For borrower data you enter into LoanKit, you (the Subscriber) are the Personal Information Controller and LoanKit (Ascendryx Information Technology) is the Personal Information Processor, processing data on your documented instructions to provide the service.
Borrower identity, contact, financial, employment, and document data you or your applicants provide; and your staff account data. We process it to operate the lending-management features you use (applications, loans, payments, collections, notifications, reporting).
We apply reasonable organizational, physical, and technical safeguards: role-based access, tenant isolation (one subscriber cannot access another's data), encryption in transit, access logging, and restricted document access via expiring signed links. No system is perfectly secure, but we work to protect your data and to notify you of incidents that affect it.
You are responsible for collecting borrower data lawfully, obtaining any required consents, honoring data-subject rights (access, correction, erasure, objection), and using the data only for legitimate purposes. LoanKit will assist you in responding to such requests within the platform's capabilities.
We use service providers to run LoanKit (e.g. hosting, SMS, and email delivery). They process data only to provide their service to us and are bound by confidentiality. A current list is available on request.
We do not sell borrower data. We do not share your data with other subscribers. Where you opt into the LoanKit Qualified Leads marketplace, borrower data is shared with a lender only with the borrower's explicit consent and under a separate agreement.
We retain data while your account is active and as required by law. On termination you may request export or deletion, subject to legal retention requirements.
We will notify you without undue delay of a personal-data breach affecting your data and cooperate on any notifications required under the Data Privacy Act.
For privacy questions or data requests, contact LoanKit support / the Ascendryx Information Technology Data Protection Officer. [DPO details to be finalized.]