LendQM
Back to home
Last updated May 7, 2026

Privacy Policy

LendQM is built on a single promise: your information is yours. This page explains exactly what we collect, why, who can see it, and how to remove it.

The short version

  • We don't sell your data — to lenders, brokers, marketers, or anyone else.
  • We don't take referral fees from lenders, so the math we show you isn't biased toward who's paying us.
  • We don't pull your credit. LendQM is a tool, not a lender.
  • Your scenario inputs are not stored on our servers unless you explicitly request a PDF (in which case we store the email you provide and metadata about the report).
  • You can request deletion of any data we have about you at any time. Email privacy@lendqm.com and we'll process it within 30 days.

Who this policy applies to

This policy applies to anyone using lendqm.com, app.lendqm.com, and any LendQM tool, calculator, or service (collectively, the "Service"). It applies whether you're a borrower exploring qualification options, an investor running deal math, a mortgage broker using our analysis tools, or just browsing.

What we collect — and what we don't

Calculator inputs (borrowers and investors)

When you use a LendQM calculator (Non-QM Estimator, DSCR Calculator, Fix-and-Flip), the values you enter — property price, loan amount, income sources, credit band, etc. — are processed in your browser to compute an estimate. We do not store these inputs on our servers.

The exception: if you choose to download a branded PDF, the inputs are sent to our server at the moment of PDF generation so we can render the report. The PDF is then returned to you and the inputs are not retained beyond what's needed to log the request (an opaque report ID with metadata about which calculator was used and when).

Email addresses (when you request a PDF or sign up)

If you provide an email address to download a PDF or to receive our weekly non-QM rate update, we store that email along with a flag indicating which form you submitted from (e.g., DSCR calculator) and whether you opted in to marketing emails. We use the email solely to:

  • • Deliver the PDF report you requested (when applicable)
  • • Send marketing emails (only if you explicitly opted in — we never opt you in by default)

We do not share your email with lenders, brokers, or any third party. You can unsubscribe from marketing emails at any time using the link in any email or by emailing privacy@lendqm.com.

Broker account information (when you sign in)

If you create a broker account (via magic-link sign-in), we store the email you sign in with, plus any profile information you choose to add: display name, brokerage name, license number, license state, phone, and an optional logo. This information is used to brand the analysis reports you generate so they carry your name and credentials. It is not shared with anyone outside LendQM.

Borrower data uploaded by brokers

When a broker uses our income analysis tool, they may upload bank statements and other supporting documents containing borrower financial data. These documents are processed via Anthropic's API to extract transactions and stored in your broker account so you can complete the analysis. They are accessible only to the broker account that uploaded them. They are not shared with other brokers, lenders, or any third party.

Technical data (everyone)

When you visit lendqm.com, we collect standard server logs (IP address, user agent, page requested, timestamp) for security and performance monitoring. If we add analytics in the future, it will be privacy-friendly (e.g., Plausible) and disclosed here.

What we don't collect

  • • Your social security number, ITIN, or government IDs
  • • Your actual credit report or credit score (you tell us a band; we never check)
  • • Bank account or routing numbers
  • • Browsing history outside of LendQM
  • • Anything from third-party data brokers

Who processes your data on our behalf

To run the Service, LendQM uses a small number of third-party providers as data processors. We have selected providers known for security and privacy practices:

ProviderPurposeWhat it sees
Vercel (vercel.com)Hosting + serverless functionsServer logs, deployments
Supabase (supabase.com)Database + authentication + storageBroker accounts, subscriber emails, broker logos, broker borrower data
Anthropic (anthropic.com)AI parsing of bank statements (Claude Sonnet 4.6 vision)Bank statement contents at moment of parse; not retained per Anthropic policy
Resend (resend.com)Sending magic-link sign-in emailsRecipient email and message content
Cloudflare (cloudflare.com)DNS for lendqm.comDNS lookups (no proxy on our records)

We do not share your data with any party outside this list without your explicit consent.

Your rights

Depending on where you live, you have rights over your personal data. Regardless of jurisdiction, LendQM honors all of the following requests:

  • Access: Request a copy of any personal data we have about you
  • Correction: Update any inaccurate information
  • Deletion: Request that we delete your data; we'll honor within 30 days unless legally required to retain
  • Portability: Get a machine-readable export of your data
  • Opt-out of marketing: Anytime, no questions asked

To exercise any of these rights, email privacy@lendqm.com from the email address associated with your account. We may ask you to verify identity before processing requests for deletion or export.

California residents: this includes your CCPA rights (Right to Know, Right to Delete, Right to Opt-Out). European residents: this includes your GDPR rights (Articles 15–22). LendQM is the data controller; we have no separate Data Protection Officer at this time.

Data retention

  • Calculator inputs: not retained (processed transiently)
  • PDF generation logs: 90 days (then aggregated into anonymous metrics)
  • Subscriber email + opt-in record: until you unsubscribe or request deletion
  • Broker account + uploaded borrower files: until you delete your account
  • Server logs: 30 days, then deleted

Cookies and tracking

LendQM uses a minimum of cookies. Specifically:

  • Session cookies (broker users only): Supabase Auth uses cookies to keep you signed in. These expire when you sign out or after a period of inactivity.
  • No third-party tracking cookies. We don't use Google Analytics, Facebook Pixel, or any retargeting / advertising trackers.

We use localStorage in your browser to save calculator state so you don't lose your inputs if you accidentally refresh. This data never leaves your device.

Children

LendQM is not directed at children under 16 and we do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal data, please email privacy@lendqm.com and we will delete it.

Changes to this policy

If we materially change how we handle your data, we'll update this page and (for broker users with an account) email you. The effective date at the top of this page is the date of the most recent change.

Contact

For any privacy-related question, email privacy@lendqm.com. We respond to all good-faith inquiries within five business days.

Effective May 7, 2026.