Privacy Policy

Scope

This policy covers coveloan.com and any product surfaces operated by Cove Lending, Inc. (“Cove”, “we”, “us”). It applies to financial advisors who use Cove to build loan packages, the underlying borrowers those packages serve, and casual visitors to the marketing site.

Cove is a U.S. company. By using our site or service, you consent to the practices described here. If you do not, please don't use the site.

Information we collect

We collect only what we need to do business. There are three kinds:

• You give it to us. Your name, firm, email address, phone number, and any context you share when you talk to us, request access, or submit a borrower stake for review.
• The service generates it. Loan reference numbers, SPV identifiers, document timestamps, audit records, and the underwriting outputs our AI agents produce when researching a fund.
• We see it automatically. Standard request data — IP address, browser, device, referring page, and timestamps — logged for security and to keep the site running.

How we use it

We use information to operate the lending service, communicate with you about loans in progress, run underwriting, comply with applicable financial-services rules, prevent fraud, and improve the product. We do not sell personal information. We do not use your data to train third-party models.

When we share

We share information only when one of the following applies:

• Service providers. Vendors who help us run the platform — hosting, document storage, identity verification, payments, transfer agents — bound by contract to use the data only for our purposes.
• Loan counterparties. The Delaware SPV, registered broker-dealer, and capital partners involved in funding a specific loan, limited to what each party needs to do its job.
• Regulators and legal requests. When we are required by law, subpoena, or a regulator with jurisdiction. We push back on overbroad requests.
• Corporate transactions. If Cove is acquired or merges, customer information may transfer subject to this policy and successor obligations.

How long we keep it

Loan records and the documents that support them are retained for as long as the loan is active and for the period required by financial-services recordkeeping rules thereafter — typically seven years after the loan closes or is denied. Marketing-list data is retained until you unsubscribe. Server logs are retained for 90 days unless tied to a security incident.

How we protect it

Data is encrypted in transit (TLS 1.2 or higher) and at rest. Access is least-privilege and logged. We run regular reviews against industry frameworks. No system is perfectly secure — we will tell you, and the appropriate regulators, if a breach affects your information.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise any of these, email us at the address below. We will respond within the time required by law — usually 30 days.

California, Colorado, Virginia, Connecticut, Utah, and EU/UK residents have additional rights under their respective laws. Those laws govern where they apply.

Cookies and analytics

Our marketing site uses a small number of cookies — strictly necessary cookies to keep the site working, and a privacy-respecting analytics tool to count visits and understand which pages are read. We do not use cross-site advertising trackers. You can disable cookies in your browser; the site will still work.

Children

Cove is not directed to anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

Changes to this policy

We will revise this policy as our practices evolve. The “Effective” date at the top reflects the current version. Material changes will be noted clearly here, and where appropriate, communicated by email to active customers.

Contact

Questions about this policy, or a request to exercise a privacy right, should go to: