Last Updated: May, 2026
This Privacy Policy describes how Lendware, Inc., a Delaware corporation, and its affiliates (“Lendware,” “we,” “us,” or “our”) collect, use, disclose, and protect personal information in connection with our website located at https://lendware.ai, our software platform, mobile applications when available, integrations, communications, and related products and services (collectively, the “Services”).
Lendware provides a business-to-business CRM, marketing, reporting, communications, scoring, workflow, and related technology platform for mortgage lenders, loan officers, mortgage brokers, and other business and professional users. The Services are intended for U.S.-based business and professional use only and are not intended for personal, household, or consumer use.
This Privacy Policy covers two different types of information processing:
1. Lendware-Controlled Information. This includes personal information that Lendware collects and uses for its own business purposes, such as information about website visitors, demo requesters, prospective customers, customer administrators, platform users, billing contacts, support contacts, sales prospects, event registrants, and people who communicate directly with Lendware.
2. Customer-Controlled Data. This includes borrower, consumer, lead, prospect, referral partner, transaction, campaign, communication, CRM, loan application status, and related contact data that Lendware customers upload, import, sync, generate, or otherwise process through the Services. For Customer-Controlled Data, Lendware generally acts as a service provider or processor on behalf of the applicable customer. The customer is generally the business or controller responsible for that information.
If you are a borrower, consumer, prospect, referral partner, or other individual whose information is contained in a Lendware customer’s account, please contact the lender, loan officer, broker, or other organization with whom you have a relationship to exercise privacy rights or ask questions about their use of your information. If Lendware receives a privacy request relating to Customer-Controlled Data, we may refer the request to the applicable customer or assist the customer in responding, unless applicable law requires Lendware to respond directly.
This Privacy Policy does not apply to Lendware employment, recruiting, contractor, or job applicant information. We may provide separate notices for those contexts where required.
We may collect the following types of personal information when you interact directly with Lendware, visit our website, request a demo, register for an event, communicate with our sales or support teams, use the Services as an authorized user, or otherwise provide information to us.
Business contact information, such as name, business email address, business mailing address, phone number, company name, job title, professional role, and professional license or identifier where relevant.
Account information, such as username, password, authentication information, account settings, user role, customer account association, and administrative permissions.
Customer relationship information, such as demo requests, sales communications, support requests, onboarding communications, training activity, customer success notes, event participation, product interests, and related business interactions.
Billing and transaction information, such as customer name, billing contact, billing address, invoice details, payment status, transaction identifiers, subscription details, and limited payment-related information provided by our third-party payment processor. Lendware does not collect or store full payment card numbers, bank account numbers, or payment security codes.
Communications information, such as emails, messages, call notes, support tickets, chat communications, form submissions, feedback, survey responses, and other information you choose to provide when communicating with us.
Usage and technical information, such as IP address, browser type, device type, operating system, access times, pages or screens viewed, feature usage, error logs, performance information, session information, authentication logs, and other information about how users access and interact with the Services.
Marketing and preference information, such as communication preferences, event interests, opt-in and opt-out records, consent records, unsubscribe status, and interactions with Lendware communications.
Other information you provide to us or that we collect with your consent or as otherwise disclosed at the time of collection.
Lendware customers may upload, import, sync, generate, or otherwise process information through the Services. Customer-Controlled Data may include:
Customers are responsible for determining what Customer-Controlled Data they submit to or process through the Services and for ensuring that they have all rights, notices, consents, authorizations, and legal bases required for Lendware to process such information on their behalf.
Unless expressly authorized in writing by Lendware and permitted by applicable law, customers should not upload Social Security numbers, credit reports, credit scores, bank account numbers, payment card numbers, income information, employment history, debt balances, home equity information, mortgage balance information, or consumer credit attributes into the CRM.
Lendware does not require customers to upload Social Security numbers, credit reports, credit scores, bank account numbers, income, employment history, debt balances, home equity, mortgage balance, or consumer credit attributes into the CRM. Lendware may process limited loan application status information when that information is provided by a customer or integration and relates to a consumer’s transaction with that customer.
