Encryption in transit reduces interception risk but does not make any website or device perfectly secure.
Security & Privacy
Security and Data Protection Center
A plain-language explanation of this public website’s security practices and limitations.
Public information and consultation website
Do Not Send Sensitive Information Through Ordinary Channels
Do not email or paste Social Security numbers, government-ID images, passwords, credit-monitoring credentials, full payment-card numbers, complete credit reports, or unnecessary identity information into ordinary email, public contact forms, or ordinary chat. Use a secure CSD workflow only when CSD specifically provides one for the information requested.
Verified controls
How CSD protects its digital workflows
Credit Score Defenders LLC uses layered administrative, technical, and access-control safeguards designed to protect personal information and restrict unauthorized access. These safeguards also help reduce abuse, malicious uploads, and misuse of protected workflows. The descriptions below reflect controls implemented in the current CSD application and are not claims of perfect security or formal certification.
Protected Public Requests
Short-lived credentialsSelected public workflows require short-lived request credentials before protected backend actions are accepted. This helps reduce unauthorized direct calls to sensitive public endpoints.
Rate Limiting and Abuse Controls
Server-sideProtected public workflows use server-side request throttling and abuse controls designed to reduce automated flooding, repeated verification attempts, and high-volume submission abuse.
Restricted Administrative Access
Role-basedSensitive administrative records and protected owner workflows are limited to authenticated, verified administrative users through server-side authorization and entity access rules.
Upload Validation
Type and content checksSupported upload workflows restrict file types and verify that file contents match the declared format before processing. This reduces, but cannot eliminate, malicious-file and misclassification risk.
Protected-Feature Location Controls
U.S.-focusedProtected CSD features may apply United States access rules when reliable country metadata is available. Recognized search and social crawlers may be allowed for public discovery. Missing country metadata is handled cautiously to avoid blocking legitimate users solely because an upstream proxy omitted a country header.
Server-Side Security Controls
Selected protected functions return responses with restrictive security headers such as no-store caching directives, content-type protections, frame restrictions, referrer restrictions, permissions restrictions, and a restrictive Content Security Policy for JSON responses.
Security rules may block requests by configured IP address, country, or user-agent criteria. Security events can record blocked, rate-limited, and authorization-denied activity for administrative review.
These controls are defense-in-depth measures. No single header, filter, access rule, or location check is treated as a complete security boundary by itself.
Files, Documents, and Sensitive Records
CSD limits supported upload types by workflow. General secure uploads are restricted to supported document and image formats, while credit-report import workflows use supported PDF or HTML report formats.
File-extension and MIME declarations are not accepted blindly in hardened upload paths; supported workflows can compare the declared type with the actual file signature or content structure before accepting the file for processing.
A file passing these checks is not guaranteed to be harmless. Users should upload only documents they trust and that are necessary for the requested CSD workflow.
Third-Party Infrastructure and Services
CSD relies on third-party technology providers to operate portions of its infrastructure and services. Depending on the feature, this can include Base44 application infrastructure, Cal.com scheduling, Twilio communications where configured, consumer-selected credit-monitoring providers, and other service providers described in CSD's Privacy Policy.
Those providers operate their own systems. CSD cannot guarantee that a third-party service will always be available, error-free, or immune from security incidents. CSD limits its public representations to controls and configurations it can reasonably verify.
Safer Website and Portal Use
- Use the official CSD website and Client Portal links.
- Keep your browser, operating system, and device security updates current.
- Use a unique password and do not share account credentials.
- Verify the destination before entering information into a form.
- Avoid accessing sensitive account information on public or shared devices.
- Do not send identity documents or complete credit reports through ordinary email.
- Use a CSD secure upload or portal workflow when CSD specifically provides one.
- Report suspicious links, impersonation, account activity, or unexpected requests promptly.
Report a Security or Privacy Concern
Report suspected account compromise, impersonation, suspicious links, unexpected requests for sensitive information, or other security concerns to privacy@creditscoredefenders.com or call +1-877-311-5405.
Do not include passwords, Social Security numbers, full account numbers, complete credit reports, or identity documents in an initial ordinary-email report.
Privacy Rights and Data Requests
Security incident reporting is different from a privacy-rights request. To request access, correction, deletion, portability, an applicable opt-out, or an appeal, use the Privacy Rights Request workflow.
For more information about personal-information practices, review the Privacy Policy.
Security Limitations and No Certification Claim
No information system is 100% secure, immune from human error, or guaranteed to prevent every attack. This page does not claim that Credit Score Defenders LLC is unhackable, independently certified under a particular security standard, continuously penetration-tested by an outside firm, or subject to a completed third-party compliance audit unless CSD expressly publishes current evidence supporting that specific claim. Security controls and third-party services may change as the platform evolves.
Credit Score Defenders LLC · 418 Broadway, Suite 8270, Albany, NY 12207 · Monday–Friday, 8:30 a.m.–6:00 p.m. · Saturday, 9:00 a.m.–4:00 p.m. Eastern