Privacy Policy

LoanPal ("we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. Please read this policy carefully before using LoanPal.

1. Information We Collect

We collect information in two ways:

a) Information you provide directly:

• Email address — collected when you sign in using email OTP or Google login through Microsoft Entra ID. We use this solely to identify your account.
• Saved scenarios — if you choose to save a calculator scenario, we store the calculator inputs you explicitly save (such as loan amounts, rates, and terms). We do not store calculator results.
• Scenario names — the names you give your saved scenarios.

b) Information collected automatically:

• Authentication tokens — we store Microsoft Authentication Library (MSAL) tokens in your browser's localStorage to keep you signed in. These tokens stay on your device and are not sent to LoanPal servers except as needed to verify your identity when saving or loading scenarios.

We do not collect: financial account numbers, Social Security numbers, credit card numbers, credit reports, browsing history, IP-based location tracking, or any data from your financial institutions.

2. How We Use Your Information

• To provide the service — your email identifies your account so you can save and retrieve calculator scenarios across devices.
• To authenticate you — we use Microsoft Entra ID to verify your identity. We do not store your password (we use passwordless authentication).
• To improve the service — we may use aggregate, non-identifying usage patterns (such as which calculators are most used) to improve LoanPal. We do not sell or share individual user data.

3. How We Store and Protect Your Data

Saved scenarios are stored on secure, encrypted servers. Authentication is handled by Microsoft Entra ID, a widely used enterprise identity platform. We follow industry-standard security practices to protect your data.

Calculator inputs you enter but do not explicitly save are processed entirely in your browser and are never sent to our servers.

4. Data Sharing

We do not sell your personal data. We share your data only in these limited cases:

• Microsoft Entra ID — your email is processed by Microsoft as our authentication provider. Microsoft's privacy policy applies to their handling of your data.
• Legal requirements — we may disclose information if required by law, court order, or governmental request.
• Business transfer — if LoanPal is acquired or merged, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

5. Cookies and Local Storage

LoanPal does not use traditional tracking cookies. We use your browser's localStorage to store authentication tokens from Microsoft Entra ID (MSAL). This is necessary to keep you signed in between visits. You can clear this data at any time by clearing your browser's site data or by signing out.

We do not use analytics cookies, advertising cookies, or third-party tracking pixels.

6. Your Rights

All users may:

• Delete any or all saved scenarios from the My Account page at any time.
• Sign out to clear local authentication data.
• Contact us to request a full copy of your data or request account deletion.

If you are in the European Economic Area (GDPR):

• You have the right to access, correct, delete, or export your personal data.
• You have the right to withdraw consent at any time.
• You have the right to lodge a complaint with your local data protection authority.
• Our legal basis for processing is (a) your consent when you sign in and (b) legitimate interest in providing the service.

If you are a California resident (CCPA):

• You have the right to know what personal information we collect and why.
• You have the right to request deletion of your personal information.
• You have the right to opt out of the sale of your personal information. We do not sell your personal information.
• We will not discriminate against you for exercising your CCPA rights.

7. Children's Privacy (COPPA)

LoanPal is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately and we will delete it.

8. Data Retention

We retain your saved scenarios and account data for as long as your account is active. If you delete a scenario, it is permanently removed from our servers. If you request account deletion, we will delete all associated data within 30 days.

9. Third-Party Links

LoanPal may contain links to third-party websites, including lender websites shown in calculator features. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing them with any information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last updated" date at the top of this page. Continued use of LoanPal after changes constitutes acceptance of the updated policy.