Customers and users may choose to connect supported third-party accounts, applications, and systems to the Services. These may include email accounts, calendar accounts, loan origination systems, communications platforms, data providers, and other integrations.
When a customer or user connects a supported email account, Lendware synchronizes communications only to the extent related to contacts stored in the applicable customer’s Lendware account, so that users can view, manage, and track customer-directed communications within the platform. Lendware does not use connected email content for unrelated marketing, advertising, cross-customer model training, or resale.
Lendware may support calendar synchronization. When a customer or user connects a supported calendar account, Lendware may synchronize calendar events, meeting details, participants, timestamps, and related metadata only to the extent relevant to contacts, workflows, or activities stored in the applicable customer’s Lendware account. Lendware does not use connected calendar content for unrelated marketing, advertising, cross-customer model training, or resale.
Lendware’s use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements.
Lendware may offer mobile applications. Our mobile applications do not collect precise geolocation information, phone contacts, call logs, SMS logs, camera access, photos/files, or device advertising identifiers unless we separately disclose that collection and, where required, obtain your permission.
Lendware’s mobile application may request access to your device microphone solely to enable voice calls through the platform. Lendware does not use microphone access for background recording, unrelated analytics, advertising, or unrelated product features.
Lendware’s mobile application may use push notifications to provide account, workflow, reminder, support, security, or service-related notifications. You may control push notification permissions through your device settings.
Lendware may use Lendware-Controlled Information to:
Lendware uses Customer-Controlled Data only to provide, secure, support, maintain, administer, and improve the Services for the customer whose account contains that data; to comply with the customer’s instructions; to fulfill contractual obligations; to protect the Services; to comply with law; and as otherwise permitted by the applicable customer agreement.
Lendware does not use borrower, consumer, lead, prospect, referral partner, transaction, campaign, communication, or CRM contact data from one customer to provide services to another customer.
Lendware does not combine customer databases for cross-customer marketing, model training, lead generation, resale, or enrichment.
Lendware does not use Customer-Controlled Data for Lendware’s own sales outreach, marketing outreach, advertising, retargeting, custom audiences, or lookalike audience creation unless the individual separately provides that information directly to Lendware or otherwise interacts directly with Lendware.
Lendware may create and use aggregated, de-identified, or anonymized information derived from use of the Services, provided that such information does not reasonably identify an individual, customer, customer account, borrower, consumer, prospect, referral partner, or other contact. This may include operational and service analytics such as platform performance, feature usage, system reliability, error rates, deliverability metrics, support trends, security trends, and similar non-identifying service analytics.
Lendware may offer scoring, prioritization, analytics, recommendation, or similar features, including Lendware Predict. Where a customer uses these features, Lendware may work with a third-party scoring provider to process customer-controlled contact or borrower-related data and generate scores, rankings, segments, and high-level signals relating to the customer’s contacts.
These outputs are designed to help customers prioritize marketing, outreach, CRM workflows, and business follow-up. They are not credit reports, credit scores, eligibility determinations, underwriting decisions, loan pricing decisions, or adverse action notices.
Lendware does not use Social Security numbers, credit reports, or credit scores to provide these features. Lendware does not intentionally use protected characteristics such as race, ethnicity, religion, sex, gender, marital status, disability, military status, or similar legally protected traits to generate borrower or contact scores.
Customers may not use scoring outputs as the sole basis for any credit, lending, underwriting, pricing, eligibility, discouragement, or adverse action decision. Customers are solely responsible for determining whether and how they may lawfully use scoring outputs, signals, recommendations, or analytics under applicable fair lending, consumer protection, privacy, credit, advertising, and mortgage laws.
Lendware’s third-party scoring provider is contractually required to process customer-controlled data only to provide services to Lendware and the applicable customer, subject to limited rights to create aggregated or de-identified data as permitted by the provider agreement and applicable law.
