Privacy Policy

This Privacy Policy explains how Cevrynt, Inc. ("Cevrynt", "we", "us" or "our") handles personal information in connection with our marketing website at cevrynt.com (the "Website") and our business communications. It is written to be read in one sitting. If anything here is unclear, email arin@cevrynt.com.

01Scope of this policy

This policy covers personal information we collect through the Website and when you correspond with us — for example, when you email us, book a walkthrough, discuss a pilot or partnership, or contact us as an investor.

It does not govern borrower or applicant information that a lender, broker or other customer uploads to the Cevrynt underwriting application (reached through Sign In). In that context we act as a service provider to our customer, process that information only on the customer's instructions, and handle it under our written agreement with that customer. If you are a borrower or applicant, the lender or broker you applied through is responsible for your data and is the right first contact for requests about it — see Borrower data in the Cevrynt platform.

02Information we collect

Information you give us

The Website has no account sign-up and no forms that submit data to us. When you contact us by email, or otherwise correspond with us, we receive what you choose to include, which usually means:

• Your name, job title, company and work email address.
• The content of your message, and any files or details you decide to share about your underwriting workflow, a pilot or a partnership.
• Scheduling details, if you book a walkthrough (see Calendly below).

Please do not send us borrower files, bank statements or other personal information about third parties through email or the Website. If a pilot requires real files, we will agree a secure transfer method and the terms that apply before anything is shared.

Information collected automatically

Like most websites, the servers and content delivery network that host the Website automatically record standard technical information when pages are requested: IP address, browser type and version, device and operating system, the page requested, the referring page, and the date and time of the request. These logs are used to deliver the Website, keep it secure, prevent abuse and diagnose errors. We do not use them to build profiles of individual visitors.

Analytics

We use Google Analytics 4, provided by Google LLC, to understand how visitors find and use the Website — for example, which pages are viewed, how long visits last, the approximate region and device type, the site that referred you, and which buttons are clicked (such as "Book a walkthrough" or an email link). Google Analytics uses first-party cookies to distinguish visits. It does not log or store full IP addresses, and we have turned off Google signals and advertising personalization, so this data is not used for advertising or linked to your Google account.

You control analytics through the cookie banner and the Cookie settings link in the footer. If you are in the European Economic Area, the United Kingdom or Switzerland, analytics cookies stay off unless you choose Accept. Elsewhere they are on by default and you can decline at any time. We honor Global Privacy Control browser signals as a decline. You can also install Google's opt-out browser add-on.

The Website also stores a few small entries in your browser — your cookie choice and the state of our timed demo prompt. They are listed in our Cookie Policy, stay on your device, and are not used to identify you.

03How we use information

• To respond to you — answering questions, arranging walkthroughs, and discussing pilots, partnerships or investment.
• To operate and secure the Website — serving pages, detecting and preventing abuse, fraud or security incidents, and fixing errors.
• To run our business — keeping records of our business relationships and communications, and improving how we describe our products.
• To meet legal obligations — complying with applicable law, responding to lawful requests, and establishing, exercising or defending legal claims.

We do not use personal information from the Website for automated decisions that produce legal or similarly significant effects on you, and we do not use it to train machine-learning models.

04How we share information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share personal information only as follows:

• Service providers that host the Website, measure its use (Google Analytics), deliver email and provide scheduling or business tools on our behalf, under obligations to protect the information and use it only to provide their services.
• Professional advisers such as lawyers and accountants, where needed and under confidentiality obligations.
• Legal and safety — where we believe disclosure is required by law, regulation or legal process, or is necessary to protect the rights, property or safety of Cevrynt, our users or others.
• Business transfers — in connection with a financing, merger, acquisition or sale of all or part of our business, subject to this policy's protections.
• With your direction or consent — for example, when you ask us to introduce you to a partner.

05Third-party services and links

Our Get Demo and Book a walkthrough links open Calendly, a third-party scheduling service, on its own website. Information you enter there is collected by Calendly under its own privacy policy and then shared with us so we can hold the meeting. The Website does not embed Calendly or load its scripts.

The Website may link to other websites, including partner websites. We are not responsible for their privacy practices, and we encourage you to read their policies.

06Borrower data in the Cevrynt platform

Cevrynt is AI-assisted underwriting infrastructure. It is not a lender, does not make credit decisions and does not offer or guarantee funding. When a lender or other business customer uses the Cevrynt platform, it may upload borrower documents such as applications, bank statements and business records. For that information:

• The customer decides what information is uploaded, why it is processed and how long it is kept, within the terms of our agreement.
• We process it only to provide and support the services the customer has engaged us for, and as the customer instructs.
• Access, retention and deletion requirements are agreed with each customer before production use.
• Requests from borrowers or applicants about this information should go to the lender or broker they applied through. If we receive such a request directly, we will refer it to the relevant customer where we are able to.

07Data retention

We keep business correspondence for as long as needed to manage the relationship it relates to and to meet legal, accounting and record-keeping requirements, and then delete or de-identify it. Technical logs are kept for a limited period by our hosting providers for security and operational purposes. Google Analytics event data is retained for 14 months and then deleted automatically. Retention of platform data is governed by our agreement with the relevant customer.

08Security

We use administrative, technical and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse and alteration, appropriate to the nature of the information. The Website is served only over encrypted HTTPS connections. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. More about our approach to underwriting data is on our Security page.

09Your privacy rights

Depending on where you live — including under U.S. state privacy laws such as the California Consumer Privacy Act — you may have the right to:

• Know what personal information we have collected about you and how we use and disclose it, and receive a copy of it.
• Correct inaccurate personal information.
• Delete personal information we hold about you, subject to legal exceptions.
• Opt out of the sale of personal information or its sharing for targeted advertising. We do neither.
• Not be discriminated against for exercising any of these rights.

To make a request, email arin@cevrynt.com with the subject line "Privacy request". We will verify the request using information we already hold and respond within the time required by applicable law. You may use an authorized agent where the law allows; we may ask for proof of the agent's authority. If we decline a request, we will explain why, and you may appeal by replying to our response.

10Children's privacy

The Website and our services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

11International visitors

Cevrynt is based in and focused on the United States. If you access the Website from elsewhere, your information will be processed in the United States, where data protection laws may differ from those in your country.

12Changes to this policy

We may update this policy as the Website and our services change. We will post the updated version on this page and change the "Last updated" date above. If a change is material, we will take reasonable steps to highlight it.

13Contact us

Questions or requests about this Privacy Policy can be sent to Cevrynt, Inc. at arin@cevrynt.com.