Privacy Policy

LenderMatch LLC

An Illinois Limited Liability Company

Last Updated: February 2026

1. Introduction

LenderMatch LLC (“LenderMatch,” “we,” “us,” or “our”) is an Illinois limited liability company that operates the commercial loan matching platform at lendermatch.com (the “Platform”). This Privacy Policy describes how we collect, use, disclose, and protect your information when you use our Platform.

LenderMatch acts as an agent for the limited purpose of procuring financing from qualified lenders on behalf of commercial borrowers. Our role is limited to sourcing, introduction, and coordination of financing options. We connect businesses seeking financing (“Borrowers”) with banks, credit unions, and private lending institutions (“Lenders”) whose criteria match the Borrower’s deal profile. This Privacy Policy applies to all users of the Platform, including Borrowers, Lenders, and visitors.

2. Information We Collect

2.1 Borrower Information

When you use the Platform as a Borrower, we collect:

Contact information: name, email address, phone number, and business address.
Business information: business name, entity type, industry, time in business, annual revenue, and number of employees.
Financial information: loan amount requested, loan purpose, estimated credit score range, debt service coverage ratio, collateral details, and property information (including property addresses, values, and descriptions).
Bank account data: if you connect your bank account via Plaid, we receive account balances, transaction history, and account metadata. We do not receive your bank login credentials. Plaid acts as a secure intermediary. See Section 8 for details.
Documents: tax returns, financial statements, articles of incorporation, loan packages, and other documents you upload to support your financing request.

All Borrower information submitted through the Platform is treated as Confidential Information, as defined in these Terms and any applicable Success Fee Agreement.

2.2 Lender Information

When you use the Platform as a Lender, we collect:

Institution information: institution name, type (bank, credit union, private lender), charter number, address, and FDIC/NCUA certification details.
Contact information: names, email addresses, phone numbers, and titles of authorized representatives.
Lending criteria: loan types, geographic preferences, minimum and maximum loan amounts, underwriting criteria, property type preferences, and risk appetite.
Public regulatory data: call report data, financial ratios, and other publicly available information from FDIC, NCUA, and similar regulatory sources.

2.3 Automatically Collected Information

When you visit or use the Platform, we automatically collect:

Device information (browser type, operating system, device identifiers).
Log data (IP address, pages visited, time spent, referring URLs).
Analytics data via Vercel Analytics (page performance, interaction patterns).

3. How We Use Your Data

We use the information we collect to:

Provide the matching service: score Borrower deals against Lender criteria to identify suitable lending institutions.
Facilitate introductions: present Borrower loan packages (including financial and credit information) to matched Lenders so they can evaluate the financing opportunity.
Communicate with you: send match notifications, status updates, and platform communications via email, SMS, or in-app messaging.
Enforce agreements: track exclusivity periods, non-circumvention obligations, and success fee obligations as defined in individual Success Fee Agreements.
Improve the Platform: analyze usage patterns to improve matching accuracy, user experience, and platform reliability.
Prevent fraud and ensure security: detect and prevent unauthorized access, fraud, and other harmful activity.
Comply with legal obligations: fulfill regulatory requirements applicable to financial services platforms, including Illinois loan brokerage disclosure requirements.

4.1 With Matched Lenders

When our matching system identifies a Lender whose criteria align with your deal, we present your loan package to that Lender. Before a match is confirmed, Lenders see your deal details (loan type, amount, geography, financial metrics) but not your personal identity. Your name, contact information, and business identity are disclosed to the matched Lender only after both parties confirm the match. Our deal managers have access to your information to facilitate matches and coordinate with lenders. Lenders are bound by confidentiality obligations with respect to all Borrower information received through the Platform.

4.2 With Service Providers

We share information with third-party service providers who help us operate the Platform:

Supabase: database hosting, authentication, and file storage.
Vercel: web application hosting and deployment.
Plaid: secure bank account connectivity (Borrowers only, with explicit consent).
Stripe: payment processing for success fees.
Resend: transactional email delivery.
Mapbox: geographic location services for Lender proximity matching.

These providers are contractually obligated to use your data only to provide services to us and are bound by confidentiality obligations.

4.3 We Do Not Sell Your Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We do not share your information with data brokers. We do not use your information to serve advertisements.

4.4 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others. Where legally permitted, we will provide you with prompt written notice prior to such disclosure to allow you to seek a protective order or other remedy.

5. Data Security

We implement reasonable technical and organizational measures to protect your information, including:

Encryption of data in transit (TLS/SSL) and at rest.
Security practices aligned with SOC 2 controls where applicable.
Row-level security policies that restrict database access based on user identity and role.
Role-based access controls that limit internal access to authorized personnel.
Audit logging of role changes and deal activity.
Secure authentication via Supabase Auth with session management.