Lendware may use personal information, including business contact information, to communicate with customers, users, prospective customers, loan officers, mortgage professionals, partners, event registrants, demo requesters, and others who have interacted with us or expressed interest in our Services.
These communications may include service-related messages, account notices, security alerts, product updates, support communications, training information, event invitations, sales outreach, and marketing communications about Lendware products and services.
Where permitted by law, Lendware may contact you by email, telephone, text message, or similar communication channels. We may use service providers, including communications platforms and messaging providers, to help send and manage these communications.
If you provide a mobile phone number to Lendware and opt in to receive calls or text messages from us, you agree that Lendware may contact you by call or text message at the phone number you provided, including for sales, marketing, demo scheduling, product updates, event invitations, account activity, support, or related business purposes. Message frequency may vary. Message and data rates may apply. You may opt out of marketing text messages at any time by replying STOP. You may reply HELP for help where supported. You may also contact us at privacy@lendware.ai.
Consent to receive marketing calls or text messages is not required as a condition of purchasing any product or service from Lendware.
Lendware will honor opt-out and unsubscribe requests as required by applicable law. Even if you opt out of marketing communications, we may still send non-marketing communications, such as security alerts, account notices, support messages, transactional messages, or legally required notices.
Customers may use the Services to send, manage, or track email, text message, phone, voicemail, or other communications to their own contacts. Lendware provides the platform and related service providers used to enable these communications, but customers determine whether, when, and to whom communications are sent.
Customers are responsible for the recipients, message content, campaign timing, consent basis, opt-out handling, suppression lists, and legal compliance for their outreach. Customers are responsible for obtaining and maintaining all required consents, opt-ins, permissions, notices, and suppression lists.
Customers may use features within the Services to manage communication preferences, opt-outs, unsubscribe requests, suppression lists, and do-not-contact designations. Lendware processes these preferences as directed by the applicable customer and to help provide the Services. Customers remain responsible for ensuring that their communications comply with applicable laws and that opt-out, unsubscribe, consent, and suppression information is accurate, current, and properly applied across all systems they use.
Lendware may offer optional call recording, transcription, summarization, or call-analysis features. These features are optional and must be enabled by the applicable customer or account administrator.
Where these features are enabled, Lendware may process call audio, transcripts, summaries, metadata, and related communications content to provide the feature, maintain records, support customers, improve service quality, and comply with applicable law.
Customers are responsible for determining whether and how to enable these features, configuring these features appropriately, providing any legally required notices, obtaining any legally required consents, and complying with applicable call recording, wiretap, telemarketing, employment, consumer protection, and privacy laws.
Lendware does not use microphone access for background recording. Microphone access is used only when a user initiates or participates in a platform-enabled voice call or otherwise enables a voice feature.
Lendware may use cookies, pixels, local storage, log files, software development kits, and similar technologies on our website and Services to operate the website and Services, maintain security, prevent fraud, remember preferences, measure performance, understand usage, improve our products, provide support, and support marketing attribution.
Lendware uses product analytics and monitoring tools, such as Google Analytics, PostHog, and similar tools, inside the authenticated paid application to operate, secure, debug, support, measure, and improve the Services. These tools help us identify errors, understand feature usage, prioritize product fixes and enhancements, and identify training or support opportunities.
Lendware does not use these tools to sell personal information or share personal information for cross-context behavioral advertising.
Most browsers allow you to remove or reject cookies. If you disable cookies, some parts of the website or Services may not function properly.
Lendware may disclose personal information as described below.
Service providers and subprocessors. We may disclose personal information and Customer-Controlled Data to vendors, service providers, subprocessors, and contractors that provide services on our behalf, such as hosting, infrastructure, communications, messaging, email delivery, scoring, analytics, support, security, monitoring, billing, payment processing, professional services, and integration support. These parties are permitted to process personal information only as needed to provide services to Lendware and, where applicable, the applicable customer.
Customer-authorized integrations. If a customer or user enables an integration, we may disclose information to or receive information from the connected third-party system as authorized by the customer or user.
