Privacy Policy

1. Introduction

Cassian Technologies ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at platform.trycassian.com ("Platform").

Please read this Privacy Policy carefully. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. Information We Collect

We collect information that you provide directly to us, information collected automatically, and information from third-party sources.

2.1 Information You Provide

• Account Information: Name, email address, phone number, company name, and job title when you create an account
• Loan Application Data: Business information, financial statements, tax returns, bank statements, and other documents submitted through the Platform
• Personal Financial Information: Personal financial statements, credit information, and ownership details for loan applications
• Communications: Information you provide when contacting us for support or feedback
• Payment Information: Billing details processed through our secure payment providers

2.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system, and device identifiers
• Usage Data: Pages visited, features used, time spent on the Platform, and interaction patterns
• Cookies and Tracking: Information collected through cookies, pixels, and similar technologies
• Log Data: Server logs including access times, error logs, and referral URLs

2.3 Information from Third Parties

• Credit Bureaus: Credit reports and scores when authorized by the applicant
• Identity Verification: KYC and KYB verification data from identity verification providers
• Financial Data Providers: Bank account information through authorized financial data aggregators
• Public Records: Business registration and public filing information

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide Services: Process loan applications, facilitate document management, and deliver our Platform features
• AI-Powered Features: Power document parsing, credit memo generation, and underwriting assistance
• Communication: Send application updates, follow-up reminders, and respond to inquiries
• Improve Services: Analyze usage patterns to enhance Platform functionality and user experience
• Security: Detect, prevent, and address fraud, unauthorized access, and other security issues
• Compliance: Meet legal obligations, regulatory requirements, and enforce our terms
• Analytics: Generate aggregated, anonymized insights about Platform usage

4. How We Share Your Information

We may share your information in the following circumstances:

• With Lenders: Loan application data is shared with the lender(s) you are applying to
• Service Providers: Third-party vendors who assist in operating our Platform (hosting, analytics, email services)
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Legal Requirements: When required by law, court order, or government request
• Protection of Rights: To protect our rights, privacy, safety, or property
• With Consent: When you have given explicit consent to share your information

We do not sell your personal information to third parties for marketing purposes.

5. Data Security

We implement robust security measures to protect your information:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Role-based access controls and multi-factor authentication
• Infrastructure: Secure cloud infrastructure with SOC 2 Type II certified providers
• Monitoring: Continuous security monitoring and intrusion detection
• Audits: Regular security assessments and penetration testing
• Employee Training: Security awareness training for all team members

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal and regulatory requirements
• Resolve disputes and enforce our agreements
• Support legitimate business purposes

Loan application data may be retained for extended periods to comply with financial regulations and SBA requirements. When data is no longer needed, we securely delete or anonymize it.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 General Rights

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data, subject to legal retention requirements
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to certain processing of your personal data
• Restriction: Request restriction of processing in certain circumstances

7.2 California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected, used, and shared
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

7.3 European Residents (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation:

• Right to access, rectify, or erase your personal data
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us at privacy@trycassian.com.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Enable core functionality like authentication and security
• Analytics Cookies: Understand how users interact with our Platform
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling certain cookies may affect Platform functionality.

9. Third-Party Services

Our Platform integrates with third-party services that have their own privacy policies. We encourage you to review the privacy policies of these third-party services.

10. Children's Privacy

Our Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data internationally, we implement appropriate safeguards such as:

• Standard contractual clauses approved by relevant authorities
• Data processing agreements with service providers
• Compliance with applicable data transfer frameworks

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our Platform
• Updating the "Last updated" date
• Sending email notification for significant changes

Your continued use of the Platform after changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

For data subject requests, please email privacy@trycassian.com with the subject line "Data Subject Request" and include sufficient information to verify your identity.