Privacy Policy

1. Introduction

AI Loan Advisors LLC ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

Information You Provide Directly:

• Personal identification (name, email address, phone number)
• Business information (business name, type, years in operation, industry)
• Financial information (business financials, tax returns, bank statements, credit scores)
• Loan application data and documentation
• Communication records with our team
• Account credentials and profile information

Automatically Collected Information:

• IP address and device identifiers
• Browser and operating system information
• Pages visited and time spent on our platform
• Referral source and usage patterns
• Cookies and tracking pixels

3. How We Use Your Information

We use the information we collect for the following purposes:

• Processing loan applications and pre-qualifications
• Providing AI-powered analysis of your business financials and eligibility
• Communicating with you about your application status
• Verifying your identity and conducting compliance checks
• Improving our platform, services, and user experience
• Sending transactional emails and account notifications
• Marketing communications (with your consent)
• Complying with legal and regulatory requirements
• Detecting and preventing fraud and unauthorized access
• Resolving disputes and troubleshooting issues

4. Information Sharing and Disclosure

With Lenders:

We share your application and financial information with our network of SBA Preferred Lenders for loan qualification, underwriting, and approval purposes. You authorize this sharing when you submit an application.

With Service Providers:

We share information with third-party service providers who assist with our operations, including:

• Supabase (cloud infrastructure and data storage)
• Anthropic (AI analysis and document processing)
• Payment processors and financial institutions
• Email and communication platforms
• Analytics providers

These service providers are contractually obligated to use your information only for the purposes of providing services to us and to maintain the confidentiality and security of your information.

Legal Requirements:

We may disclose your information when required by law, court order, or government request. We will notify you of such disclosures unless legally prohibited.

5. Data Security

We implement comprehensive, industry-standard security measures to protect your personal and financial information, including:

• SSL/TLS encryption for all data transmission (HTTPS enforced site-wide)
• AES-256-GCM encryption applied to all uploaded documents before storage
• Secure data storage with encryption at rest via our infrastructure provider
• Row-Level Security (RLS) policies ensuring users can only access their own data
• Private storage buckets with authenticated-only access controls
• File type validation and size restrictions on all uploads
• Filename sanitization to prevent injection attacks
• Application-level ownership verification before document access
• Regular security audits and vulnerability assessments
• Access controls and multi-layer user authentication
• Incident response procedures

All documents uploaded to our platform are encrypted using AES-256-GCM encryption before being stored. Encryption keys are derived using secure key derivation functions and are never exposed to client-side code. Documents are stored in private, authenticated-only storage buckets with strict access policies.

While we implement robust security measures to protect your information, no security system is impenetrable. We cannot guarantee absolute security of all information. By using our services and uploading documents, you acknowledge and accept this inherent risk. In the event of a security incident, we will notify affected users in accordance with applicable law.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyze site usage, and for security purposes. Cookies allow us to:

• Remember your preferences and login information
• Analyze platform performance and user behavior
• Prevent fraud and enhance security
• Deliver personalized content and recommendations

Most browsers allow you to control or disable cookies. However, disabling cookies may affect your ability to use certain features of our platform.

7. Third-Party Services

Our platform integrates with third-party services, including Supabase for data storage and Anthropic for AI analysis. These services have their own privacy policies and data handling practices. Please review their privacy policies as they are responsible for their use of your information. We are not responsible for the privacy practices of third-party services.

8. User Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your information (subject to legal retention requirements)
• Portability: Request a copy of your information in a portable format
• Opt-Out: Opt out of marketing communications at any time
• Object: Object to processing of your information for certain purposes

To exercise these rights, please contact us at the email address provided below. We will respond to your request within 30 days.

9. Data Retention

We retain your personal information for as long as necessary to provide our services, comply with legal obligations, and resolve disputes. Loan application and financial information is typically retained for at least seven years to comply with federal lending regulations. You may request deletion of your information at any time, subject to legal and regulatory requirements.

10. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will delete such information and terminate the child's account.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be effective when posted to our website. We will notify you of material changes via email or prominent notice on our platform. Your continued use of our services following the posting of changes constitutes your acceptance of the changes.

12. Contact Information

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at: