Privacy Policy

1. Information We Collect

1.1 Account Information

When you create a LendMatrix account, we collect:

• Name and email address
• Company name and business details
• Phone number (optional)
• User role and permissions
• Password (encrypted and never stored in plain text)

1.2 Business Data

To provide our MCA platform services, we process:

• Merchant information (business names, contact details, revenue data)
• Cash advance details (amounts, terms, factor rates)
• Payment records and transaction history
• Document uploads (bank statements, applications, supporting documents)
• Commission and syndication data
• Lead and customer relationship data

1.3 Usage Information

We automatically collect information about how you use LendMatrix:

• IP addresses and device information
• Browser type and version
• Pages visited and features used
• Time spent on the platform
• Error logs and performance data

2. How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve the LendMatrix platform
• Account Management: To create and manage your account, authenticate users, and provide customer support
• Communication: To send important updates, security alerts, and platform notifications
• Analytics: To understand usage patterns and improve our services
• Security: To detect and prevent fraud, abuse, and security incidents
• Legal Compliance: To comply with legal obligations and regulatory requirements
• Business Operations: To process payments, manage subscriptions, and provide billing support

3. Data Security and Encryption

We implement industry-standard security measures to protect your data:

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher (HTTPS)
• Encryption at Rest: Sensitive data stored in our databases is encrypted using AES-256 encryption
• Password Security: User passwords are hashed using bcrypt with salt
• Access Controls: Role-based access control (RBAC) ensures users only access data they're authorized to view
• Infrastructure Security: Our platform is hosted on Render.com with enterprise-grade security controls
• Regular Backups: Automated daily backups with point-in-time recovery capabilities
• Security Monitoring: Continuous monitoring for suspicious activity and security threats

4. Multi-Tenant Data Isolation

LendMatrix is a multi-tenant platform. We ensure strict data isolation between tenants:

• Each organization's data is logically separated using unique tenant identifiers
• Users can only access data belonging to their organization
• Database queries are automatically scoped to the authenticated user's tenant
• No cross-tenant data sharing occurs without explicit consent
• Administrative access to tenant data is logged and monitored

5. Third-Party Services

We use trusted third-party service providers to operate our platform:

• Hosting: Render.com (infrastructure and database hosting)
• Analytics: Usage analytics to improve platform performance (anonymized where possible)
• Email: Transactional email services for notifications and alerts
• Payment Processing: Secure payment processors for subscription billing

All third-party providers are required to maintain appropriate security measures and comply with applicable data protection laws.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. For detailed information, see our Cookie Policy.

Types of cookies we use:

• Essential Cookies: Required for authentication and platform functionality
• Analytics Cookies: Help us understand how users interact with the platform
• Preference Cookies: Remember your settings and preferences

7. Your Rights (GDPR & CCPA Compliance)

Depending on your location, you may have the following rights regarding your personal data:

7.1 Access and Portability

• Request access to your personal data
• Request a copy of your data in a portable format (CSV, JSON)
• Export your business data at any time through our platform

7.2 Correction and Deletion

• Update or correct inaccurate personal information
• Request deletion of your personal data (subject to legal retention requirements)
• Deactivate your account at any time

7.3 Restriction and Objection

• Restrict or object to certain data processing activities
• Opt-out of marketing communications (while still receiving essential service emails)
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at contact@lendmatrix.ai. We will respond within 30 days.

8. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Active Accounts: Data is retained for the duration of your subscription
• Closed Accounts: Data may be retained for up to 7 years to comply with financial regulations
• Backup Data: Retained in encrypted backups for disaster recovery (90 days)
• Audit Logs: Security and access logs retained for 1 year
• Legal Hold: Data may be retained longer if required by law or legal proceedings

9. International Data Transfers

Your data may be processed and stored in the United States or other jurisdictions where our service providers operate. We ensure appropriate safeguards are in place:

• Data processing agreements with all third-party providers
• Compliance with EU-US Data Privacy Framework (where applicable)
• Standard contractual clauses for international transfers
• Encryption of data in transit and at rest

10. Children's Privacy

LendMatrix is a business-to-business platform and is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Email notification to your registered email address
• In-app notification upon login
• Updating the "Last Updated" date at the top of this page

Your continued use of LendMatrix after changes are posted constitutes acceptance of the updated Privacy Policy.

12. Contact Information

For privacy-related questions, concerns, or to exercise your rights, please contact us: