The Lender Report is operated by JPro Labs LLC.
1. Who is responsible
JPro Labs LLC operates The Lender Report and is responsible for the personal information described here. This policy covers The Lender Report only. Policies for JPro Labs LLC's other products do not cover information collected here. Contact: desk@lender.report.
This policy covers lender.report (the "Site") only. Third-party sites linked from here have their own policies. By using the Site you agree to this policy and to our Terms of Use.
2. What we collect and why
- Financing requests: the fields on the form (purpose, type, state, amount range, timing, names, work email, optional phone, your note). Used to reply to you. Read by staff of JPro Labs LLC.
- Messages to a lender: your name, work email, optional phone and message. Delivered to the lender you chose. We keep a copy of the message for 90 days to deal with abuse and delivery problems, then delete the message text and keep only the date, the lender and a delivery record.
- Waitlist: work email, lender, product, optional note.
- Lender accounts: name, work email, role, and what the representative adds.
- People listed by a lender: name, title, office, business phone and business email, supplied by the lender.
- Usage data: pages viewed, searches, device and browser type, and approximate location from IP address. We do not store your IP address. With a financing request or a message to a lender we keep a keyed hash of it, and of your browser's user-agent, for abuse control, and we delete both after 90 days.
Search, Loan Comps and every lender page work with no account and no name. A search that leads to a results page is part of the address of that page, and we do not tie it to you.
Each form, field by field. A form collects only the fields listed here, and with each one we keep the consent wording you were shown:
- Request financing (/request-financing/): what the loan is for, the property or business type, the state, the county or city, a loan amount range, timing, borrower type, a business name, your name, your work email, a phone number if you choose to give one, your note, and your ticks.
- Contact a lender (on a Verified lender's page): your name, work email, a phone number if you choose to give one, a business name, the state, a loan amount range, your message and your tick.
- Waitlist (/waitlist/): your work email, the lender, the product, a market and a note if you add them.
- Corrections (/corrections/) and the report form (/report/): the page, the figure, what you say it should be, where that is published, who you are if you choose to say, and your email if you want a reply.
- Removing a person's listing (/removal/): the lender, the name as listed, your email and your note.
- Sign-in (/signin/): your email address and a 6-digit code.
- Claiming a lender page (/claim/): your work email, your name and job title, your tick accepting the claim terms and your tick confirming you hold no confidential supervisory information. For a non-bank: entity name, state and number, and license details.
- Lender dashboard (/dashboard/): the statement, loan details and named people you add for your institution, with your confirmation that each person has agreed to be listed.
- Saved lists and alerts (/lists/): the name of each list, the lenders on it with one of six fixed statuses, and what you asked to be alerted on, with the address the alert goes to and the wording the form showed you. A saved search keeps the deal words you ran, such as the kind of loan, the size and the place.
Notes stay in your browser. The notes you write about a lender on a saved list are kept in this browser's local storage and nowhere else. They are not sent to us, we cannot read them, and we cannot bring them back if you clear the browser's data or use another browser. The lists page can export them to a file and import that file again, which happens on your own device.
Accounts. An account holds your email address, your plan and dates. Sign-in codes last 10 minutes, and we keep only a keyed hash of each. A session lasts 30 days or until you sign out, and we keep only a hash of its token. API keys are stored as a hash plus the last four characters, with the label and when each was created and last used. We cannot show you a key again after it is created.
Payments. No payment is taken on the Site today. When paid plans open, a payment processor will handle card and bank details on its own pages under its own privacy policy, and we will not see or store a card or bank account number.
Collected automatically. Our hosting provider, Cloudflare, processes standard technical data such as IP address, approximate location derived from it, browser type and the pages requested, to deliver the Site and protect it from abuse. To limit abuse we also keep short-lived counters tied to an email address or IP address, and we delete them when they expire.
No analytics from other companies. The Site loads no analytics, advertising or tracking tool from any other company, and it sends the address of no page to one. That includes the address of a Loan Comps search, which holds the whole deal you typed.
Counts we keep ourselves. The Site keeps a few counts in its own database, and these are the only counts it keeps: how many times a lender's page is viewed, how many times a lender appears in a list of search results, and, for each, the kind of loan, the size range and the state of the search, plus the deal words from our own lists (purpose, number of units, property type or industry). Each visit adds one to a count and is forgotten. No address, cookie, session or browser detail is kept with a count, and visits from search engines and other automated software are not counted. We do not count taps on a lender's phone, email or website links, and we never count what you type into a box.
Lender analytics. A lender can see those counts for its own page, in aggregates. A count under 5 prints as "fewer than 5". Lenders never see who searched, who viewed their page, or what is on your lists.
3. What we do not collect
We do not ask for Social Security numbers, tax IDs, dates of birth, account numbers, credit scores, financial statements or any information about race, religion, national origin, sex, marital status, age or disability. If you send any of these, we delete them when we see them.
