Privacy Policy

Last updated: August 1, 2026

1. Introduction

Welcome to HirayaLend. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you.

2. Data We Collect

We collect and process the information needed to operate a lending-record management workspace:

• Account data such as your name, email address, authentication records, subscription status, and security settings.
• Borrower data you enter such as names, contact details, addresses, photos, loan terms, notes, and payment history. You are responsible for having a lawful reason to enter and use this information.
• Subscription-payment data such as PayPal order, capture, refund, currency, amount, and status identifiers. HirayaLend does not receive your PayPal password or full card details.
• Security and operational data such as administrative audit events, request metadata, and error information needed to protect and operate the service.

3. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to perform the contract we are about to enter into or have entered into with you.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal or regulatory obligation.

4. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed.

5. Retention, Export, and Deletion

Account and lending-workspace data is retained while your account is active. From Settings, you can download a portable copy of your account data or request permanent account deletion. Deletion removes the account and linked application records, subject to limited records we may need to retain for fraud prevention, payment disputes, security, or legal obligations. Backup copies expire under the configured backup-retention schedule and may not disappear immediately.

6. Service Providers and International Processing

We use service providers such as Supabase for database and authentication infrastructure, Vercel for application hosting, Cloudflare Turnstile for bot protection, and PayPal for subscription checkout. These providers process limited data under their own security and privacy terms and may process data outside your country.

7. Contact Us

If you have questions about this policy or a privacy request, use the HirayaLend support contact published in the application.