Privacy Policy

Lend Engine, Inc. ("Lend Engine," "we," "us," or "our") operates the loan origination platform available at www.lendengine.ai and app.lendengine.ai (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website or use our Platform.

By accessing or using the Platform you agree to this Privacy Policy. If you do not agree, please discontinue use.

1. Information We Collect

We collect information you provide directly and information generated through your use of the Platform:

• Account information — name, email address, company name, phone number, and role when you register or are invited.
• Loan application data — property addresses, loan amounts, borrower financial information, and supporting documents submitted through the Platform.
• Usage data — pages visited, features used, actions taken, IP address, browser type, and device identifiers collected automatically via server logs and first-party analytics.
• Communications — messages sent through the Platform's messaging features and support requests.
• Payment information — billing contact details and the last four digits of payment cards processed by our third-party payment processor. We do not store full card numbers.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Platform and its AI-powered features.
• Process loan applications and generate underwriting reports on behalf of lender customers.
• Send transactional emails — including account invitations, password resets, loan status updates, document notifications, and billing receipts.
• Respond to support requests and communicate about your account.
• Monitor platform security, detect fraud, and enforce our Terms of Service.
• Comply with legal and regulatory obligations applicable to financial technology services.
• Produce aggregate, de-identified analytics about platform usage (these are never linked to individual users).

3. Email and Communication Practices

Lend Engine uses Amazon Web Services Simple Email Service (Amazon SES) to deliver transactional email. Our sending practices meet the following standards:

• Recipient consent — email is sent only to individuals who have registered for an account or been invited by a verified lender organization on the Platform.
• Content — messages are operational: invitations, password resets, loan status changes, document requests, draw approvals, and billing confirmations. We do not send bulk promotional campaigns.
• Unsubscribe and opt-out — every non-critical notification email includes a one-click unsubscribe link. Users may also manage notification preferences in their account settings or email privacy@lendengine.ai to be removed from all non-essential communications.
• Bounce and complaint handling — bounced addresses and spam complaints are automatically suppressed from future sends. We monitor our sender reputation and maintain bounce and complaint rates well below AWS SES thresholds.
• Sender identification — all emails clearly identify Lend Engine as the sender and include our physical mailing address in the footer.

4. Data Sharing and Disclosure

We do not sell your personal information. We share information only in the following circumstances:

• Service providers — third-party vendors (cloud infrastructure, email delivery, payment processing, identity verification) who process data on our behalf under contractual data processing agreements.
• Third-party integrations — credit bureaus, AVM providers, and title services accessed at the direction of a lender customer when processing a specific loan application.
• Legal requirements — when required by law, subpoena, or court order, or to protect the rights and safety of Lend Engine, our customers, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of all or a portion of our assets, with notice provided to affected users.

5. Data Security

We implement administrative, technical, and physical safeguards designed to protect your information, including:

• Encryption in transit (TLS 1.2+) and at rest (AES-256) for all stored data.
• Tenant-isolated databases — each lender organization's data is stored in a dedicated database instance.
• Multi-factor authentication required for all lender accounts.
• Role-based access controls limiting internal access to personal data.
• Ongoing SOC 2 Type II compliance program.

No transmission or storage system is perfectly secure. If you believe your account has been compromised, contact us immediately at security@lendengine.ai.

6. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Platform. Loan application records may be retained for up to seven years following loan origination or denial to satisfy applicable financial recordkeeping requirements. You may request deletion of your personal account data (excluding legally required financial records) by contacting privacy@lendengine.ai.

7. Your Rights and Choices

Depending on your location, you may have rights under applicable privacy law (including CCPA/CPRA for California residents and GDPR for EU/UK residents) to:

• Access, correct, or delete your personal information.
• Restrict or object to certain processing.
• Receive a portable copy of your data.
• Opt out of the sale of personal information (we do not sell personal information).

To exercise any of these rights, email privacy@lendengine.ai. We will respond within 30 days.

8. Cookies and Tracking

We use strictly necessary cookies to maintain your authenticated session and preferences. We do not use third-party advertising cookies or cross-site tracking technologies. Usage analytics are collected using first-party, privacy-preserving methods only.

9. Children's Privacy

The Platform is intended for business use by professionals 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted information through the Platform, contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email and update the "Last updated" date above. Continued use of the Platform after changes take effect constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: