1. Who We Are
Pendar is a communication assistance tool for mortgage loan officers, operated as a sole proprietorship by its founder and owner. We are based in New York State. Questions about this Privacy Policy may be directed to support@pendar.pro.
2. Information We Collect
Pendar is designed around data minimization. We collect only the information necessary to operate the service.
Information you provide when creating an account:
- Your email address (used for account authentication and service communications)
- Your full name, job title, company name, phone number, and NMLS number (used to populate your LO Profile and optional signature footer)
Information you provide when generating communications:
- Borrower first name only (we do not collect last names, Social Security numbers, loan application data, income information, or any other non-public personal information as defined under applicable privacy regulations)
- Scenario inputs specific to each communication type (for example, referring person name, loan status, or pre-approval amount)
Information collected automatically:
- Usage data such as the number of communications generated and scenarios selected (used to enforce demo limits and subscription access)
- Standard server and authentication logs maintained by our platform provider, Supabase
3. Information We Do Not Collect
Pendar does not collect, store, or process:
- Borrower last names, Social Security numbers, dates of birth, or government-issued ID numbers
- Loan application data, credit reports, financial statements, or income documentation
- Non-public personal information (NPI) as defined under the Gramm-Leach-Bliley Act or applicable state privacy laws
- Payment card numbers or banking information (payment processing is handled entirely by Stripe; we do not receive or store your full payment details)
4. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Pendar service
- Authenticate your account and enforce subscription and demo access limits
- Generate communications on your behalf based on the scenario inputs you provide
- Send service-related communications such as account confirmations and billing notifications
- Improve and troubleshoot the service
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
5. Third-Party Service Providers
Pendar uses the following third-party services to operate:
- Anthropic API: The scenario inputs you provide are transmitted to Anthropic's API to generate communication content. Anthropic processes these inputs in accordance with its Business API usage policies. Anthropic does not use Business API inputs to train its models. For more information, see Anthropic's privacy documentation at anthropic.com.
- Supabase: Pendar uses Supabase for database storage and user authentication. Your account data and generated communication logs are stored in Supabase's managed infrastructure.
- Stripe: Subscription billing is processed by Stripe. Stripe collects and processes your payment information directly. Pendar does not store your full payment card details. Stripe's privacy policy is available at stripe.com/privacy.
- Lovable / Cloudflare: The Pendar application is hosted and delivered through Lovable's cloud infrastructure and Cloudflare's network. Standard access and performance data may be collected by these providers.
6. Data Retention
We retain your account information and usage data for as long as your account is active. If you cancel your subscription and request deletion of your account, we will delete your personal information within 30 days, except where retention is required by law or legitimate business purposes such as resolving disputes or enforcing our agreements.
Communications you generate are saved to your account until you delete them or close your account. You may delete saved communications at any time through the Pendar application.
7. Data Security
We take reasonable technical and organizational measures to protect your information, including:
- Encrypted data transmission using HTTPS/TLS
- Row-level security controls that ensure each user can only access their own data
- Authentication managed through Supabase's secure authentication system
No method of transmission or storage is completely secure. We cannot guarantee absolute security of your information.
8. Your Rights and Choices
You have the following rights with respect to your personal information:
- Access: You may request a copy of the personal information we hold about you.
- Correction: You may update your LO Profile information directly within the Pendar application at any time.
- Deletion: You may request deletion of your account and associated personal information by contacting support@pendar.pro.
- Opt-out of service communications: You may opt out of non-essential service communications by contacting us, though we may still send essential account and billing notifications.
To exercise any of these rights, contact us at support@pendar.pro.
9. California Privacy Rights
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of personal information. Pendar does not sell personal information. To exercise your California privacy rights, contact us at support@pendar.pro.
10. Children's Privacy
Pendar is intended for use by licensed mortgage professionals and is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a minor, we will delete it promptly.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be communicated to subscribers via email. The effective date at the top of this policy will reflect the date of the most recent revision. Continued use of Pendar after notice of changes constitutes acceptance of the updated policy.
12. Governing Law
This Privacy Policy is governed by the laws of the State of New York, without regard to conflict of law principles. Any disputes arising under this policy shall be resolved in the courts of Ontario County, New York.
13. Contact Us
Questions, concerns, or requests regarding this Privacy Policy may be directed to:
- Pendar
- support@pendar.pro
- pendar.pro