Skip to main content

Privacy Policy

Privacy Policy

This Privacy Policy explains how Lendingo LLC ("Lendingo", "we", "us") collects, uses, discloses, and protects personal information when you visit lendingo.io, create or join a lender workspace, sign in, submit an investor-loan inquiry, or use the borrower portal, staff tools, or connected integrations.

Lendingo is a multi-tenant platform for business-purpose, investor real-estate lending. We are not a consumer mortgage marketplace, and we do not sell personal information.

Last updated August 18, 2026

Who we are

Lendingo LLC is a Florida limited liability company, NMLS ID #2412937, with a principal address at 215 E Bruce Ct, Marathon, FL 33050. We operate the Lendingo platform at lendingo.io and related subdomains.

When you deal with Lendingo directly — for example on the public website, at /start, when founding a workspace, or when contacting us — Lendingo is the organization responsible for that personal information.

When a lending company runs its business inside a Lendingo workspace, that lender is typically the organization responsible for borrower and deal records it enters or imports. Lendingo processes that information to provide the platform, subject to the lender's instructions, our agreements, and this policy.

Scope

This policy covers:

  • Public pages and investor intake on lendingo.io, including /start.
  • Account creation, Google or password sign-in, Microsoft sign-in when enabled, invitation links, and workspace founding.
  • Authenticated lender workspaces, the borrower portal, quoting tools, and the staff assistant.
  • Optional lender integrations, including HubSpot, Slack, and capital partners such as Kiavi, when a workspace connects them.

Loan documents, term sheets, and other transaction papers may contain their own notices. Those papers control where they apply. This policy does not cover third-party sites we link to, including Google, Slack, HubSpot, or a capital partner's own portal.

Information we collect

We collect information in these categories:

  • Identity and account information. Name, email address, password hashes, organization and workspace membership, role, invitation and activation state, and profile-image URLs returned by a sign-in provider.
  • Google identity information for staff sign-in. The Google Account identifier, email address, name, and profile-image URL that Google returns when you authorize Lendingo. See Google user data.
  • Investor and borrower inquiry information. Contact details, property address, loan purpose (such as DSCR rental or fix and flip), and the deal numbers you submit so a human can follow up. Public intake does not pull credit.
  • Loan-operating information. Deal, quote, program, document, and workflow records that a lender workspace or invited borrower stores in Lendingo, including information imported from a connected CRM.
  • Integration identifiers. When a lender connects Slack or HubSpot, we store the workspace-scoped identifiers needed to bind people, channels, and records. Email or display name alone does not authorize a Slack identity bind.
  • Communications. Messages you send to us, support requests, and operational messages the platform sends (for example sign-in links). Email bodies contain links rather than sensitive financial content.
  • Technical and security information. Session cookies, device and browser data, IP address, timestamps, and request or security logs used to operate and protect the service.

We do not require Social Security numbers on the public intake form. If a lender later collects taxpayer identification, bank, or credit information inside a workspace or from a capital partner, that information is used only to operate the lending workflow it belongs to.

Google user data

For Google Sign-In, Lendingo requests only OpenID, email, and profile permissions. Our identity service stores the resulting identity record, which can include the Google Account identifier, email address, name, and profile-image URL. Lendingo links that authenticated identity to an existing or newly created Lendingo person record. We do not copy a Google access token into our application database for later API calls.

Lendingo uses this Google user data only to authenticate you, match you to a Lendingo account, maintain a secure session, and enforce access. The application does not request access to content in Gmail, Google Drive, Contacts, Calendar, or other Google services.

Google user data is not used to evaluate creditworthiness, determine loan eligibility, underwrite a loan, set pricing, make a lending decision, serve advertising, or sell personal information.

Lendingo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we use information

  • Provide, secure, and improve the Lendingo platform.
  • Authenticate users, create and administer workspaces, and enforce role- and membership-based access.
  • Receive investor inquiries, route them to the correct lender workspace, and let a human follow up.
  • Operate quoting, documentation, borrower-portal, assistant, and integration workflows that a lender enables.
  • Detect, investigate, and prevent fraud, abuse, and security incidents.
  • Comply with law, NMLS and licensing recordkeeping, and legal process.
  • Respond to support and privacy requests.

We do not use personal information to serve third-party advertising on the platform.

How we share information

We share personal information only as needed to run the service:

  • Service providers. Hosting and edge delivery (Vercel), databases and storage (Supabase / Postgres), identity (better-auth and, for Google Sign-In, Google), email delivery, and error or security monitoring. These providers process information for Lendingo under their agreements with us.
  • Lender customers. Information submitted to a workspace, or matched to that workspace, is available to authorized members of that workspace.
  • Connected tools a lender enables. If a workspace connects HubSpot, Slack, or a capital partner, deal and identity information may flow to that tool as the lender configures. Those products have their own terms and privacy notices.
  • Legal and safety. We may disclose information when required by law, to protect users or the service, or in connection with a merger, financing, or sale of assets, subject to appropriate safeguards.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

Cookies and sessions

Lendingo uses first-party cookies and similar storage that are necessary to sign you in, keep a session, remember a display preference such as theme, and protect the service. Session cookies are HttpOnly and scoped to the host that issued them.

The public intake form sends answers in a POST body. Personal information is not placed in URLs. You can block cookies in your browser; doing so will prevent sign-in and other authenticated features from working.

Retention and choices

We keep personal information for as long as needed to provide the service, resolve disputes, enforce agreements, and meet recordkeeping obligations that apply to lending and communications. Retention varies by record type and account status. Workspace customers may have additional retention duties of their own.

You can sign out at any time. You can revoke Lendingo's Google connection from your Google Account permissions. Revocation stops future Google Sign-In until you authorize Lendingo again; it does not by itself delete Lendingo workspace, loan, or security records.

To request access, correction, or deletion of personal information we hold, email notices@lendingo.io. We will need to verify your identity. We may retain information when we are legally required to, or when it is needed to complete a transaction, detect security incidents, or protect against fraudulent or illegal activity.

Your rights

Depending on where you live, you may have the right to know what personal information we collect, to access or correct it, to delete it, to opt out of sale or sharing (we do not sell or share as those terms are used in California law), and to not be discriminated against for exercising those rights.

Authorized agents may submit a request to notices@lendingo.io. We will describe our verification steps in our reply. If we process information only as a service provider to a lender customer, we may direct you to that lender so they can fulfill the request.

Lendingo is intended for adults. We do not knowingly collect personal information from children under 18.

Security

We use HTTPS, server-managed sessions, least-privilege database access, and role- and relationship-based authorization. Sensitive writes in the product require an explicit, permission-checked step. No method of transmission or storage is perfectly secure.

Changes to this policy

We will update this policy when our practices change and will post the revised date at the top of this page. Material changes that affect Google user data will be reflected here before those practices take effect.

Contact

Privacy questions and requests: notices@lendingo.io

Lendingo LLC
215 E Bruce Ct
Marathon, FL 33050
NMLS ID #2412937

Phone: (800) 547-9080 or (833) 546-3466