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Confidentiality Obligations

All unpublished or nonpublic information provided through the Platform, including financial information, trade secrets, databases, and loan packages, is treated as Confidential Information. We limit access to Confidential Information to employees and representatives who have a need to know exclusively for purposes of the financing engagement. We do not use Confidential Information for any purpose other than facilitating the matching and introduction services described in this Policy.

These confidentiality obligations do not apply to information that was publicly available at the time of receipt, or that is disclosed pursuant to a requirement of applicable law or government agency request.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide our services. We retain deal and match records for the duration required by our contractual obligations and applicable law. Financial documents are retained for the period necessary to fulfill our engagement obligations.

Upon termination of an engagement, completion of a loan, or written request, we will return, destroy, or permanently delete Confidential Information within fifteen (15) days, subject to the following exceptions: (a) we may retain one (1) archival copy in our legal or compliance files solely for record-keeping or evidentiary purposes, and (b) we will retain records as required by law or necessary to enforce our contractual rights.

You may request deletion of your account and associated data at any time by contacting us at support@lendermatch.com.

8. Plaid Data

If you choose to connect your bank account, we use Plaid Inc. to access your financial data. By connecting your account, you grant Plaid permission to access your account information on our behalf.

What we access: We receive account balances, transaction summaries, and account metadata. We do not receive or store your bank login credentials. Plaid access tokens are stored server-side and are never exposed to client applications.

How we use it: Bank data is used to verify your financial profile for matching and to support lender evaluation of your financing request.

Retention: We retain Plaid-derived data for up to 12 months after your deal closes or is withdrawn, unless a longer retention period is required by law.

Request deletion: You may disconnect your bank account at any time through the Platform. Upon disconnection, we will revoke the Plaid access token. To request deletion of Plaid-derived data we hold, contact us at support@lendermatch.com. For more information about how Plaid handles your data, see Plaid’s privacy policy at https://plaid.com/legal.

9. Cookies and Tracking

We use session cookies to maintain your authentication state, and preference cookies to remember your settings. We use Vercel Analytics for performance monitoring. We do not use advertising cookies or serve ads on the Platform.

10. Children’s Privacy

The Platform is designed for commercial business use and is not directed at individuals under the age of 18. We do not knowingly collect personal information from children.

11. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access: request a copy of the personal information we hold about you.
Correction: request correction of inaccurate or incomplete information.
Deletion: request deletion of your personal information, subject to legal retention requirements and contractual obligations.
Portability: request a machine-readable copy of your data.
Opt-out: opt out of non-essential communications at any time via your notification preferences or by contacting us.

To exercise any of these rights, contact us at support@lendermatch.com. We will respond within 30 days.

12. Dispute Resolution

Informal Negotiation. Any dispute, claim, or controversy arising out of or relating to this Privacy Policy shall first be addressed through good faith discussion between the parties. Either party may initiate this process by written notice describing the dispute and the relief sought.

Mediation. If the dispute is not resolved within thirty (30) days after delivery of such notice, either party may submit the matter to non-binding mediation administered by the American Arbitration Association (“AAA”) under its Commercial Mediation Procedures. The mediation shall take place in DuPage, Kane, Kendall, Will, or Grundy County, Illinois.

Arbitration. If the dispute is not settled through mediation within thirty (30) days after mediation begins, the matter shall be finally resolved by arbitration administered by the AAA in accordance with its Commercial Arbitration Rules. The arbitration shall be conducted by one neutral arbitrator seated in DuPage, Kane, Kendall, Will, or Grundy County, Illinois.

Governing Law. This Privacy Policy shall be governed by and construed in accordance with the laws of the State of Illinois, without regard to its conflict-of-law principles.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you via email of material changes. The updated policy will be posted on the Platform with an updated “Last Updated” date. Your continued use of the Platform after changes are posted constitutes acceptance of the revised policy.

14. State-Specific Rights

14.1 California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act and California Privacy Rights Act. We do not sell personal information. California residents may request access to, deletion of, or correction of their personal information by contacting support@lendermatch.com. We will not discriminate against you for exercising your privacy rights.

14.2 Illinois Residents

LenderMatch LLC intends to register as a loan brokerage firm with the State of Illinois. Illinois residents are entitled to the disclosures required by the Illinois Loan Brokerage Act. As disclosed: The Secretary of State has not reviewed and does not approve, recommend, endorse or sponsor any loan brokerage contract. For questions about your rights, consult an attorney before signing any contract or agreement.

15. Contact Us