Privacy Policy

1. Introduction

LoanThink, LLC ("LoanThink", "we", "us") operates the platform available at loanthink.tech (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Platform.

By accessing or using the Platform, you agree to the practices described in this Policy. If you do not agree, please do not use the Platform.

2. Information We Collect

Information you provide directly:

• Name, email address, and password when you register
• Loan application details: property address, loan type, requested amount, estimated credit score, investment history
• Documents you upload (identification, financial statements, property appraisals)
• For lenders: company name, NMLS number, website, underwriting criteria

Information collected automatically:

• Usage data: pages visited, actions taken, timestamps
• Device data: browser type, operating system, IP address
• Session cookies necessary to maintain your login state

3. How We Use Your Information

• Matching borrowers with lenders — our matching engine uses your application details to identify relevant lenders.
• Platform communications — we send you notifications about your application status, match results, and term sheet requests.
• Verification and compliance — we use uploaded documents to verify identities and assess risk as required by applicable law.
• Service improvements — we analyze usage patterns to improve the Platform.
• Marketing communications — only if you have opted in. You may unsubscribe at any time.
• Legal obligations — complying with court orders, applicable regulations, and fraud prevention.

4. How We Share Your Information

We do not sell your personal information. We may share it in the following ways:

• With matched lenders — your contact details are not shared with a lender until that lender explicitly indicates interest and you proceed through the process. Before that point, lenders see only deal details, not your contact information.
• Service providers — Supabase (database and authentication), Resend (transactional email), Vercel (hosting), Anthropic (AI document analysis). Each operates under its own data processing agreement.
• Legal compliance — when required by law, court order, or valid legal process.
• Business transactions — in the event of a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

5. Data Security

We implement reasonable technical and organizational safeguards, including:

• Encryption in transit (TLS) and at rest for all stored data
• Row-level security in our database — each user can only access their own data
• Secure authentication managed by Supabase Auth
• Limited employee access to production data

No system is completely secure. If you believe your account has been compromised, contact us immediately at support@loanthink.tech.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the service. You may request deletion of your account at any time; data will be deleted within 30 days, except where retention is required by law (e.g., financial records for 7 years under IRS regulations).

7. Your Rights

Depending on where you reside, you may have the following rights:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request that we delete your personal data ("right to be forgotten").
• Portability — receive your data in a structured, machine-readable format.
• Objection / Restriction — object to or restrict certain types of processing.

To exercise any right, contact us at support@loanthink.tech. We will respond within 30 days.

California Residents (CCPA): you have the right to know, delete, and opt out of the sale of personal information. We do not sell personal information. For California privacy requests, contact us at the address above.

8. Cookies

We use strictly necessary session cookies to maintain your login state. We do not use third-party tracking cookies, advertising pixels, or behavioral analytics tools. You may disable cookies in your browser settings, but this will prevent the Platform from functioning properly.

9. Children’s Privacy

The Platform is not directed to individuals under 18. We do not knowingly collect personal information from minors. If you believe we have collected such information, contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Policy periodically. We will notify you by email and/or a prominent notice on the Platform before changes take effect. Your continued use of the Platform after such notice constitutes your acceptance of the updated Policy.

11. Contact Us

LoanThink, LLC
Email: support@loanthink.tech