Settle Technologies, Inc. (“Settle,” “we,” “us”) operates a settlement network and the software that runs it: the consumer app, the creditor and debt-resolution partner portals, and this website. This policy explains what we collect, how we use and protect it, who we share it with, and the choices and rights you have. Protecting your information is core to how Settle is built — see our Security & trust overview for the technical detail.
1. Information we collect
- Account information — name, email, phone, and the credentials you create.
- Identity information — to verify you and to pull credit at your request, we collect identifiers such as address, date of birth, and the last four digits of your Social Security number. We do not store your full SSN.
- Debt & account information — creditors, balances, account status, and the offers and settlements you make. Account numbers are stored masked.
- Financial connections — when you link a bank through our provider (Plaid), we receive limited balance and routing details needed to show balances and move authorized payments. We store a secure token, not your bank login or account/routing numbers. Card payments are tokenized by our payment processor; we never receive your full card number.
- Partner / organization information — for creditors, debt-resolution firms, and partners: business contact details, organization settings, and the records exchanged over the network.
- Communications & consents — messages you send us and the consents and authorizations you grant (recorded with timestamp).
- Usage & device data — log, device, and interaction data used to keep the service secure and working.
2. How we use information
- To provide the service — stage accounts, prepare and certify offers, route them over the network, and track settlements.
- To coordinate authorized payments through our licensed escrow and banking partner — funds are released to a creditor only on your authorization. Settle never takes custody of your money.
- To pull and monitor credit only under your written authorization (FCRA permissible purpose).
- To verify identity and prevent fraud, and to keep the platform secure.
- To communicate with you about your account, and — only with your consent — about products and offers.
- To comply with legal, regulatory, and recordkeeping obligations.
3. How we protect information
We minimize what we collect, encrypt sensitive data in transit (TLS) and at rest (AES-256-GCM), restrict access on a need-to-know basis, and log access for accountability. We never store raw secrets — full SSN, bank account or routing numbers, card numbers, bank logins, or ID documents stay with the regulated providers that custody them; we keep a token. Details are in our Security & trust page and whitepaper.
4. How we share information
We do not sell your personal information. We share it only as needed to run the service:
- Your creditors and their authorized agents — when you make an offer, the information necessary to identify the account and process your offer is shared with the recipient you are settling with.
- Service providers (subprocessors) — vetted providers for bank connectivity, payments, escrow/banking, credit data, identity verification, messaging, email, hosting, and storage. Each receives only the minimum it needs. The current list is in our whitepaper and data-processing addendum.
- Legal & safety — to comply with law, enforce our terms, or protect rights, safety, and security.
- Business transfers — in connection with a merger, financing, or sale, subject to this policy.
5. Your choices & rights
- Access, correction, deletion — you may request a copy of your personal information, ask us to correct it, or ask us to delete it, subject to legal retention requirements.
- Consent — you authorize every offer and payment; consents (including credit-pull authorization and messaging) are revocable.
- Marketing — opt out of marketing email anytime; reply STOP to opt out of texts.
- California & other states — residents of California (CCPA/CPRA) and other states with privacy laws have rights to know, access, correct, delete, and opt out of certain processing, and not to be discriminated against for exercising them. We do not sell or “share” personal information for cross-context behavioral advertising.
To exercise any right, contact [email protected].
6. Retention
We keep information only as long as needed to provide the service and meet legal and recordkeeping obligations, then delete or anonymize it. Compliance records (such as consents and authorizations) are retained for their required period.
7. Children
Settle is for adults (18+) and is not directed to children. We do not knowingly collect information from anyone under 18.
8. Changes
We’ll post any updates here and revise the “last updated” date; material changes will be communicated to you directly where required.
9. Contact
Settle Technologies, Inc. · Santa Barbara, CA · [email protected] · (800) 721-1280. See also our Terms.