Privacy Policy

StayClearance LLC ("we," "us") provides a bankruptcy-clearance workflow platform for creditor teams. For data submitted to the platform by our customers (such as matter and debtor records), the customer is the data controller and StayClearance acts as a data processor on the customer's instructions. For website visitors and account holders, StayClearance is the controller.

• Account information: name, work email, organization, and role, provided when your organization creates your account.
• Matter data: business names, DBAs, guarantor names, addresses, balances, and (only where your organization supplies them) the last four digits of SSN/EIN identifiers. Full SSNs or EINs are never accepted or stored.
• Usage and audit records: actions taken in the product (clearance runs, reviews, exports, identifier access) with timestamps and IP addresses, kept as a compliance audit trail.
• Technical data: strictly-necessary cookies for sign-in and security. We do not use advertising or analytics cookies (see the Cookie Policy).

• To provide the service: running clearance checks, routing reviewer sign-off, generating certificates and reports.
• To secure the service: authentication, role-based access control, audit logging, and abuse prevention (including rate limiting).
• To support customers and communicate about the service.
• To comply with legal obligations.

We do not sell personal information and do not use it for advertising.

• Sensitive identifiers (SSN/EIN last-4) are encrypted at rest with AES-256-GCM and are shown only in masked form, only to roles with permission.
• Every access to sensitive identifiers is written to an audit log that users cannot edit.
• Data is isolated per organization; one customer's data is never visible to another.
• Access within StayClearance is limited to personnel who need it to operate the service.

We share information only with: (a) service providers who help us run the platform (such as our authentication and hosting providers), bound by confidentiality and data-protection obligations; (b) courts or authorities where required by law; and (c) a successor entity in a merger or acquisition, subject to this policy.

Account and matter data are retained while your organization's subscription is active and deleted or returned on termination, subject to legal holds. Audit-trail records are retained for the period your organization configures or the law requires; they exist precisely to prove what happened and when.

If you are in the European Economic Area or the United Kingdom, you have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent where processing is based on consent. You may also lodge a complaint with your supervisory authority. Where StayClearance processes data on behalf of a customer, we will refer your request to that customer and assist them in responding.

Legal bases we rely on: performance of a contract (providing the service), legitimate interests (security, audit, abuse prevention), and legal obligation.

California residents have the right to know what personal information we collect, to request deletion or correction, and to opt out of "sale" or "sharing." StayClearance does not sell or share personal information as those terms are defined by the CCPA/CPRA. We do not discriminate against anyone for exercising these rights.

Where personal data is transferred outside the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

We will post any changes to this policy on this page and update the effective date. Material changes will be notified to account administrators.

Questions about this document or our practices: admin@stayclearance.com