How we handle your data.

Last updated: May 11, 2026 · Effective: May 11, 2026

This Privacy Policy describes how My AI Lender ("we," "us," "our") collects, uses, shares, and protects information when you use our website at myailender.com, the Mortgage at a Glance dashboard at app.myailender.com, and related services (collectively, the "Service").

We built the Service for licensed mortgage brokers. We take privacy seriously because the Service touches NMLS-regulated communications, client lead information, and personal Google account data (Gmail and Calendar). This policy explains exactly what we do with everything we touch.

Quick summary We collect what you give us when you fill out the intake form, what you connect (Arive LOS, Granola), and what the Service generates on your behalf (AI-written scripts, articles, content). We use that data to run the Service for you. We never sell it. We never use your data to train AI models or for advertising. Sign-in via Google or Microsoft uses basic profile only — we do not request access to your email or calendar.

1. Information We Collect

1.1 Account and Profile Information

Name, work email, phone number, title, individual NMLS ID, company NMLS ID, company name and address.
Information you enter during the onboarding intake: licensed states, loan types served, client niches, primary markets, military bases served, unique value proposition, communication tone, signature phrases, KPI goals, and any realtor and client contacts you add.
Payment information processed by Stripe (we never receive or store your full card number).

1.2 Integration Credentials

If you choose to connect optional integrations, you provide and we store (encrypted in Firestore):

Arive LOS API key — used by our backend to read your loan pipeline.
Granola API token — used by our backend to fetch and summarize your meetings.

You can remove either credential at any time in Settings. We never share these credentials with other users or third parties.

1.3 Sign-In via Google or Microsoft

If you sign in with Google or Microsoft, we receive only basic profile information — your name, email address, and account identifier — to create and authenticate your account. We do not request access to your email, calendar, files, or any other data in your Google or Microsoft account.

1.4 AI-Generated Content

When you request personalized scripts, articles, daily content kits, prospect-finder prompts, content themes, hooks, or call summaries, our backend sends the relevant portions of your profile and request to Anthropic's Claude API. We store the generated output in your account for your use. See Section 3 on third parties.

1.5 Usage Information

We collect routine technical information when you use the Service: IP address, browser type, device type, pages visited, features used, error logs, and timestamps. This is used to operate, secure, and improve the Service.

2. How We Use Your Information

Operate the Service. Authenticate you, sync your pipeline, summarize your meetings, generate your content, deliver your daily briefing.
Personalize output. The data you provide in intake is used to personalize AI-generated scripts, articles, content, and prospect-finder prompts to your specific loan types, niches, markets, and voice.
Billing. Subscription billing and renewal via Stripe.
Support and improve. Investigate issues, fix bugs, monitor performance, and improve features.
Security and compliance. Detect abuse, enforce our Terms, and meet legal obligations.

3. Third Parties Who Process Your Data

The Service is built on third-party infrastructure. Each provider receives only the data needed to provide its part of the Service.

Google Firebase / Google Cloud — hosts the dashboard, stores your account and profile data, and authenticates sign-in.
Anthropic — runs the Claude AI models that generate personalized scripts, articles, and content. Inputs and outputs are subject to Anthropic's privacy policy. Per Anthropic's commercial terms, your inputs and outputs are not used to train Anthropic's models.
Stripe — handles all payment processing. We do not store full payment card numbers.
Arive — only if you supply an Arive API key. Used to read your loan pipeline.
Granola — only if you supply a Granola API token. Used to read your meeting transcripts.
Cloudflare — provides DNS, CDN, and DDoS protection for the marketing site.

We do not sell your information to anyone. We do not share your information with advertisers or data brokers.

4. How Long We Keep Your Data

Account and profile data: for the lifetime of your account, plus a reasonable period after cancellation for billing reconciliation and legal compliance.
Generated content: stored in your account until you delete it or your account is deleted.
Sign-in tokens: short-lived OAuth tokens for authentication, held in memory in your browser session and not persisted by us.
Backups: routine backups may persist deleted data for up to 90 days before being purged.

5. Your Rights

Regardless of where you live, you can:

Access the personal data we hold about you (visible in your dashboard and intake).
Correct it (via Settings → Edit Profile, or by emailing us).
Delete your account and associated data (via Settings → Reset Dashboard, or by emailing us).
Revoke account access at any time at myaccount.google.com/permissions (Google) or account.live.com/consent/Manage (Microsoft).
Export your data — email us and we will provide a JSON export.

Residents of California, the EU, the UK, and other jurisdictions with comprehensive privacy laws have additional rights including the right to know what personal information is collected, the right to portability, and the right to opt out of profiling. To exercise any of these rights, email hello@myailender.com.

6. Security

We use industry-standard practices to protect your data: encryption in transit (HTTPS/TLS), encryption at rest (Firestore), restricted access to production data, and per-user data isolation via Firestore security rules. Integration credentials (Arive, Granola) are stored in Firestore with security rules that restrict reads and writes to the owning user. We do not perform third-party security audits at this time but plan to as we scale; we will update this policy when that changes.

7. Children

The Service is for licensed mortgage brokers and is not intended for use by anyone under 18. We do not knowingly collect data from children.

8. International Users

The Service is operated from the United States. By using the Service, you consent to your data being processed in the United States.

9. Changes to This Policy

We may update this policy as the Service evolves. Material changes will be announced via email to your account email address at least 14 days before they take effect. Continued use after the effective date constitutes acceptance.

10. Contact

Questions about privacy, data handling, or this policy:

My AI Lender
[COMPANY LEGAL ENTITY NAME, INC.]
[COMPANY MAILING ADDRESS]
Email: hello@myailender.com