Privacy Policy

1.Information We Collect

Account Information

• Your email address and a password. The password is kept only as a one-way hash, so we cannot read it
• When you signed up and when you last logged in
• Login session records: a hashed session token and its creation and expiry times

Chats

• The messages you send and the replies you receive, and a chat title taken from your first message

Loan Documents and What We Read From Them

When you upload a Loan Estimate or Closing Disclosure, we process the PDF and what it contains. These forms carry personal and financial details, which can include:

• Borrower and co-borrower names, the property address, and the lender and settlement agent details
• Loan amount, interest rate, APR, monthly payment, fees, closing costs, dates, and loan features
• A record of each file: its name, size, a checksum, the form type we detected, how it was read, and its page count
• What we extract from it: each loan field with its value, our confidence in it, and the page it came from, plus the results of our checks and the analysis we give you

“What can I afford?” calculator

The calculator asks for figures such as home price, down payment, monthly income, monthly debts, HOA dues, rate, loan term, loan type, and Social Security or pension income. We use them to work out your result when you ask. We do not save them in our database.

Payment Information

Payments are taken on a checkout page hosted by Stripe. We never see or store your full card number. We keep a record of each payment: the amount, currency, status, Stripe’s identifiers for the checkout, and the time.

Usage Data

• IP address, browser and device type, and request logs that our hosting providers create when you use Loanlens, used to keep the service secure and to fix problems

We do not use analytics or advertising trackers.

2.How We Use Information

• Create and secure your account, and keep you logged in
• Read the documents you upload, show you the fields we extracted, run our rule checks, and give you your analysis
• Answer your questions in chat, including follow-up questions about your analysis
• Process your payment and start the analysis you paid for
• Show you your past chats and analyses
• Prevent abuse, such as repeated failed logins, and debug and improve Loanlens
• Respond to support, privacy, deletion, and legal requests

We do not sell your information, use it for advertising, or use your documents to train our own models. We do not share your documents, extracted fields, or analyses with lenders, brokers, or anyone else you have not chosen.

3.AI Processing

Loanlens uses AI models to read documents and to write text. In practice:

• To read a document, we first use the text inside the PDF. Where needed, images of the pages are sent to a vision model that returns the loan fields
• To answer your chat messages, your messages and the results of our checks (verdicts and figures) are sent to a text model. Page images are not sent for this
• We do not send your password to any model

We reach these models through OpenRouter, which passes requests to the company that runs the model. Those providers process requests under their own terms and may keep logs for a limited time. AI can make mistakes: before you pay, you can look at every field we extracted and compare it to your document.

4.Sharing of Information

We do not sell your personal information. We share information only when necessary:

• With service providers that host Loanlens, store its data, take payments, and run the AI models, as listed in our Data Processing Policy
• With Stripe, when you pay for an analysis
• With Resend, which sends you the emails we send: confirming your address, and resetting your password
• When required by law, regulation, court order, or a valid government request
• To protect Loanlens, our users, or the public from fraud, abuse, security threats, or rights violations
• If Loanlens is involved in a merger, acquisition, or sale of assets, in which case we will tell you and this policy will keep applying to your information

5.Cookies and Tracking

Loanlens sets one essential cookie, ll_session, to keep you logged in. It is HttpOnly (page scripts cannot read it), SameSite=Lax, and marked Secure on HTTPS. It lasts up to 30 days or until you log out. We use no analytics or advertising cookies. If that changes, we will update this policy and ask for your consent where the law requires it.

6.Data Retention and Deletion

• Uploaded PDFs are deleted as soon as they have been read, and in any case when you delete the chat they belong to. We do not keep a copy of the PDF.
• Extracted fields, check results, analyses, and chat messages stay in your account until you ask us to delete them. This includes borrower names, addresses, and loan figures, so please treat your account as holding personal data.
• Your account stays until you ask us to delete it.
• Payment records may be kept for as long as we need them for accounting, tax, and legal reasons. Stripe keeps its own records under its own policies.
• Copies in backups and logs held by our providers are removed on their normal schedules.

To delete a chat, your documents’ data, or your whole account, email support@loanlens.example from the address on your account. Deleting a chat removes every record we hold about it: its messages, documents, extracted fields, check results, and analysis. We act on deletion requests within 30 days.

7.Security

We use reasonable technical and organizational measures to protect information: passwords are hashed with argon2id, session tokens are stored only as hashes, connections use HTTPS, every request is limited to the signed-in user’s own data, failed logins are throttled, and uploaded PDFs are not kept after reading. No online service can guarantee absolute security. Please use a strong, unique password.

8.Your Rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the use of your information, to withdraw consent where we rely on it, and to complain to a data protection authority. To exercise these rights, contact us at support@loanlens.example. We may need to confirm it is you before we act, and we reply within 30 days.

9.Third-Party Services

Loanlens relies on Stripe for payments, Resend for the emails we send you, OpenRouter and the model providers behind it for AI, and cloud providers for hosting and storage. Their own terms and privacy policies apply to what they handle. Loanlens is not affiliated with or endorsed by any lender, the Consumer Financial Protection Bureau, or any government agency.

10.Children’s Privacy

Loanlens is for adults. It is not directed at anyone under 18 and we do not knowingly collect personal information from them. If we learn that we have, we will delete it promptly.

11.International Data Transfers

Our providers may store or process your information in the United States and other countries, which may be outside your country of residence. We take reasonable steps to protect information in line with this Privacy Policy and applicable law.

12.Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes become effective when posted on this page, and the “Last Updated” date above will change.

13.Contact Us

Loanlens
Email: support@loanlens.example