Security and how we handle your data

How is your data protected?

Everything you send us, from the application form to your bank statements and tax returns, is encrypted while it travels to us and while it is stored. Access inside the company is limited to the people and systems that need it to support your application.

BusinessLoanBroker.ai runs on Levr, so the same security program covers both. We do not list certifications here; we would rather you read the current state of the program on Levr's trust and security page, which is the authoritative source and is kept up to date.

How do AI assistants get access?

Through OAuth consent, the same kind of permission screen you see when you connect an app to your email or calendar. When you connect Claude, ChatGPT, Gemini, Grok or another assistant to our MCP server, you sign in to your own account and approve what the assistant may do. The assistant never sees your password.

Your assistant only gets the access you grant, and you can revoke it at any time from your account without affecting your application. Submissions to lenders still require your approval, even when an assistant prepared the file. Scopes, tokens and what each tool can do are on our agent security page.

Who sees your application?

Only the lenders you are matched with, and only after you approve the submission. Matching happens first, inside the platform, without sending your file anywhere. You then see which lenders fit and approve the submission before any lender receives your application and documents.

We do not send your application to every lender on the platform or to lenders you were not matched with. Each lender sees it to make a credit decision, under its own privacy obligations. For the lender's side after that, read what happens after you submit.

Do we sell your data?

No. We do not sell your application, documents or contact details to anyone, and we do not share them with marketers or lead buyers. We are paid by lenders when a loan funds, as explained on how we make money, so we have no revenue from your information. Our privacy policy sets out what we collect, why, and your rights over it.

How are your documents stored?

Documents are stored to support your application: so lenders can review them, so you do not have to upload them again for a second lender, and so offers can be tracked back to the file they were based on. They are encrypted at rest, stored with access controls, and not used for anything outside your application.

If you want documents removed, ask through the contact page. Some records must be kept for a period after a loan funds to meet lender and legal obligations, and we will tell you plainly what can be deleted and when.

What should you do on your side?

Use a strong, unique password and keep your email account secure, since that is how account recovery works. Share documents only inside the application or through an assistant you connected yourself; never email statements to someone claiming to be us. Review what you have granted to assistants from time to time and revoke anything you no longer use. If anything looks wrong, tell us through the contact page.