Security · Privacy · Compliance

Built right. Handled carefully.

You're trusting us with financial information about you and your business. Here's exactly how we protect it, what we do and don't do with it, and the rights you always keep.

TLS 1.2+
Transport encryption on every request
PCI DSS L1
Card data via Stripe (Level 1 processor)
GLBA-Aligned
Financial privacy framework applied
FCRA-Safe
Educational content, no credit-decisioning
501(c)(3) Partner
Nonprofit foundation ownership tie
US Data Residency
Servers and backups in the US

How We Protect You

Six non-negotiables

Encryption Everywhere

All traffic is TLS 1.2+ encrypted end-to-end. Passwords are stored as one-way bcrypt hashes — even our engineers can't read them. Sensitive fields at rest are AES-256 encrypted.

Consent-Based Data Only

We never pull your personal or business credit without your explicit written consent per pull. No soft pulls, no hard inquiries, no background triggers — you initiate every action that touches a bureau.

You Own Your Data

Every score, document, and assessment you enter belongs to you. Request a copy any time. Request permanent deletion any time — no retention traps.

Least-Privilege Access

Internal access to member data follows least-privilege principles. Staff access is scoped by role, logged, and auditable. No third party gets your data without a specific integration you enabled.

Payments Handled by Stripe

We never see, store, or touch your card number. All payments run through Stripe, a PCI DSS Level 1 certified processor. Cancel or dispute directly from your Stripe receipts.

Backups & Recovery

Databases are backed up continuously with point-in-time recovery. Your history — scores, assessments, growth plans — is safe from operational incidents.

What We Are

A financial technology platform

  • Software, education, and matchmaking tools for business owners
  • A pathway between you and the lenders/services you choose to work with
  • Owned by Smarter Choice Investment Holdings LLC, tied to the Millionaire Mindsetters Foundation 501(c)(3)
What We Are Not

Not a bank, not a lender

  • We don't originate loans or extend credit
  • We don't pull credit reports without your consent
  • We don't guarantee approvals, rates, credit limits, or funding outcomes
  • We don't currently furnish tradelines (that capability is coming soon, pending furnisher approval)
Your Rights

Always. No exceptions.

  • Request a full copy of your data
  • Request permanent deletion of your account and data
  • Correct inaccurate information you've provided
  • Opt out of marketing communications
  • Withdraw consent for any credit or bureau interaction
  • File a complaint with the FTC or your state Attorney General

To exercise any of these rights, email privacy@millionairemindsettersfoundation.org — we respond within 5 business days.

Report a Security Issue

Found a vulnerability or suspect suspicious activity on your account? Reach us privately — we treat every report seriously and respond within 24 hours.

security@millionairemindsettersfoundation.org

Read the Full Policies

Legal detail lives on our dedicated pages: privacy, terms, funding disclaimer, tradeline disclosure, and program agreement.

Smarter Choice Investment Holdings LLC is a financial technology company, not a bank or lender. Millionaire Mindsetters Foundation is a 501(c)(3) nonprofit organization. This page describes our operational practices as of the current build and may be updated. For legally binding language, always refer to our published Privacy Policy and Terms of Service.