No borrower name, home address or Social Security number from any government filing appears anywhere on the Site.
4. Who receives information
- A financing request is received by JPro Labs LLC only. We do not send it to a lender, a broker or anyone else unless you later ask us in writing to do so.
- A message to a lender is received by that lender only.
- Service providers that host the site and deliver email act on our instructions.
- We do not sell personal information collected on The Lender Report, and we do not share it for cross-context behavioral advertising.
- We may disclose information when the law requires it, or as part of a sale of the business, in which case this policy continues to apply to it.
In more detail:
- Service providers. Cloudflare hosts the Site, runs the databases where accounts and form submissions are stored, and delivers our email. They process it for us under obligations suited to the service. JPro Labs LLC keeps an internal copy of waitlist entries and financing requests in a private records tool, used for The Lender Report only. It is covered by the same deletion requests. It is not sold or shared.
- Lenders. Your searches, lists and alerts are not sent to lenders. A lender receives your contact details from us only when you send that lender a message from its own page.
- Professional advisors, such as lawyers, accountants and insurers, as reasonably needed.
- Legal and safety. When we believe disclosure is required by law, subpoena or legal process, or needed to enforce our agreements or protect the rights, property or safety of us, our users or others.
5. How long we keep it
Financing requests: 24 months, then deleted. Message text sent to a lender: 90 days. Waitlist entries: until the product opens plus 12 months, and never longer than 24 months from the day you joined, or until you ask us to delete them. The page address the form was on and the user-agent hash are deleted after 90 days. Lender account records: for the life of the account plus 24 months. People listed by a lender: until the lender or the person removes them.
Sign-in codes last 10 minutes and sessions 30 days. Lists, statuses and alerts stay until you delete them or your account. Notes are in your browser, and stay there until you clear them. Correction requests and reports are kept 24 months. A log of every edit to a lender page is kept for that lender. When you turn an alert off we keep a record so we keep honoring it.
6. Your choices
Anyone can ask us to show, correct or delete the personal information we hold about them by writing to desk@lender.report. We answer within 30 days. People listed on a lender's page can be removed within 5 business days, no reason needed. Every marketing email has an unsubscribe link. We do not treat you differently for making a request. When you ask us to delete a waitlist entry or a financing request, we delete it from our database and from that internal copy within 30 days.
Alerts are emails only: unless you are signed in, you get one confirmation email first, and every alert carries an unsubscribe link that works without signing in. Account messages, such as sign-in codes, are not marketing and carry no promotion. We may need to confirm that a request comes from you. Authorized agents may submit requests with proof of authorization. To have a listing of you on a lender's page removed, use the removal form.
7. Public records
Most of the site is public-record information about lenders, which are businesses. Where a public record names a person in an official role, we show the name and role with the source. To ask for a correction or removal, write to desk@lender.report. The Corrections page has the form and the steps.
8. State privacy rights
If a state privacy law gives you rights over your personal information, we honor them through the process in section 6, whether or not the law applies to a company of our size. We do not sell personal information collected on The Lender Report. We honor Global Privacy Control signals as an opt-out.
9. Children
The site is for business users and is not directed to anyone under 18. We do not knowingly collect their information. If you believe a minor has sent us information, contact us and we will delete it.
10. Calls and texts
If you give a phone number on a financing request, a person may call you about that request. We do not send marketing texts and do not use recorded or artificial-voice calls.
11. Cookies and similar technologies
If you never sign in, the Site sets no cookies of its own. When you sign in it sets two, both for 30 days and both gone when you sign out:
__Host-lr_s, which keeps you signed in and which scripts cannot read, and lr_plan, which holds only your plan's name so a page can show the right links and grants no access.
Your browser's local storage remembers two things: whether you turned off the keyboard shortcut for search, and the notes you write on your saved lists. Its session storage holds the lenders you added to the compare tray, and the browser clears it when you close the tab. None of it is sent to us. Cloudflare may set a strictly necessary security cookie to protect the Site from abuse.
The Site does not respond to "Do Not Track" signals. It honors Global Privacy Control as section 8 says.
12. Security
We use commercially reasonable administrative, technical and physical safeguards. No method of transmission or storage is completely secure. More on the security page.
13. Users outside the United States
The Site is operated from and intended for the United States. If you use it from elsewhere, your information will be transferred to, stored and processed in the United States, where privacy laws may differ.
14. Third-party links
Lender pages link to lenders' own websites and to regulators. This policy does not cover those sites. Read their policies directly.
15. Changes to this policy
We may update this policy. The revised version will be posted here with a new effective date, and material changes may be highlighted on the Site. Continued use after posting means you accept it.
16. Contact
The Lender Report is operated by JPro Labs LLC. 335 E Linton Blvd, Suite B14 #2074, Delray Beach, FL 33483. desk@lender.report