Customers and users. We may disclose information within the applicable customer account, including to customer administrators and authorized users, according to the customer’s account settings, permissions, and instructions.
Professional advisors. We may disclose information to lawyers, auditors, insurers, accountants, bankers, consultants, and other professional advisors where necessary in the course of the professional services they provide to us.
Legal, compliance, safety, and enforcement purposes. We may disclose information where we believe it is necessary or appropriate to comply with law, legal process, subpoenas, court orders, government requests, regulatory obligations, security requirements, or contractual obligations; to protect rights, privacy, safety, or property; to enforce agreements; to investigate fraud, abuse, security incidents, or unlawful activity; or to establish, exercise, or defend legal claims.
Business transactions. We may disclose or transfer information in connection with an actual or potential merger, acquisition, financing, corporate transaction, reorganization, sale of assets, bankruptcy, or similar event.
With consent or direction. We may disclose information with your consent or at the direction of the applicable customer.
Lendware does not sell personal information. Lendware does not share personal information for cross-context behavioral advertising. Lendware does not use Customer-Controlled Data for Lendware’s own advertising, retargeting, custom audiences, or lookalike audience creation.
If Lendware makes advertising, retargeting, custom audience, or similar features available to customers in the future, those features will be customer-directed, and customers will be responsible for determining whether their use of such features is permitted by applicable law and for providing all required notices, consents, opt-outs, and disclosures.
Customers may pay for the Services by credit card or other supported payment methods. Payment transactions are processed by third-party payment processors. Lendware does not collect or store full payment card numbers, bank account numbers, or payment security codes.
We may receive limited billing and transaction information, such as customer name, billing contact, billing address, payment status, invoice details, transaction identifiers, and the last four digits or expiration date of a payment card, where provided by our payment processor.
Lendware retains personal information for as long as reasonably necessary to provide, secure, support, improve, and administer the Services; comply with legal, regulatory, accounting, tax, security, and contractual obligations; resolve disputes; enforce agreements; and maintain appropriate business records.
The specific retention period depends on the type of information, the purpose for which it is processed, the customer’s instructions, applicable legal requirements, and our backup, security, and disaster-recovery practices.
For Customer-Controlled Data, including borrower, prospect, referral partner, transaction, campaign, communication, and CRM data stored in a customer’s account, Lendware generally retains the data for the duration of the customer relationship.
Following termination or expiration of a customer account, Customer-Controlled Data will be made available for export for the period specified in the applicable agreement, typically 30 days unless otherwise agreed. After that period, Lendware may delete, disable access to, return, or de-identify Customer-Controlled Data, subject to applicable law, backup retention cycles, legal holds, and limited retention for billing, security, compliance, audit, dispute-resolution, and legal purposes.
Backup copies may persist for a limited period in accordance with Lendware’s ordinary backup and disaster-recovery practices before being overwritten or deleted.
Lendware maintains a written information security program that includes administrative, technical, and physical safeguards designed to protect personal information and Customer-Controlled Data. Lendware is SOC 2 Type II audited and uses compliance-monitoring tools, including Vanta, to support its security, privacy, and vendor-management program.
Customers may request additional security information through the appropriate account, legal, or security review process, subject to confidentiality requirements.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Lendware is based in the United States, and the Services are intended for U.S.-based business and professional use only. Lendware currently processes and stores personal information and Customer-Controlled Data in the United States. The Services are not intended for use by customers located outside the United States.
If our processing locations change in the future, we will update this Privacy Policy or provide other notice as required by applicable law.
The Services are intended for business and professional use only and are not directed to individuals under 18. Lendware does not knowingly collect personal information from individuals under 18. If we learn that we have collected personal information from an individual under 18 without appropriate authorization, we will take reasonable steps to delete it.
Depending on your relationship with Lendware and applicable law, you may have certain choices regarding your personal information.
Account information. If you have an account with us, you may be able to review and update certain account information by logging into your account.
Email marketing. You may opt out of marketing emails by following the unsubscribe instructions in the email or by contacting us at privacy@lendware.ai. You may continue to receive service-related and other non-marketing emails.
