Privacy Policy

Last updated: July 13, 2026

Lend-Line ("we", "us", "our") operates a customer-relationship management ("CRM") platform for commercial finance brokers and merchants. This Privacy Policy explains what information we collect, how we use and share it, and the rights you have. By using the service you agree to the practices described here.

1. Information we collect

• Account data — name, email, phone, company, role, hashed credentials, MFA state.
• Content you submit — merchants, leads, contacts, documents, bank statements, agreements, notes, tasks, and messages.
• Communications data — SMS, voice call metadata and recordings (where enabled by you), and email you send or receive through the platform.
• Billing data — plan, wallet balance, and payment records (processed by Stripe; we do not store full card numbers).
• Device & usage telemetry — IP address, user-agent, timestamps, and event logs used for security, audit, and product analytics.
• Third-party data you connect — data from Google, Twilio, and similar providers you authorize.

2. How we use your information

• Provide, secure, and operate the service you request.
• Route submissions to lenders, produce agreements, and generate PDFs on your behalf.
• Prevent fraud, abuse, and unauthorized access; investigate incidents.
• Comply with legal obligations, including the ESIGN Act, UETA, TCPA, and applicable state privacy laws.
• Improve product quality — always using the minimum data necessary and never selling personal data.

3. Legal bases

We process personal data to perform the contract with you, to comply with legal obligations, to protect our legitimate interests in operating and securing the platform, and — where required — with your consent (which you may withdraw at any time).

4. Sharing

We share data only with service providers acting on our behalf under written contracts (hosting, database, email/SMS/voice delivery, payments, error monitoring), with lenders or counterparties you explicitly direct us to submit to, and when required by law or to protect rights and safety. We do not sell personal information and we do not share it for cross-context behavioral advertising.

5. Retention

We retain records for as long as your account is active and for the period required to comply with legal, tax, audit, and regulatory obligations (including recordkeeping for signed agreements). You may request deletion of data not subject to a retention requirement.

6. Security

Data in transit is protected with TLS. Sensitive fields (such as bank account numbers, SSNs, and OAuth refresh tokens) are encrypted at rest using authenticated encryption. Access is scoped by role- and row-level policies, logged, and monitored. No system is perfectly secure; report suspected vulnerabilities to security@lend-line.com.

7. Your rights

Depending on your jurisdiction (including California CPRA, Virginia VCDPA, Colorado CPA, and the EU/UK GDPR) you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to appeal a denial. Submit requests to privacy@lend-line.com from the email on file. We will respond within the timeframe required by law.

8. Children

The service is not directed to children under 16 and we do not knowingly collect their data.

9. International transfers

Data may be processed in the United States and other jurisdictions. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

10. Changes

We may update this policy from time to time. Material changes will be announced in-app or by email.

11. Google API Services User Data Policy Disclosure

Lend-Line's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Gmail Restricted Scope Disclosure

Our CRM application requests access to the standard Google profile scopes alongside restricted Gmail permissions (gmail.readonly and gmail.send) to integrate email workflows directly into your CRM dashboard.

• How we access your data: We access your Gmail data solely through secure OAuth 2.0 user authentication tokens issued by Google. You may revoke access at any time in your Google Account or from within Lend-Line.
• How we use your data: Our app reads email headers and content to display, log, and organize customer interactions within lead timelines. Our app uses the gmail.send permission strictly to allow users to compose, send, and reply to customer emails directly from the CRM interface.
• How we store your data: Synchronized emails and OAuth tokens are encrypted and securely stored on our servers to maintain your CRM communication history.
• Data Sharing Restrictions: We do not sell, trade, or rent user data. No Google user data is shared with or transferred to third-party tools, advertising platforms, data brokers, or information resellers.
• Human Review of Data: We strictly prohibit human review of your Google user data unless we have obtained your explicit consent for troubleshooting, it is necessary for security purposes (such as investigating abuse), or to comply with applicable laws.
• No AI model training: We do not use Google user data to develop, improve, or train generalized AI or machine learning models.

12. Contact

Privacy requests: privacy@lend-line.com
Security reports: security@lend-line.com
General support: support@lend-line.com