Privacy Policy

We provide software to business customers (for example, ISOs and brokers) who use Lead Agentto collect and manage leads. Those customers' end users (applicants) may submit information through a flow that the broker makes available (such as an embedded experience on the broker's site). This policy covers our processing as a service provider to the broker and our own account and operational data.

The broker you interact with may have its own privacy notice explaining how they use applicant data. Where they control the relationship with the applicant, they may also be responsible for certain notices and choices under applicable law.

• Broker account data: such as name, email, company name, authentication identifiers, and settings you provide when you register or use the dashboard.
• Lead and application data: information submitted through the conversational flow or forms, which may include business and personal details, contact information, and similar fields needed to qualify and complete an application.
• Documents: files applicants upload (for example bank statements, identification, tax documents, or voided checks) stored so the broker can review them in the product.
• Billing data: subscription and payment information is processed by our payment processor (Stripe). We do not store full payment card numbers on our servers.
• Communications and notifications: if you enable email notifications, we send messages through our configured email provider using the addresses you supply.
• Technical and diagnostic data: information needed to run and protect the service, including standard logs (for example IP address, device/browser type, and timestamps) and error and stability telemetry sent to our monitoring vendor (Sentry), which may include error payloads, route or URL identifiers, and performance traces. Where Session Replay is enabled for a subset of sessions, Sentry may capture a screen-like recording that can include text or fields visible in the UI at the time of capture. We configure monitoring to reduce unnecessary sensitive data, but you should treat highly sensitive screens the same way you would on any hosted SaaS product. Product usage may also be measured with Vercel Analytics. Retention follows our practices below and our vendors' settings.

• Provide, operate, maintain, and improve Lead Agent.
• Authenticate users, enforce plan limits, and protect against abuse and fraud.
• Run conversational and document-related features, including automated checks that help brokers review submissions.
• Process billing and communicate about your account or the service.
• Offer optional exports that help brokers share application packages more safely when appropriate—for example a censored ("anti-backdoor") loan application PDF from the lead workspace that reduces certain direct merchant contact fields when you choose that download option. This is a convenience feature and does not guarantee how recipients use shared files.
• Comply with law and respond to lawful requests, where applicable.

Certain features use third-party AI models to interpret chat messages, extract structured fields from user input, and analyze uploaded documents (for example to support verification summaries). Content you or applicants submit may be sent to those providers only as needed to provide the feature. We do not use that content to train our own models unless we separately notify you and obtain any consent required by law.

We use industry-standard vendors who process data on our behalf, including for hosting, infrastructure, database and authentication, file storage, payments, email delivery, AI inference, caching, rate limiting, product analytics, and error monitoring. As of the last update date below, this includes (without limitation) Vercel (hosting and deployment), Vercel Analytics (traffic and product analytics), Supabase (database, authentication, and file storage), Stripe (payments and billing), OpenAI (AI inference for supported features), Upstash (Redis used for caching and rate limiting), Sentry (errors, performance diagnostics, and optional Session Replay as described above), plus your configured SMTP email provider. We may update this list as our stack evolves; material changes will be reflected in future updates to this page or separate notices where required.

Leads and application packages collected through your Lead Agent experience are associated with your broker account. You remain the relationship owner with your applicants subject to your own notices and agreements.

We are a software company, not a data resale company. Our business is subscription fees for Lead Agent. We do not operate a marketplace that resells or syndicates your leads to other brokers, and we do notsell or rent lists of your applicants to third parties for their independent marketing or lead-generation businesses. We do not monetize your book by "backdooring" your relationships for our own commercial use.

Operator access. Like any serious hosted product, a small number of authorized people may access production systems when needed to keep the service secure and reliable, to debug serious incidents, or to meet legal obligations. That access is not intended for routine browsing of your lead contents as a commercial activity—see our Security overview for a plain-language summary of how we think about internal tools and access.

We retain broker account data and associated lead records for as long as your account is active and as needed to provide the service, comply with law, resolve disputes, and enforce our agreements.

Brokers may delete individual leads from the dashboard where the product supports it. Deleting a lead removes that record (and associated documents where applicable) from the product in the ordinary course, but plan usage counters (such as applicable plan usage allowances) may continue to reflect cumulative usage for billing and enforcement purposes even after deletion.

If you close your account or ask us to delete your organization's data, we will delete or anonymize personal information within a reasonable period unless we must retain certain records for legal, security, or accounting reasons. Backup systems may retain encrypted copies for a limited time before they roll off according to our providers' schedules.

We use technical and organizational measures appropriate to the nature of the data, including encryption in transit (HTTPS), access controls, and reliance on our infrastructure providers' protections for data at rest. See our Security overview for a plain-language summary.

Our service is hosted in the United States and may process data there. If you access the service from other regions, your information may be transferred to the U.S. or other countries where our vendors operate, which may have different data protection rules than your jurisdiction.

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to opt out of certain processing. Brokers may manage much of their data directly in the product. To exercise rights or ask questions, contact us at privacy@lendnet.io. We may need to verify your request and coordinate with the relevant broker when data relates to an applicant relationship they control.

Lead Agent is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date in the notice below.

Lend Net LLC
Privacy inquiries: privacy@lendnet.io