The LendHER Collective

Privacy Policy

Last Updated: April 25, 2026

The LendHER Collective is a community for women in mortgage, operated by AMiLLY Technologies, Inc. (“AMiLLY,” “we,” “us,” “our”). This Privacy Policy explains what information we collect, how we use it, and what rights you have over it. We wrote it in plain English because privacy is not a place to hide.

If you have questions, email us at privacy@amilly.tech.

Who We Are

The LendHER Collective is operated by AMiLLY Technologies, Inc., a Delaware corporation with offices in Los Angeles, California. AMiLLY is the data controller for the information described in this policy.

The LendHER Collective is delivered through our member application at member.lendhercollective.com and through the The LendHER Collective iOS app, which loads the same application inside a native shell. This policy covers both.

Information We Collect

Information You Give Us

When you sign up for The LendHER Collective and use the app, you provide us with information directly. This includes:

Account information. Your email address is used to sign you in. We do not use passwords. Sign-in works through a one-time magic link sent to your inbox.

Profile information. Your name, profile photo, bio, specialty (your professional focus inside the mortgage industry), market, and any other information you add to your member profile.

Messages. The content of direct messages you send to other members of the Collective.

Event activity. Power Hour RSVPs, attendance, and any specialty suggestions you submit for community review.

Payment information. When you become a member, payment is processed by Stripe. We never see, store, or have access to your full credit card number. We receive a Stripe customer identifier and your subscription status only.

Information We Collect Automatically

When you use the app, we automatically collect a small amount of technical information so we can keep the service running and secure:

Device information. Browser type, device type, operating system version, screen size.

Usage information. Pages you visit inside the app, features you use, approximate session length, and the order of actions you take. We use this to understand what works in the app and what does not.

Log information. IP address, request timestamps, error logs. We need these for security and debugging.

We do not collect your location. We access your camera and photo library only when you choose to add or change a profile photo. We do not access your microphone, contacts, calendar, health data, or other device sensors. We do not use any tracking that follows you outside of The LendHER Collective.

Information From Third Parties

We do not buy your information from data brokers. We do not enrich your profile from external sources. The information we have about you came from you.

How We Use Your Information

We use the information we collect to:

Provide the service. Run the app, sign you in, show you the directory, deliver your messages, schedule your events, and process your membership.

Maintain security. Detect abuse, protect member accounts, prevent fraud, and respond to suspicious activity.

Communicate with you. Send you transactional emails such as magic link sign-ins, Power Hour reminders, and important account notifications. Send weekly community updates from the founder, which you can opt out of.

Improve the service. Understand what features members use and what could work better. Make decisions about what to build next based on actual usage patterns.

Meet legal obligations. Respond to subpoenas, court orders, lawful requests from regulators, and legal claims.

We do not use your information for advertising. We do not run ads inside The LendHER Collective. We do not sell your information to third parties for them to advertise to you.

Who We Share Information With

Service Providers

We use a small set of vendors to operate The LendHER Collective. They process information on our behalf and are bound to confidentiality. They are:

Supabase, Inc. Database hosting and authentication infrastructure.

Stripe, Inc. Payment processing for memberships.

Resend, Inc. Transactional email delivery (magic link sign-ins, Power Hour reminders, weekly updates).

Vercel Inc. Application hosting and content delivery.

Anthropic, PBC. We use Claude in our internal operations and customer support workflows. No member data is sent to Claude without your explicit consent.

If you would like more detail on any of these vendors and how they handle data, contact us at privacy@amilly.tech.

Legal Requirements

We disclose information when we are legally required to do so, when we believe disclosure is necessary to protect our rights or the rights of members, or when investigating fraud or violations of our Terms of Service.

Business Transfers

If AMiLLY Technologies, Inc. is acquired, merges with another company, or transfers substantially all of its assets, your information may be part of the transferred assets. We will notify you of any such transfer through the app or by email.

Other Members

The LendHER Collective is a community. Information you add to your profile (name, photo, bio, specialty, market) is visible to other members of the Collective. Messages you send to other members are visible to the recipient. The Collective is private and not indexed by search engines, but other members can read what you publish to your profile and what you send in messages.

Your Privacy Rights

You have rights over the information we hold about you. You can exercise them at any time by emailing privacy@amilly.tech or, where applicable, through the app's profile settings.

Access. You can request a copy of the information we hold about you.

Correction. You can ask us to correct information that is inaccurate or out of date. Most profile information you can correct yourself in the app.

Deletion. You can request that we delete your account and the information associated with it. We will delete the information unless we are required to retain it for legal, security, or fraud-prevention reasons. When we delete your account, your direct messages to other members may remain visible in their inbox unless you also request that they be removed (we honor those requests within 30 days).

Portability. You can request a machine-readable export of the information you have given us.

Optin and optout of marketing. You can unsubscribe from any marketing email at any time using the unsubscribe link in the email. Transactional emails (sign-in links, Power Hour reminders, account notifications) cannot be unsubscribed because they are required for the service to work.

Non-discrimination. We will not discriminate against you for exercising any of these rights.

We respond to verified privacy requests within 30 days. If we need more time, we will tell you why and how long it will take.

For California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) give you specific rights, summarized below.

The right to know what personal information we have collected about you, including the categories of information, the sources, the purposes of collection, and the categories of third parties we have shared it with.

The right to delete personal information we have collected from you, subject to certain exceptions.

The right to correct inaccurate personal information.

The right to opt out of the sale or sharing of personal information. We do not sell or share your personal information for behavioral advertising or for any other purpose. There is nothing to opt out of.

The right to limit the use of sensitive personal information. We do not collect sensitive personal information categories under CPRA.

The right to non-discrimination for exercising any of these rights.

To exercise any of these rights, email privacy@amilly.tech with your request. We will verify your identity (typically by confirming you control the email address on file) before processing the request.

For European and UK Residents

The LendHER Collective is operated from the United States. If you access the app from the European Union, the United Kingdom, or another jurisdiction with comprehensive data protection laws, your information will be transferred to and processed in the United States.

We rely on Standard Contractual Clauses where applicable for any cross-border data transfer involving our service providers.

Under GDPR and UK GDPR, you have rights including access, correction, deletion, restriction, portability, and objection. To exercise any of these, email privacy@amilly.tech.

Data Security

We protect your information using industry standard security practices. All data in transit is encrypted using TLS. Data at rest in our databases is encrypted. Access to member data inside AMiLLY is limited to employees and contractors who need it to operate the service, and all access is logged.

No system is perfectly secure. If we ever detect a security incident affecting your information, we will notify you in line with applicable laws.

Data Retention

We keep your information for as long as your account is active and for a reasonable period after you close it, so we can comply with legal obligations, resolve disputes, and enforce our agreements.

Messages between members are retained for as long as the recipient's account is active or until the recipient deletes them. If you delete your account, your messages may remain visible to recipients unless you specifically request their removal.

Power Hour event records, RSVP history, and aggregated usage analytics are retained for the lifetime of the Collective unless you specifically request their deletion in connection with a deletion request.

Children

The LendHER Collective is intended for adults working in the mortgage industry. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has given us their information, contact us at privacy@amilly.tech and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the Last Updated date at the top. If a change is significant, we will tell you through the app or by email before the change takes effect.

Contact Us

Questions, requests, or concerns about your privacy go to:

AMiLLY Technologies, Inc.
Attn: Privacy
email: privacy@amilly.tech

We will respond as quickly as we reasonably can. For verified privacy rights requests, we respond within 30 days.