Privacy Policy

1. Who we are

LoanBrain.ai (the “Service”) is operated by MOOV FORWARD LLC, a United States limited liability company doing business as MOOV Ventures(“Company,” “we,” “us,” “our”). MOOV FORWARD LLC is the parent entity for our projects, and MOOV Ventures is the trading name under which LoanBrain.ai is offered. You can reach us through the contact route on https://loanbrain.ai.

2. Our role (controller status)

For account, billing, support, and product-analytics data, MOOV FORWARD LLC acts as the data controller and decides the purposes and means of processing.

For documents, images, and text you choose to upload or paste into a chat — including any information about borrowers, applicants, or third parties — you act as the controller (or equivalent responsible party) and we act as a processor handling that content on your instructions solely to generate the response you asked for. You are responsible for having a lawful basis and any required consents before submitting such content. See our Acceptable Use Policy.

3. Data we collect and why

• Account data (email address, password hash, display name, plan, team or organization membership, invite records) — to create and secure your account, provide the Service, and administer seats. Legal basis: performance of a contract.
• Authentication and device data (session tokens, IP address, device and browser identifiers, sign-in timestamps, active-device records) — to authenticate you, enforce plan device limits, prevent account sharing, and detect fraud or abuse. Legal basis: contract performance and legitimate interests in security and anti-fraud.
• Content you submit (chat messages, questions, uploaded or converted documents and images, extracted text) — to produce answers, summaries, and lender matches, and, if you are signed in and choose to save chats, to store your history. Legal basis: contract performance on your instructions.
• Usage and telemetry (message counts, feature usage, timestamps, error and performance logs, rate-limit counters) — to meter plan limits, keep the Service reliable and secure, and improve the product. Legal basis: contract performance and legitimate interests.
• Support and lead-connection data (support messages, and — only if you submit a “connect me with a lender” form — your name, email, phone, and the relevant chat context) — to respond to you and, where you request an introduction, to pass your details to lending professionals. Legal basis: contract performance and your consent for introductions.
• Billing records (plan, subscription status, renewal dates, transaction identifiers received from Stripe) — to provision entitlements and keep tax and accounting records. Legal basis: contract performance and legal obligation.

We do not knowingly collect data from children, and the Service is intended for business and professional use only. We do not ask you to upload full Social Security numbers, full account numbers, or government ID images, and you should redact them where they are not needed for your question.

4. Payments

Payments are processed by Stripe, Inc. on behalf of MOOV FORWARD LLC d/b/a MOOV Ventures. When you buy a subscription, your payment details (card data, billing address, and tax location) are collected and processed directly by Stripe as an independent controller under Stripe’s privacy notice. We never receive or store your full card number. Stripe shares limited data with us — such as your email, country, plan, subscription status, and transaction identifiers — so we can activate and manage your entitlements.

5. Who we share data with

• Payment processor: Stripe, Inc. — sale of subscriptions, subscription management, payments, invoicing, tax compliance, refunds, and chargebacks.
• Infrastructure and hosting providers: our application hosting, database, authentication, and file-processing providers, which store account data and saved chats on our behalf.
• AI model providers: the AI gateway and large-language-model providers that generate responses. Content you submit is transmitted to them to produce your answer under contractual confidentiality and non-training commitments where available.
• Email delivery provider: to send transactional email (sign-in, billing, team invitations, lead alerts).
• Lending professionals: only where you expressly request an introduction, we share the contact details and context you submitted for that purpose.
• Professional advisers (legal, accounting) and authorities where required by law, legal process, or to protect our rights, users, or security.
• Successors: a merger, acquisition, financing, or asset sale involving MOOV FORWARD LLC, subject to this Policy.

We do not sell personal information and we do not use it for third-party advertising.

6. Retention

Account and billing records are kept for the life of your account and afterwards only as long as needed for legal, tax, accounting, and dispute purposes. Saved chats and their attached content are kept until you delete them or delete your account, subject to plan limits. Content submitted by guests and unsaved sessions is processed transiently and not retained as chat history. Security and operational logs are kept for a short rolling period. When data is no longer needed, we delete or anonymise it. Backups age out on their own cycle.

7. Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit (TLS) and at rest by our hosting providers, hashed credentials, row-level database access controls scoped to your account, least-privilege administrative access, secret management for API keys, rate limiting and abuse controls, and monitoring of authentication events. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential, for activity under your account and seats, and for deciding what sensitive material to upload.

8. International transfers

We are based in the United States and our providers may process data in the United States and other countries. Where data is transferred from the UK or EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (with the UK Addendum) or an applicable adequacy decision.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, to receive a portable copy, to withdraw consent, and to be free from discrimination for exercising those rights. UK/EEA users may also lodge a complaint with their supervisory authority. Submit requests through the contact route on https://loanbrain.ai; we respond within one month (extendable where permitted) and may need to verify your identity. Where we act as your processor for uploaded borrower content, please direct data-subject requests to the controller — you — and we will assist you in responding.

10. Cookies and local storage

We use strictly necessary cookies and browser local storage to keep you signed in, maintain your session and preferences, and protect against abuse. We use limited first-party product analytics to understand feature usage. We do not use advertising or cross-site tracking cookies. You can clear or block cookies in your browser, but essential cookies are required for sign-in to work.

11. Third-party sites

Links to lender websites and other third-party resources are provided for convenience. We do not control and are not responsible for their content or privacy practices.

12. Changes

We may update this Policy from time to time. Material changes will be reflected by a new “Last updated” date, and continued use of the Service after that date constitutes acceptance.