1. Who we are

Lendhero, Inc., 535 Mission Street, San Francisco, CA 94105, USA, is the controller of the personal data described in this policy. For any privacy question or request, write to privacy@lend-hero.com or use the contact details at the end of this policy.

lendhero provides lending software to banks, microfinance companies, fintechs and other lenders. We do not lend money to consumers. When our clients use the lendhero platform to process data about their own borrowers, the client is the controller of that data and we act as its processor. Borrowers should contact their lender about that data; see section 10.

2. What data we collect

  • Contact and request data you give us in forms: full name, phone number, work email, company, country, the product you are interested in and your message.
  • Newsletter data: your email address and your subscription preferences.
  • Recruitment data: your CV, contact details, work history and anything else you choose to send when applying for a role.
  • Communication data: emails, calls and messages you exchange with us, including WhatsApp and SMS.
  • Technical data: IP address, browser and device type, pages visited, referring page and the time of your visit, collected through server logs and the cookies described in our Cookie Policy.
  • Business relationship data: if your company becomes a client or partner, the names, roles and contact details of the people we work with.

We do not ask for special categories of data (such as health or religious beliefs) on this website, and we do not knowingly collect data from children under 16.

  • To answer your request, arrange a demo and prepare a proposal — to take steps at your request before entering into a contract, and our legitimate interest in responding to business enquiries.
  • To send our newsletter and, where allowed, information about our products — your consent, which you can withdraw at any time with the unsubscribe link or by writing to us.
  • To run, secure and improve the website, prevent fraud and abuse, and fix errors — our legitimate interest in a safe and working website.
  • To manage client and partner relationships, invoicing and support — performance of a contract.
  • To assess job applications — steps before a contract and our legitimate interest in hiring.
  • To comply with legal obligations, respond to lawful requests and defend legal claims — legal obligation and legitimate interest.

Where we rely on legitimate interests, we have weighed them against your rights; you can ask us for details and you can object at any time (see section 7). We do not use your data for decisions based solely on automated processing that have legal or similarly significant effects on you.

4. Who we share data with

We share personal data only as needed for the purposes above:

  • Service providers that work on our behalf under written contracts: hosting and infrastructure, email and messaging, customer relationship management, video calls, analytics (only with your consent) and recruitment tools.
  • Professional advisers such as lawyers, auditors and insurers, under confidentiality duties.
  • Authorities, courts or regulators when the law requires it.
  • A buyer or successor in a merger, acquisition or sale of assets, subject to this policy.

We do not sell personal data and we do not share it for cross-context behavioural advertising, as those terms are defined under California law. We do not allow service providers to use your data for their own purposes.

5. International transfers

We are based in the United States and work with providers in other countries. When we transfer personal data from the European Economic Area, the United Kingdom or Switzerland to countries without an adequacy decision, we use the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum or another lawful mechanism, together with additional safeguards where needed. Similar safeguards apply to transfers from Brazil, Canada and other countries with transfer rules. You can ask us for a copy of the relevant safeguards.

6. How long we keep data

  • Requests and demo enquiries: up to 24 months after our last contact, unless a business relationship starts.
  • Newsletter: until you unsubscribe, then a record of the opt-out to respect it.
  • Client and partner data: for the term of the relationship and the period required by tax, accounting and other laws, usually up to 7 years.
  • Job applications: up to 12 months after the hiring decision, or longer with your consent.
  • Server logs: up to 90 days, unless needed to investigate a security incident.

7. Your rights

Depending on where you live, you have some or all of these rights:

  • Access: get a copy of the personal data we hold about you and information about how we use it.
  • Correction: have inaccurate or incomplete data corrected.
  • Deletion: have your data deleted when we no longer need it or when the law allows.
  • Restriction and objection: limit how we use your data, and object to processing based on legitimate interests or to direct marketing at any time.
  • Portability: receive data you gave us in a structured, machine-readable format, or have it sent to another company.
  • Withdraw consent: at any time, without affecting processing before the withdrawal.
  • Complain: to your local data protection authority, for example the authority in your EU country, the UK Information Commissioner’s Office or Brazil’s ANPD.

To use a right, write to privacy@lend-hero.com. We will confirm your identity, then answer within one month (GDPR, UK GDPR) or 45 days (California), extendable where the law allows. Using your rights is free in most cases.

8. Notice for California residents

In the past 12 months we collected the categories of personal information described in section 2: identifiers (name, email, phone, IP address), professional information (company, role), internet activity on our website and, for job applicants, employment history. We collect them from you, your devices and, for business contacts, from your employer. We use them for the business purposes in section 3 and keep them for the periods in section 6.

California residents have the right to know, access, correct and delete their personal information, the right to opt out of the sale or sharing of personal information (we do neither), the right to limit the use of sensitive personal information (we do not use it for purposes that require this) and the right not to be discriminated against for using these rights. You may use an authorised agent. We honour Global Privacy Control signals as an opt-out of sale and sharing.

9. Notices for other regions

  • Brazil (LGPD): you can ask for confirmation of processing, access, correction, anonymisation, portability, deletion and information about sharing, and you can contact Brazil’s ANPD.
  • Canada (PIPEDA and provincial laws): you can access and correct your data and withdraw consent; you can complain to the Office of the Privacy Commissioner of Canada.
  • Other countries: where local law, such as the privacy laws of Australia, Singapore, South Africa, India, Japan or the UAE, gives you further rights, we respect them. Contact us and we will tell you how they apply.

10. Data we process for our clients

Lenders that use the lendhero platform decide how their borrowers’ data is used. We process that data only on their documented instructions, under a data processing agreement, with the security measures described on our Data Processing page. If you are a borrower of one of our clients, please contact your lender to use your privacy rights; if you write to us, we will pass your request to them.

11. Security

We protect personal data with technical and organisational measures that match the risk, including encryption in transit and at rest, access control based on roles, multi-factor authentication for staff, logging and regular security testing. No system is completely secure; if a breach affects your data, we will notify you and the authorities as the law requires.

12. Changes to this policy

We may update this policy when our services or the law change. We will publish the new version on this page with a new date and, for significant changes, tell you by email or on the website.

13. Contact

Lendhero, Inc., 535 Mission Street, San Francisco, CA 94105, USA. Email: privacy@lend-hero.com. Phone: +1 (310) 666-6981.