Privacy Policy

For records your institution creates about its own customers and staff, your institution is the data controller and we act as processor on your instructions. For your account, billing and support interactions with us, we act as controller.

Account data (names, work email, role), institution data (registration details, branches), operational records your staff enter (members, applications, loans, repayments, documents), billing records held by our payment processor, and technical logs such as IP address, device and audit events.

To provide and secure the platform, authenticate users, maintain audit trails, deliver transactional email, process payments, provide support, and meet legal obligations. We do not sell personal data and do not use your operational records for advertising.

Every record is bound to a tenant identifier and access is enforced in the database through row-level security, not only in the application. Data is encrypted in transit and at rest, documents are stored in private buckets, and privileged actions are logged immutably.

We use vetted providers for hosting and managed database, transactional email delivery, and payment processing (Paddle, as merchant of record). Each is bound by data-processing terms. A current list is available on request.

Operational records are retained while your subscription is active and for 30 days after termination to allow export, unless a longer period is required by financial regulation or instructed by your institution. Audit logs are retained for the statutory period applicable to your jurisdiction.

Depending on your jurisdiction you may request access, correction, deletion, restriction or portability of your personal data. Borrowers and members should contact their institution first; we support institutions in fulfilling those requests. Email privacy@lendvoy.com for privacy enquiries.

Where data is processed outside your country, we rely on recognised transfer mechanisms such as standard contractual clauses with our providers.

We use strictly necessary cookies and local storage for authentication and session continuity. We do not use advertising cookies.

We will post updates to this policy on this page and notify customers of material changes. Questions can be sent to privacy@lendvoy.com or to the postal address below.