How personal data is handled

This policy text is aligned to the current code implementation and should be reviewed by counsel before production publication.

What data is used

Lendable processes applicant profile data, loan inputs, and connected Open Banking account/transaction data needed to generate affordability insights and lendability reports.

Where data comes from

Banking data is obtained from TrueLayer after user consent. Application data is entered directly by users during the borrower journey.

How data is used

Data is used to compute lending heuristics, produce a lendability score, generate risk flags, and present report outputs to borrowers and advisors.

AI-assisted summary generation

When configured, Lendable uses OpenAI to generate plain-language summaries from a sanitized assessment payload. The flow is designed to avoid sending raw transaction-level detail in that summary request.

Storage in current implementation

This repository currently uses demo-oriented storage patterns, including in-memory server stores for integration state and browser localStorage for submitted application snapshots.

Data retention and deletion

Automated retention schedules and user self-service deletion workflows are not fully implemented in this codebase version and should be added before production launch.

International transfers and subprocessors

Third-party service providers may process data depending on deployment configuration. Controllers should review provider terms and cross-border transfer obligations before production usage.

Your rights

Depending on jurisdiction, individuals may have rights to access, correction, deletion, objection, and portability. A formal rights-handling process should be established by the deploying organization.

Contact

For privacy requests or questions, contact hello@lendable.com.