Privacy

What you can do without sharing documents

Product, comparison, resource, and home-equity pages do not require an account or a form. The finder keeps its answers in your browser and does not send them anywhere.

What a completed business application stores

If the local demo accepts a completed application, it stores the answers you typed (business profile, the financing type you selected, contact details, product-specific answers, an optional self-reported credit range, and your consent) plus the statement files and the months you labeled. It also stores the time, a submission id, and technical metadata already sent by the browser: IP address, user agent, and referring page.

The form does not ask for a Social Security number, a bank login, or a full tax package. Do not put those in the optional note.

Purpose

The purpose of that storage is so a person using the private admin inbox can review the inquiry. The form does not check credit and does not build a lender offer.

Recipients and access

Records stay on the server that hosts this site. The admin inbox, behind its password, is the reader built into the software. The software does not email the file, sell it, or send it to a lender, advertiser, or analytics vendor. No analytics or session-replay tool is installed. Who else can reach the server — a host, an administrator, a backup — is an operating question this draft cannot answer, because that arrangement is not verified.

This prototype does not contain code that sells information. Whether a future operator would share or sell information has not been established. Do not read this as a promise that information is never sold.

Production collection

A production process refuses new applications. The refusal exists because disk files and a shared password are not a safe way to collect real bank statements. Do not upload real statements even in the local demo.

Retention and deletion

There is no automatic deletion and no published retention schedule. Records remain until someone with access to the server deletes the data file and the upload folder. A verified privacy contact has not been published, so this page does not list an email address for access or deletion requests.

Security, stated narrowly

Uploaded files are written with restricted file permissions on the server. That is not encryption, not malware scanning, not audit logging, and not “bank-level” security. Do not rely on it for real customer documents.