Privacy Policy
Effective date: October 27, 2026
This policy explains what information HardMoneyRate ("HardMoneyRate", "we", "us") collects, how we use and share it, and the choices you have. HardMoneyRate is a marketplace and directory that helps real estate investors compare business-purpose loans (fix and flip, bridge, ground-up construction and DSCR). HardMoneyRate is a free cost-saving tool for borrowers and a lead source for lenders. We don't lend, broker, or originate loans.
1. Information we collect
From borrowers, when you submit a deal:
- Contact details: email address and phone number.
- Deal details: loan type, property address, purchase price, construction budget, after-repair value (ARV).
- Your credit score range (a range you choose, not a credit report; we do not pull credit) and your investing experience.
- A record of your consent: the exact consent text you agreed to and when.
- Activity on your deal: term sheets lenders send you and which lender you choose to connect with.
From lenders, when you sign up or respond to a deal: your name, email, phone, job title, company name, website, NMLS number and backup email (if given), your lending criteria (loan types, states, loan size range), the agreements you accepted and when, and the term sheets you submit. To prevent abuse of the sign-up form we store a one-way hash of your IP address for a short time, not the IP address itself.
Lender directory. Our public directory lists lenders and loan terms gathered from lenders' own public websites and other public sources. It contains business information, not borrower data.
Automatically. Like most websites, our hosting provider records standard server logs (such as IP address, browser type and pages requested) for security and operations. HardMoneyRate does not use advertising or analytics trackers and does not set its own cookies. Some pages load fonts from Google Fonts, and the deal form uses Google Maps address autocomplete; when those load, Google receives your IP address and the characters you type in the address field, under Google's own privacy policy.
2. How we use information
- To match your deal with partner lenders and deliver it to them.
- To show you and compare the term sheets you receive, on a private results page.
- To introduce you to a lender when you ask us to connect.
- To send service emails: confirmation of your submission, notices when a term sheet arrives, deal notices and reminders to lenders, and introduction emails. We do not send marketing email without your permission.
- To review lender applications, operate, secure and improve the service, prevent fraud and abuse, and comply with law.
3. How we share information
- Matched partner lenders. When you submit a deal, we send its details (property address, loan type, purchase price, construction budget, ARV, credit score range and experience) to lenders we have approved whose lending criteria match your deal. Your email and phone number are shared with a lender when you choose to connect with that lender. Lenders may contact you about your deal. Lenders agree to use borrower information only to evaluate and respond to that deal.
- Service providers who process data for us: Vercel (website hosting), Supabase (database), Resend (email delivery) and Google (Maps address autocomplete and fonts).
- Legal and safety: if required by law, or to protect rights, safety and the integrity of the service.
- Business transfers: as part of a merger, acquisition or sale of assets, subject to this policy.
We do not sell your personal information and do not share it for cross-context behavioral advertising. Lenders pay HardMoneyRate a fee for leads; that is a fee for our matching service, not a sale of data to anyone outside the matched lenders above.
4. Private links
Your results page and each lender's term sheet page use long, random private links instead of passwords. Anyone with a link can open that page, so please don't share yours. Lender term sheet links expire after 72 hours.
5. Retention
We keep deal, term sheet and lender records while needed to provide the service, keep business records, resolve disputes and meet legal obligations, and delete or anonymize them when no longer needed or when you ask us to (subject to legal exceptions). Hashed IP records are used only for rate limiting. Copies already sent to lenders are held by those lenders under their own policies.
6. Your choices and rights
You can ask us to access, correct or delete your personal information, or to stop contacting you, by emailing sunny.shakhawala@gmail.com. Depending on where you live (for example California under the CCPA/CPRA, and other states with consumer privacy laws), you may also have rights to know what we collect and share, to get a copy, to correct, to delete, to opt out of sale or targeted advertising (we do neither), and not to be discriminated against for using these rights. We will verify your request (usually by confirming control of the email you used) and respond within the time the law requires. An authorized agent may make a request for you with proof of authority. If we deny a request you may be able to appeal by replying to our response.
7. Security
We use encrypted connections (HTTPS), keep our database accessible only from our servers, and limit access to people who need it. No system is perfectly secure, so we cannot guarantee security.
8. Children
HardMoneyRate is for business users 18 and older. We do not knowingly collect information from children under 18. If you believe a child gave us information, contact us and we will delete it.
9. Where data is processed
HardMoneyRate is for use in the United States, and information is stored and processed in the United States.
10. Changes
We may update this policy. We will post the new version here with a new effective date, and for material changes we will give reasonable notice.
11. Contact
Questions or requests: sunny.shakhawala@gmail.com. See also our Terms of Use.