Privacy Policy

1. Information We Collect

• Account information: Name, email address, and credentials you provide when registering.
• Loan and pipeline data: Borrower names, loan types, amounts, credit tiers, and related mortgage application details.
• Financial data via Plaid: When a borrower connects a bank account through Plaid Link, we receive account information, transaction history, income data, and asset data as permitted by explicit consent.
• Usage data: Pages visited and features used, collected automatically for service improvement.

2. How We Use Your Information

• To provide, operate, and improve the LendShift platform.
• To perform income and asset verification for mortgage pre-qualification purposes.
• To generate AI-powered lead scores, drafts, and insights for loan officers.
• To send transactional emails and platform notifications.
• To comply with legal obligations and enforce our Terms of Service.

3. Consent

We obtain explicit consent before collecting, processing, or storing financial data. Plaid Link is only presented to authenticated users who have agreed to our Terms of Service. You may withdraw consent at any time by contacting us at t.allman@kpsllc.org.

4. Data Sharing

We do not sell, rent, or license your personal information or financial data to third parties. We share data only with:

• Plaid Technologies, Inc.: To facilitate financial account connections.
• Service providers: Supabase (database), Vercel (hosting), Resend (email), and Stripe (payments).
• Legal authorities: When required by law or to protect user rights and safety.

5. Data Security

All data in transit is encrypted using TLS 1.3. All data at rest is encrypted using AES-256. Access to production systems is restricted to authorized personnel and protected by multi-factor authentication.

6. Data Retention and Deletion

We retain personal and financial data only as long as necessary. You may request deletion of your data at any time by emailing t.allman@kpsllc.org. We will process deletion requests within 30 days. This policy is reviewed annually for compliance with CCPA and GLBA.

7. Your Rights

• Access: Request a copy of the data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your data.
• Portability: Request your data in a portable format.
• Opt-out: Opt out of non-essential communications at any time.

Contact: t.allman@kpsllc.org

8. Cookies

We use session cookies necessary to maintain authenticated sessions. We do not use third-party advertising trackers.

9. Contact

AllShift AI, Inc.
t.allman@kpsllc.org