Privacy Policy

Loanease is a commercial loan referral platform that connects referrers (such as brokers, accountants, and financial planners) with our commercial finance team. We operate in India and process personal data in accordance with applicable Indian data protection law.

Operator: LOANEASE PTY LTD
Contact: support@loanease.com

We collect the following categories of information:

Account & identity information

• Name (first name, surname)
• Email address
• Phone number (Indian +91 format)
• State of residence
• Role (referrer admin, team member)
• Password (stored as a bcrypt hash; never in plain text)
• Two-factor authentication codes (time-limited, then deleted)

Business information (referrer organisations)

• Company name, trading name, and ABN/registration details
• Company address and contact details
• Director names
• Industry type and commission split arrangements
• Signed referrer agreement (with IP address and timestamp)

Loan opportunity & client data

• Client business name, entity type, contact details, and ABN
• Loan amount, property value, loan type, asset details, and purpose
• Financial information you submit (net profit, depreciation, interest costs, rental income, liabilities)
• Risk indicators (ATO issues, credit issues, additional security)
• Notes and comments you add to an opportunity

Device & usage information

• Authentication tokens stored on your device (secure storage)
• App version and platform (iOS / Android / web)
• IP address and approximate location (for login security)
• Login history (successful logins, failed attempts, blocked attempts)
• Audit logs of changes you make in the platform

Biometric information

If you enable Face ID, Touch ID, or fingerprint login, the biometric template is stored and processed only on your device by the operating system. Loanease never receives, stores, or has access to your biometric data.

• To create and operate your Loanease account
• To allow you to submit, manage, and track loan opportunities and applications
• To communicate with you about your account, opportunities, and our services (via email and the in-app interface)
• To verify your identity and protect your account (2FA, login history, IP checks)
• To calculate referrer commissions in accordance with your agreement
• To meet legal, regulatory, and compliance obligations
• To detect, investigate, and prevent fraudulent or unauthorised activity
• To improve the Service (in aggregate; we do not sell your personal data)

We share personal information only as needed to operate the Service:

• Loanease staff who process the opportunities you submit
• Other members of your referrer organisation can see opportunities submitted under that organisation
• Service providers who help us run the Service (cloud hosting on Vercel, database hosting on MongoDB Atlas, transactional email through Postmark). These providers process data only on our instructions.
• Lenders and aggregators when you submit an opportunity for assessment
• Regulators, law enforcement, or courts where required by law

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

• All traffic between your device and our servers is encrypted in transit (HTTPS/TLS).
• Passwords are hashed with bcrypt (12 rounds); we never store plain-text passwords.
• Authentication tokens on mobile devices are stored in the OS secure keystore (Android Keystore / iOS Keychain).
• Access to the database is restricted to authorised personnel and audited.
• Refresh tokens are rotated on each refresh and invalidated on logout.
• Sensitive actions are logged in our audit log.

We retain personal data only for as long as needed for the purposes set out above and to meet our legal and regulatory obligations.

• Active account data is kept while your account is open.
• After account deletion (see below), personal identifiers are removed and your user record is anonymised. Loan opportunities, audit logs, and regulatory records you created may be retained for up to 7 years to meet financial-services record-keeping requirements.
• Login history is retained for security purposes and may be deleted after 12 months.

You can:

• Access the personal information held about you
• Correct inaccurate information (via the Edit Profile screen)
• Delete your account at any time (Account → Delete Account inside the app, or by emailing us)
• Withdraw consent for optional processing
• Complain to the relevant data protection authority

To exercise any of these rights, email support@loanease.com. We will respond within 30 days.

You can delete your Loanease account at any time from inside the mobile app (Account → Delete Account) or by emailing support@loanease.com from the email address registered on your account.

When you delete your account:

• Your login credentials, password, sessions, and 2FA codes are deleted immediately.
• Your name, email, phone number, and other personal identifiers are removed from your user record.
• Loan opportunities and client records you created are retained in anonymised form for regulatory compliance.
• If you are the only administrator on your referrer organisation, the organisation account will also be deactivated.

The Service is intended for finance professionals and is not directed at people under 18. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notice. The “Last updated” date at the top reflects the most recent version.

If you have any questions about this Privacy Policy or our handling of your personal data, please contact:

LOANEASE PTY LTD
Email: support@loanease.com