Data Processing Terms

These terms apply when you send us your scored client list for the paid hand-check. Your account data is covered by the Privacy Policy; this page is about your clients' data — the one moment it leaves your browser.

Only the file you explicitly send us after payment: the scored CSV you choose to upload (names, contact details, and the loan and date fields you included). Your original upload is parsed and scored in your own browser and never reaches us — the hand-check send is a separate, deliberate step that only you can trigger.

Preparing your verified call sheets, and nothing else. We do not contact your clients, we do not market to them, and we do not use the list for any other purpose. If you send a list, that is the job.

Your scored list is deleted within 90 days of your call sheets being delivered. Ask us to delete it sooner and we will — deletion on request is always honoured, and we confirm by email once it is done. Do-not-contact marks saved to your account are kept — that is the point of them — and they hold only the lead keys, not the client list itself.

No one. We do not sell, share or publish your client data. The only processors involved in running the service are Vercel (hosting) and Upstash (storage). Resend sends transactional email — your invoice and order notifications — and your client list is never passed to it.

Your clients' data is never used to train AI models. The AI drafting in the tool runs per request on the lead you are looking at; we do not retain your list as training data.

You remain the controller of your client data at all times. We act only on your instructions, as a processor for the hand-check. You are responsible for making sure your outreach complies with the consent and marketing laws of your market, as set out in the Terms of Service.

These terms describe how we handle your data. They are not legal advice, and nothing here is a certification or regulatory approval.