Privacy Policy
This Privacy Policy explains how LoanStandard collects, uses, discloses, and protects personal information through our website, platform, applications, APIs, and related services.
1. Scope of This Policy
This Privacy Policy applies to personal information that LoanStandard collects:
- From users of the Platform.
- From visitors to our website.
- Through account registration, authentication, support, communications, and usage of the Platform.
- As part of operating, securing, supporting, and improving the Platform.
This Privacy Policy also describes how we process personal information contained in loan files or documents uploaded by our customers.
2. Customer Data and Our Role
Most loan file information processed through the Platform is provided by our customers.
Customers may upload or share documents and information relating to borrowers, guarantors, property owners, entities, lenders, brokers, title companies, appraisers, contractors, sellers, buyers, or other parties involved in a loan transaction.
For Customer Data, LoanStandard generally acts as a service provider or processor on behalf of the Customer. The Customer determines what data is uploaded, who may access it, and how it is used.
If you are a borrower, guarantor, consumer, or other individual whose information appears in a loan file, please contact the lender, aggregator, due diligence firm, capital provider, or other organization that collected or uploaded your information to exercise privacy rights or ask transaction-specific questions.
3. Information We Collect
We may collect the following categories of information.
A. Account and User Information
We collect information from users who create accounts or access the Platform, including:
- Name.
- Email address.
- Phone number.
- Company or organization name.
- Job title or role.
- User credentials or authentication identifiers.
- Assigned role and permission level.
- Workspace or organization membership.
- Invitation status and acceptance records.
B. Platform Usage Information
We collect information about how users interact with the Platform, including:
- Login events.
- Pages viewed.
- Loan files accessed.
- Documents viewed.
- Uploads and processing events.
- Comments and notes.
- Exception waivers and resolutions.
- Exports or download activity, where permitted.
- Access grants and revocations.
- Role changes.
- IP address.
- Device and browser information.
- Date, time, and session activity.
C. Customer-Uploaded Loan Information
Customers may upload or provide loan-related documents and data, which may include:
- Borrower names.
- Property addresses.
- Mailing addresses.
- Phone numbers.
- Email addresses.
- Government identification documents.
- Driver's licenses or passports.
- Social Security numbers or tax identification information.
- Bank statements.
- Proof of liquidity.
- Credit reports.
- Background checks.
- Entity documents.
- W-9 forms.
- ACH forms.
- Appraisals.
- Insurance documents.
- Title documents.
- Closing statements.
- Loan agreements.
- Promissory notes.
- Deeds of trust, mortgages, deeds, and security instruments.
- Guaranties.
- Diligence reports.
- Notes, comments, findings, and exception records.
The exact categories depend on what Customers upload or share.
D. AI-Generated and Extracted Information
The Platform may generate or store:
- Document classifications.
- Extracted fields.
- Confidence scores.
- Source quotes.
- Verification results.
- Exception findings.
- Cross-document consistency results.
- Loan summaries.
- Audit logs.
- Processing status and error messages.
E. Communications and Support Information
We collect information you provide when you contact us, request support, report bugs, schedule demos, submit forms, or communicate with our team.
F. Website Information
When you visit our website, we may collect:
- IP address.
- Browser type.
- Device information.
- Pages visited.
- Referral source.
- Cookies and similar tracking technologies.
- General usage analytics.
4. How We Use Information
We use personal information to:
- Provide, operate, and maintain the Platform.
- Authenticate users and manage accounts.
- Enforce role-based access controls.
- Process, organize, classify, extract, verify, and display loan documents.
- Generate summaries, findings, exceptions, reports, and exports.
- Support multi-tenant workspace functionality.
- Enable authorized sharing between organizations.
- Log activity for security, compliance, audit, and support purposes.
- Detect, investigate, and prevent unauthorized access or misuse.
- Debug errors and improve performance.
- Provide customer support.
- Send administrative, security, service, and account-related communications.
- Improve our Platform and develop new features.
- Comply with legal obligations.
- Enforce our Terms and agreements.
5. AI, OCR, and Automated Processing
- Identify document types.
- Segment loan packages into documents.
- Extract structured fields.
- Compare information across documents.
- Flag inconsistencies.
- Generate summaries or exceptions.
- Support document review workflows.
LoanStandard may use AI, machine learning, OCR, document parsing, natural language processing, or similar technologies to process Customer Data.
LoanStandard does not use AI Outputs as a final legal, credit, underwriting, or investment decision. Customers and users are responsible for reviewing AI Outputs before relying on them.
6. How We Disclose Information
We may disclose information as described below.
A. To Customers and Authorized Users
We disclose Customer Data and related information to users authorized by the Customer or Organization.
This may include internal users, external users, diligence reviewers, aggregators, capital providers, or other parties granted access by the Customer.
B. To External Users Invited by Customers
A Customer may invite External Users to access specific loan information.
External Users may be required to accept confidentiality and authorized-use obligations before accessing shared information.
Their access and activity may be logged.
C. To Service Providers
We may disclose information to service providers that help us operate the Platform, such as:
- Cloud hosting providers.
- Authentication providers.
- Database and storage providers.
- AI and OCR providers.
- Logging and monitoring providers.
- Email and communication providers.
- Customer support providers.
- Security providers.
- Analytics providers.
- Professional advisors.
Service providers are permitted to use information only as necessary to provide services to LoanStandard, subject to appropriate contractual obligations.
D. For Legal and Compliance Purposes
We may disclose information if we believe disclosure is necessary to:
- Comply with law, subpoena, court order, legal process, or government request.
- Protect rights, safety, security, or property.
