Privacy Policy

Lendifi.io is a loan comparison marketplace operated by Apex Lead Group LLC, a limited liability company organized under the laws of the State of Utah.

We are not a lender. We do not make credit decisions, originate loans, or determine loan terms. We are a lead generation service that connects consumers seeking financing with a network of independent, licensed third-party lenders.

Contact: legal@lendifi.io

The federal Gramm-Leach-Bliley Act ("GLBA") protects the privacy of nonpublic personal information ("NPI"): the personal financial information consumers provide to financial services companies. This notice explains what we collect, how we share it, and your rights.

FACTS, What does Lendifi.io (operated by Apex Lead Group LLC) do with your personal information?

Why? Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some, but not all, sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully.

What? The types of personal information we collect and share depend on the product or service you use. This information can include:

• Name, address, date of birth, email, and phone number
• Income, employment status, and credit profile (self-reported)
• Loan type, loan amount, and intended use
• Information collected via cookies, IP address, and device identifiers

How? All financial companies need to share customers' personal information to run their everyday business. In the table below, we list the reasons financial companies can share their customers' personal information; the reasons Lendifi.io chooses to share; and whether you can limit this sharing.

How can you limit the sharing for nonaffiliate marketing?

• Email us at legal@lendifi.io with subject "Limit Sharing"
• Submit a request via our Do Not Sell or Share My Personal Information page
• California, Nevada, and Vermont residents have additional opt-out rights, see Section 8 below

Please note: when you submit a loan request through Lendifi.io, you are actively requesting that we share your information with lenders and lender networks for the purpose of matching you with loan offers. This sharing is necessary to provide the service you requested and cannot be limited while still using our marketplace.

How we protect your information: To protect your personal information from unauthorized access and use, we use security measures that comply with federal law, including computer safeguards, secured files and buildings, encryption in transit (256-bit SSL), and access controls. We require all third parties who handle your data to maintain similar protections under written agreements.

How we collect your information: We collect your personal information when you fill out our online forms, contact us by email or phone, use our website or mobile application, or interact with us in any other way. We may also collect information from credit bureaus, public records, and our affiliates and service providers.

Definitions:

• Affiliates: Companies related by common ownership or control. They can be financial and nonfinancial. Apex Lead Group LLC currently has no affiliates that share your information.
• Nonaffiliates: Companies not related by common ownership or control. They can be financial and nonfinancial. Nonaffiliates we share with include lenders, lender networks (such as LeadsMarket, Lead Stack Media, and others), credit monitoring providers, debt relief providers, and marketing service providers.
• Joint Marketing: A formal agreement between nonaffiliated financial companies that together market financial products or services to you. Our joint marketing partners include lender networks and financial product affiliates.

Contact: For questions about this GLBA notice, email legal@lendifi.io or write to Apex Lead Group LLC, Utah, USA.

Identity & Contact

• First and last name, date of birth
• Email address, phone number
• ZIP code and state

Financial Information (self-reported)

• Loan type, loan amount requested
• Self-reported credit score range
• Self-reported annual income range and employment status

Technical & Consent Data

• IP address and browser/device information at time of submission
• Exact timestamp of consent and the consent language you agreed to
• URL of the page where you submitted your information
• UTM and traffic source parameters

Calculator Data entered in our savings calculator is processed locally in your browser and is not stored unless you proceed to submit the loan inquiry form.

• Lender matching. We use your information to identify lenders in our network whose eligibility criteria match your profile and transmit your inquiry to them.
• TCPA compliance documentation. We record your consent timestamp, IP address, and exact consent language. These records are retained for a minimum of five years as required by law.
• Deduplication. We use a hash of your email, phone, and loan type to prevent duplicate submissions within a 24-hour window.
• Service improvement. Aggregate, anonymized data about form completion and calculator usage helps us improve the site.
• Legal compliance. We retain data as required by applicable federal and state law, including TCPA, CCPA, and CAN-SPAM.

We do not perform hard credit inquiries. Credit score information is self-reported and used only for lender matching.

With lender partners. When you submit our form, your information is transmitted in real time to matched lenders in our network. By submitting the form, you consent to this sharing.

We do not sell your data to data brokers or unrelated third parties for purposes unrelated to your loan inquiry.

Service providers who process data on our behalf:

• Supabase: database storage (United States)
• Railway: API hosting (United States)
• Cloudflare: website delivery and security
• Google Workspace: business email

Legal requirements. We may disclose your information if required by law, subpoena, or court order, or to protect our legal rights.

Business transfers. In a merger or acquisition, data may transfer to a successor entity under the same privacy protections.

By checking the consent checkbox and submitting our form, you provide express written consent under the TCPA to be contacted by Lendifi.io and our lender partners.

We record your IP address, browser/device, exact timestamp, and the verbatim consent language at the time you agree. These records are retained for a minimum of five years.

To opt out: Email legal@lendifi.io with subject "Opt Out." We will add you to our suppression list immediately. Note that lenders who already received your information may continue to contact you under their own consent records.

California residents have the following rights under the CCPA as updated by the 2026 regulations effective January 1, 2026:

• Right to Know: request what personal information we have collected, its sources, how it is used, and with whom it is shared.
• Right to Delete: request deletion of your personal information, subject to our legal obligation to retain TCPA consent records.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out: opt out of the sharing of your data with lender partners. See our Do Not Sell or Share My Personal Information page.
• Right to Non-Discrimination: we will not discriminate against you for exercising your rights.

To submit a request: email legal@lendifi.io with subject "California Privacy Request." We respond within 45 days.

• Lead and consent records: minimum 5 years (TCPA requirement)
• Lender response records: minimum 5 years (dispute resolution)
• Suppression list: retained indefinitely
• Technical logs: 90 days, then automatically purged

• 256-bit SSL/TLS encryption on all data transmissions
• Encrypted API key authentication on all lender data transfers
• Role-based access controls on our database
• Cloudflare DDoS protection and Web Application Firewall

No method of internet transmission is 100% secure. If you believe your information has been compromised, contact legal@lendifi.io immediately.

Lendifi.io is not directed at individuals under 18. Our form automatically rejects submissions from users who indicate they are under 18. If you believe we have inadvertently collected information from a minor, email legal@lendifi.io and we will delete it promptly.

• Cloudflare sets essential security and performance cookies. These are not used for advertising.
• UTM parameters are captured to understand advertising channel performance. This data is aggregated and anonymized.
• We do not currently use third-party advertising cookies or behavioral retargeting pixels. If this changes, this policy will be updated.

We may update this policy to reflect changes in our practices or legal requirements. Material changes will be reflected in an updated "Effective" date at the top of this page. Continued use of Lendifi.io after changes are posted constitutes acceptance of the updated policy.