Text messages. You may opt out of marketing text messages from Lendware by replying STOP. You may reply HELP for help where supported. You may also contact us at privacy@lendware.ai.
Cookies. You may be able to remove or reject cookies through your browser settings. If you disable cookies, some parts of the website or Services may not function properly.
Customer-Controlled Data. If your information is contained in a Lendware customer’s account, please contact the applicable customer directly to exercise your privacy rights. Lendware may refer your request to the applicable customer or assist the customer in responding, unless applicable law requires Lendware to respond directly.
Depending on your state of residence and our relationship to your information, you may have certain rights under applicable U.S. state privacy laws. These rights may include the right to:
These rights are subject to legal limitations and may not apply where Lendware processes personal information solely as a service provider or processor on behalf of a customer.
To submit a privacy request, contact us at privacy@lendware.ai. We may need to verify your identity before responding to your request. If your request relates to Customer-Controlled Data, we may refer the request to the applicable customer or assist the customer in responding, unless applicable law requires us to respond directly.
If we deny your privacy request, you may appeal our decision by emailing privacy@lendware.ai with the subject line “Privacy Request Appeal.” We will review and respond to your appeal as required by applicable law.
This section applies to California residents where the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to Lendware’s processing of personal information.
Depending on your relationship with Lendware, we may collect the following categories of personal information:
Sensitive personal information may be processed in limited circumstances, such as account login credentials, communications content, or information contained in Customer-Controlled Data as determined by the applicable customer. Lendware does not use sensitive personal information to infer characteristics about individuals.
We may collect personal information from:
We collect, use, and disclose personal information for the purposes described in this Privacy Policy, including to provide, operate, secure, support, administer, analyze, improve, and market the Services; communicate with customers and prospects; provide customer-directed communications tools; provide scoring and prioritization features; process billing; comply with law; enforce agreements; prevent fraud; and protect rights and security.
Consumer information is the property of Lendware’s Customers. Lendware will not sell that information to any 3rd party.
Lendware does not sell or share personal information for cross-context behavioral advertising.
Lendware does not use Customer-Controlled Data for Lendware’s own advertising, retargeting, custom audiences, or lookalike audience creation.
We retain personal information according to the retention practices described in the “Data Retention” section of this Privacy Policy. We do not retain personal information longer than reasonably necessary for the purposes described in this Privacy Policy, subject to customer instructions, applicable law, contractual obligations, legal holds, backup retention cycles, and legitimate business needs.
California residents may have the right to request access to, deletion of, or correction of personal information; to know the categories and specific pieces of personal information collected; to know the categories of sources, purposes, and disclosures; to opt out of sale or sharing; and to limit certain uses and disclosures of sensitive personal information where applicable.
Because Lendware does not sell personal information or share personal information for cross-context behavioral advertising, we do not provide a “Do Not Sell or Share My Personal Information” link for Lendware’s own processing unless required by applicable law or unless our practices change.
To exercise California privacy rights, contact us at privacy@lendware.ai. If your request relates to Customer-Controlled Data, we may refer the request to the applicable customer or assist the customer in responding, unless applicable law requires us to respond directly.
The Services may contain links to websites, applications, services, or platforms operated by third parties. We do not control those third parties and are not responsible for their privacy practices. We encourage you to review the privacy policies of third-party services before providing information to them or connecting them to the Services.
We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last Updated” date above and provide additional notice where required by law. Your continued use of the Services after an updated Privacy Policy becomes effective means that you acknowledge the updated Privacy Policy.
If you have questions about this Privacy Policy or Lendware’s privacy practices, or if you would like to submit a privacy request, please contact us at:
Lendware, Inc.
192 Lexington Avenue, 16th Floor
New York, NY 10016
Attn: Privacy
Email: privacy@lendware.ai
We Make Top Performers.
Lendware, Inc.
192 Lexington Avenue
16th Floor
New York, NY 10016
©2025 Lendware. All rights reserved.
