Last Updated: August 6, 2026
Vaulted ("Vaulted," "we," "us," or "our") provides a software platform that helps private and hard money lenders manage loans, track payments, communicate with borrowers, and generate AI-assisted documentation ("the Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.
This policy applies to lenders who create an account ("Lenders") and to borrowers who are invited into the Service by a Lender to use the borrower portal ("Borrowers"). Together, Lenders and Borrowers are referred to as "Users."
By using Vaulted, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.
Account information. When you sign up, we collect your name, email address, password (encrypted), company name if provided, and billing information processed through our payment provider, Stripe.
Loan and portfolio data. Lenders enter information about their loans, including property addresses, loan amounts, interest rates, terms, borrower names and contact information, payment history, draw requests, and related documents. This data is owned by the Lender who enters it.
Borrower information. When a Lender invites a Borrower to the platform, we collect the Borrower's name, email address, and any information the Borrower submits, including draw requests, uploaded documents, photos, and messages sent through the platform.
AI tool inputs and outputs. When you use AI-powered features (Deal Memo Writer, Risk Analyzer, Alert Drafter, Borrower Chat Assistant), the information you enter is processed by our AI provider to generate outputs. We retain these inputs and outputs as part of your account data.
Usage data. We automatically collect information about how you use the Service, including log-in timestamps, pages visited, features used, IP address, browser type, and device information.
We use the information we collect to provide, operate, and maintain the Service, process subscription payments through Stripe, send transactional emails (maturity alerts, payment notifications, weekly digests), respond to support requests, improve and develop new features, detect and prevent fraud or misuse, and comply with legal obligations.
We do not sell your personal information or your loan portfolio data to third parties.
Vaulted's AI-powered features are powered by Claude, an AI model provided by Anthropic. When you use these features, the information you input is sent to Anthropic's API for processing and a generated response is returned to you. We do not permit our AI provider to use your data to train their models.
AI-generated outputs are provided for informational purposes only and should be independently reviewed before you rely on them for any lending decision.
We share information only with service providers who help us operate the Service (Stripe, Anthropic, our hosting and email providers), between Lenders and their own invited Borrowers on a specific loan, when required by law, or in connection with a business transfer such as a merger or acquisition.
Every Lender account operates in a fully isolated environment. No Lender can access another Lender's loans, borrowers, payments, or portfolio data under any circumstance. Borrowers can only ever access their own loan information.
We use industry-standard security measures to protect your information, including encrypted connections (TLS/SSL), encrypted password storage, and role-based access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
We retain account and loan data for as long as your account is active. If you cancel your subscription, we retain your data for 90 days in case you wish to reactivate, after which it may be permanently deleted upon request.
You may have the right to access, correct, export, or delete your personal information depending on your location. You can update most account information directly within the platform. To request a full data export or account deletion, contact us at the email below.
The Service is not directed to individuals under 18. We do not knowingly collect personal information from children.
Vaulted is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice within the platform.
Questions about this Privacy Policy should be directed to: [email protected]