Privacy Policy

Collection Goat™ ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and your rights regarding your data.

By using our website, software platform, or services (collectively, the "Services"), you agree to the terms of this Privacy Policy.

We collect the following types of personal information:

• Account Information: Name, email address, phone number, company/agency name, role, and password when you register for an account.
• Payment Information: Credit card details, billing address, and transaction history when you subscribe to our services or process payments through our platform.
• Debtor and Account Data: Information about debtors and accounts that you upload or input into our platform, including names, addresses, phone numbers, email addresses, social security numbers (last 4 digits), account balances, payment history, and communication records (calls, SMS, emails).
• Communication Data: Records of calls, SMS messages, emails, and chat conversations conducted through our platform, including recordings and transcripts.
• Usage Data: Information about how you use our Services, including IP address, browser type, device information, pages visited, features used, and time spent on our platform.
• Location Data: IP-based location information for security, fraud prevention, and compliance purposes.
• Cookies and Tracking Data: We use cookies, pixels, and similar technologies to track usage, remember preferences, and analyze platform performance.

We use your personal information for the following purposes:

• To Provide and Improve Our Services: Operate the platform, process payments, enable calling and messaging features, run AI-powered features (voice agents, letter generation, scoring), and improve functionality.
• To Communicate with You: Send account notifications, service updates, security alerts, billing reminders, and respond to your inquiries.
• For Compliance and Legal Obligations: Comply with federal and state debt collection laws (FDCPA, TCPA, FCRA), respond to legal requests, and enforce our Terms of Service.
• For Security and Fraud Prevention: Detect and prevent unauthorized access, abuse, and fraudulent activity.
• For Analytics and Research: Analyze usage patterns, measure performance, and conduct research to enhance our Services.
• For Marketing (with Your Consent): Send promotional emails, product updates, and other marketing communications. You may opt out at any time.

We may share your personal information with:

• Service Providers: Third-party vendors that help us operate our Services, including cloud hosting (Vercel, Supabase), payment processors (Stripe, NMI), telephony providers (RingCentral, SignalWire, Twilio, Vonage, Telnyx), AI services (Anthropic), email services (Resend), and analytics tools.
• Your Agency/Employer: If you are an agent or employee of a collection agency using our platform, your agency administrator and owner may access your account activity, performance data, and communication records.
• Creditor Clients: If you are a collection agency, your creditor clients may access portfolio data, payment history, and account status through our creditor portal.
• Legal and Regulatory Authorities: We may disclose information to law enforcement, regulators, or courts when required by law, legal process, or to protect our rights or the safety of others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

We do not sell your personal information to third parties.

Our platform enables you to send SMS messages and make phone calls to debtors and contacts. By using these features:

• You acknowledge that you are responsible for obtaining proper consent from recipients before sending SMS messages or making calls, in compliance with the TCPA and other applicable laws.
• SMS consent is not shared with third parties or affiliates. We do not share, sell, or rent your SMS consent information or the consent of your contacts to any third parties for marketing or other purposes.
• SMS and call records (including content, metadata, and recordings) are stored securely and may be accessed by your agency administrators and, where required by law, by Collection Goat for compliance, support, and platform improvement purposes.
• Message and data rates may apply to recipients. Standard carrier charges apply.

We take data security seriously and implement industry-standard measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Role-based access controls and multi-tenancy isolation
• IP whitelisting and two-factor authentication (2FA) options
• Regular security audits and monitoring
• Secure cloud infrastructure (Vercel, Supabase)

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

We retain personal information for as long as necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type:

• Account information: retained while your account is active and for up to 7 years after closure
• Call and SMS records: configurable retention (default: 7 years) per FDCPA and state requirements
• Payment records: retained for at least 7 years for tax and audit purposes
• Usage logs: retained for up to 2 years

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate or incomplete information
• Deletion: Request that we delete your personal information (subject to legal retention obligations)
• Opt-Out of Marketing: Unsubscribe from promotional emails at any time by clicking the "unsubscribe" link in our emails
• Restrict Processing: Request that we limit how we use your data
• Data Portability: Request a copy of your data in a machine-readable format

To exercise these rights, please contact us at privacy@collectiongoat.com.

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly.

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

Our Services are hosted in the United States. If you access our Services from outside the U.S., your information may be transferred to, stored, and processed in the U.S. or other countries. By using our Services, you consent to this transfer.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a notice on our website. Your continued use of our Services after such changes constitutes your acceptance of the updated Privacy Policy.

Our Find Clients feature uses the Google Places API to locate real businesses that may benefit from collection services. Your use of this feature is subject to Google's Terms of Service and Google's Privacy Policy, in addition to this Privacy Policy.

In accordance with Google Maps Platform policies, we do not cache or permanently store business names, phone numbers, websites, or addresses returned by the Places API. We store only the Google Place ID (a non-identifying reference number Google permits us to retain) along with our own internally generated notes and outreach content. Current business details are retrieved fresh from Google each time a saved lead is viewed, rather than stored in our systems.

For more information, see Google's Privacy Policy and Google Maps Platform Terms of Service.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: