Privacy

What is kept

Submitting the form stores nothing at all. A row is written only when you download the document, and it holds four values: a row number, the reference number, a fingerprint of the file, and the time it was issued. That is the entire table — there is no column for a figure, a name, a score or a narrative, so there is nowhere for one to go.

The reference number and a fingerprint of this file are retained so it can be verified. Your figures are not.

The figures behind the document do not survive the document. There is no copy to hand over, subpoena, or lose.

What is never taken in

• Credit bureau data. None is requested, received, or held. myloankit does not pull credit.
• Consumer reports. No report about you from any third party enters this service.

The verify link

Each PDF carries a reference number. Anyone you hand the file to can check that it is the file myloankit issued, and when it was issued. The check returns exactly those two facts.

It never returns your figures, your document list, or anything else from inside the file. Reference numbers are not sequential, so the set of issued documents cannot be walked by guessing.

What leaves this service

No figure you enter is sent anywhere outside this service. Not the loan amount, not revenue or expenses, not debt service, not the balance sheet, not what you would pledge as collateral, not your equity injection, and not your score. They are used to build your document and then purged. This paragraph is a statement about the code, and the list below is every outbound call it makes.

• Mapping services — sent the city and state you entered, then a map point and the industry you described. Today that is OpenStreetMap's Nominatim and the public Overpass mirrors, and, where a key is configured, LocationIQ and Geoapify. They see a place and a business type. They are not told who is asking. No street address and no ZIP is asked for at all, so none can be sent.
• The language model, where one is configured — sent the six free-text answers you wrote in the concept and market section, and the number of months you have been trading. That is the whole of it. It is not sent your figures, your business name, your city, your state, your score, or the document. It writes the narrative sections and nothing else; the compliance page sets out where it is and is not used.
• Google Analytics — public pages only, and never a page carrying your figures. See below.

Those free-text answers are the one thing that leaves in your own words, so they are the one place to be deliberate: write about the businesses and the premises around you, and the form will reject anything describing the people of an area.

Nothing else leaves. The document is not transmitted anywhere; the hosting provider necessarily handles the traffic that carries it, as it does for any website, and this service writes no access log of its own.

Analytics

The public pages carry Google Analytics. It records which pages were viewed, coarse device and browser details, and an approximate location worked out from the network address the request arrived on. That is the whole of it.

It is not present on any page that carries your figures. When you submit the form, the page that comes back — and the document download behind it — runs with no third-party script at all. Google Analytics never receives form contents, the figures you entered, your score, or the file.

Who receives your file

You do. myloankit does not transmit the PDF to a lender, a broker, or anyone else, and has no arrangement under which it would. If the document reaches a lender, it is because you sent it there.