- Investigate fraud, misuse, or unauthorized access.
- Enforce agreements.
- Respond to security incidents.
- Protect LoanStandard, Customers, users, borrowers, or third parties.
E. Business Transfers
If LoanStandard is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, information may be transferred as part of that transaction, subject to appropriate confidentiality and legal protections.
F. Aggregated or De-Identified Information
We may use and disclose aggregated or de-identified information that does not identify a specific individual, borrower, Customer, or loan file.
7. We Do Not Sell Personal Information
LoanStandard does not sell personal information in the ordinary meaning of that term. LoanStandard does not use borrower loan file information for cross-context behavioral advertising. If this changes, we will update this Privacy Policy and provide any required notices or choices.
8. Cookies and Similar Technologies
We may use cookies, local storage, session storage, pixels, analytics tools, and similar technologies to:
- Keep users logged in.
- Remember preferences.
- Secure accounts.
- Understand website usage.
- Improve performance.
- Detect abuse or fraud.
Users may be able to manage cookies through browser settings. Disabling cookies may affect Platform functionality.
9. Data Security
- Encryption in transit.
- Encryption at rest.
- Role-based access controls.
- User authentication.
- Audit logging.
- Access monitoring.
- Cloud infrastructure security controls.
- Secure software development practices.
- Secrets management.
- Environment separation.
- Vendor security controls.
LoanStandard uses reasonable administrative, technical, and organizational safeguards designed to protect personal information and Customer Data.
No system can be guaranteed to be completely secure. If you believe your account or information has been compromised, contact us immediately at security@loanstandard.io.
10. Data Retention
We retain information for as long as reasonably necessary to:
- Provide the Platform.
- Comply with customer agreements.
- Support audit, security, and compliance requirements.
- Resolve disputes.
- Enforce agreements.
- Comply with legal obligations.
- Maintain backups and business records.
Customer Data retention may be governed by the Customer's agreement, configuration, or instructions.
Some logs, audit records, backups, and security records may be retained for a longer period where reasonably necessary.
11. Access Controls and Audit Logs
- Security.
- Auditability.
- Access verification.
- Compliance support.
- Customer reporting.
- Dispute resolution.
- Incident investigation.
The Platform may record user access and activity, including pages viewed, documents opened, comments, notes, exports, uploads, exception decisions, waivers, and other actions.
By using the Platform, users acknowledge that their activity may be logged and reviewed by LoanStandard and authorized Customer administrators.
12. Privacy Rights
Depending on where you live, you may have rights regarding your personal information, including rights to:
- Access personal information.
- Correct personal information.
- Delete personal information.
- Receive a copy of personal information.
- Object to or restrict certain processing.
- Opt out of certain disclosures or processing, where applicable.
- Limit use of sensitive personal information, where applicable.
- Not be discriminated against for exercising privacy rights.
Because LoanStandard often processes Customer Data on behalf of Customers, we may refer requests relating to loan file information to the relevant Customer.
To submit a privacy request, contact privacy@loanstandard.io.
We may need to verify your identity before fulfilling a request.
13. California Privacy Notice
- Identifiers, such as name, email address, IP address, mailing address, phone number, government ID information, or account identifiers.
- Customer records information, such as financial information, bank account information, tax forms, loan documents, identity documents, or other records.
- Protected classification information, if included in uploaded documents.
- Commercial information, such as loan transaction information or service usage.
- Internet or network activity information, such as login activity, pages viewed, device information, and audit logs.
- Geolocation information, limited to approximate location from IP address.
- Professional or employment-related information, such as job title, company, or business role.
- Sensitive personal information, such as Social Security numbers, driver's license numbers, financial account information, and authentication credentials, if included in Customer Data or account records.
- Inferences generated from documents or activity, such as document classifications, confidence scores, or verification findings.
This section applies to California residents where the California Consumer Privacy Act, as amended, applies.
In the preceding 12 months, LoanStandard may have collected the following categories of personal information:
We collect and use these categories for the purposes described in this Privacy Policy.
We disclose these categories to service providers, Customers, authorized users, and other parties as described in this Privacy Policy.
We do not sell personal information or share personal information for cross-context behavioral advertising.
California residents may submit privacy requests by contacting privacy@loanstandard.io.
14. Sensitive Personal Information
The Platform may process sensitive personal information contained in Customer Data, including financial information, identity documents, government identifiers, bank statements, credit reports, background materials, tax information, and related loan diligence materials.
LoanStandard processes sensitive personal information only as necessary to provide, secure, support, improve, or comply with obligations related to the Platform, or as otherwise permitted by law.
15. Children's Privacy
The Platform is intended for business use and is not directed to children under 13.
We do not knowingly collect personal information from children under 13.
If we learn that we have collected personal information from a child under 13, we will take appropriate steps to delete it.
16. International Users
LoanStandard is currently intended primarily for use in the United States.
If you access the Platform from outside the United States, your information may be processed in the United States or other jurisdictions where our service providers operate.
Different jurisdictions may have different data protection laws.
17. Third-Party Links and Services
The Platform or website may contain links to third-party websites, services, or integrations.
LoanStandard is not responsible for the privacy practices of third parties.
You should review their privacy policies before providing information to them.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
If we make material changes, we may notify users through the Platform, by email, or by other reasonable means.
The updated Privacy Policy will be effective when posted or as otherwise stated.
19. Contact Us
Questions or requests regarding this Privacy Policy may be sent to:
LoanStandard, Inc. 3225 Fieldcrest Terrace Deltona, FL 32725 Email: privacy@loanstandard.io
Security concerns may be sent to: security@loanstandard.io