Prudent AI, Inc. and its affiliates, including Prudent AI Private Limited, (collectively, “Prudent AI,” “we,” and “us”) want you to be familiar with how we collect, use and disclose information. This Privacy Policy (“Policy”) describes our practices in connection with information we collect through:
Websites operated by us from which you are accessing this Policy, including www.prudent.ai (the “Websites”);
Software applications including our dashboard and any application programming interface (“API”) made available by us for use;
Our social media pages and apps for LinkedIn, Twitter, Facebook, YouTube, and any other official Prudent AI social media pages (collectively, our “Social Media Pages”);
Collectively, we refer to the Websites, social media Pages, emails, and offline business interactions as the “Services.”
Any capitalized terms used and not defined in this Policy have the meaning given to them in the Master Service Agreement or Data Processing Agreement. If you do not agree with this Policy, you should not use the Services. Where required under applicable law, we will separately seek appropriate consent to the collection, use, and disclosure of certain types of Personal Information.
Definition of Personal Information
“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household, including information contained in borrower documents, account information, online identifiers, and similar data. Personal Information does not include information that has been anonymized, de-identified, or aggregated so that it cannot reasonably identify an individual or household.
This Policy applies to information collected online and offline through the Services. It does not apply to third-party websites, applications, platforms, or services that may link to or be accessible from our Services.
ABOUT OUR SERVICES
Prudent AI is an applied AI platform that enables upfront clarity in borrower qualification by processing, validating, and structuring borrower documents and data early in the loan lifecycle. The platform automates document classification, data extraction, and validation to generate decision-ready outputs that support underwriting and eligibility assessment. Exceptions are routed to human review where required, and finalized data is transmitted to external systems such as loan origination systems (LOS).
The platform consists of three integrated modules:
Upfront Income processes income-related documents (W-2s, paystubs, tax forms, bank statements) to generate qualified income metrics and support borrower eligibility assessment.
Upfront Index handles document classification, organization, and completeness validation to ensure borrower document packages are properly structured before downstream processing.
Upfront AUS evaluates borrower and loan data against lender and investor-specific guidelines to generate eligibility decisions, risk indicators, and required conditions for non-QM loans at the prequalification stage.
Fannie Mae Income Calculator calculates borrower income in accordance with Fannie Mae guidelines. The module processes self-employed income documents (Schedule C, Form 1065, Form 1120S, K-1s), rental income documents (Schedule E, Form 8825), and other income types including bank statements, W-2s, paystubs, WVOE, VOE, and 1099s.
Our platform enables:
Automated document analysis: Intelligent extraction of financial information from borrower-submitted documents (paystubs, W-2s, tax returns, bank statements, and identity documents)
Quality validation: Systematic verification of extracted data to ensure accuracy and completeness
Regulatory support: Integration with lender systems to facilitate compliance with lending regulations and audit requirements
Streamlined workflows: Reduction of manual document review, enabling faster borrower processing
Prudent AI’s outputs are assistive and advisory. We do not make lending decisions, determine borrower eligibility, or engage in any credit evaluation or underwriting. Customers remain responsible for any human review, adverse-action notices, fair-lending compliance, model governance, and final credit or underwriting determinations.
OUR ROLE AS A DATA PROCESSOR
Prudent AI operates as a data processor. This means:
For purposes of applicable privacy laws, Prudent AI acts as a service provider, processor, or equivalent role for borrower and applicant data processed on behalf of customers, except as otherwise stated in the applicable Master Service Agreement, or other written agreement.
When you submit financial documents through our platform, the lender or financial institution you’re applying with (the “data controller”) determines how your information is used. Prudent AI processes your data only according to their instructions and our agreements with them.
Specifically, Prudent AI:
Processes data exclusively for the purposes your lender specifies (document review, borrower verification, regulatory compliance)
Does not train artificial intelligence models using your financial information
Does not share your financial data with other lenders, financial institutions, or third-party businesses
Does not use borrower financial documents or customer-controlled borrower/applicant data for Prudent AI marketing, sales prospecting, or unrelated business analytics
Retains borrower/applicant data only as instructed by the customer, as specified in the applicable agreement, or as required by law, and not for unrelated purposes
If you have questions about how your information is used, contact the lender or institution you submitted documents to. They control the broader use of your data. Prudent AI handles technical processing only.
Customer Responsibility for Notices, Consents, and Authorizations
Where Prudent AI processes borrower, applicant, customer, employee, or third-party records on behalf of a lender or financial institution, that customer is responsible for providing all legally required notices, obtaining all necessary rights, permissions, consents, and authorizations, and maintaining the privacy and security of such data before submitting it to Prudent AI.
Customers should not submit Personal Information, sensitive information, or records to Prudent AI unless such information is necessary for the processing activities Prudent AI performs under the applicable customer instructions and agreement.
PERSONAL INFORMATION WE COLLECT
The information we collect depends on how you interact with our Services. If you choose not to provide information that is required to access or use our platform, register for an account, submit or process borrower documents, receive support, or otherwise use a requested service, we may be unable to provide the requested Service or process your request. Some Personal Information we process may be considered sensitive Personal Information under applicable law, including government identification information, financial account information, income information, tax-related information, authentication credentials, and specific data elements contained in borrower or applicant records.
Here’s what we may collect:
Financial Documents and Data
When borrowers submit documents through our platform, we collect:
Income verification documents (W-2s, paystubs, tax returns)
Financial account statements (bank, investment, retirement accounts)
Employment history and verification information
Extracted financial summaries (income totals, asset summaries, liability information)
Lender and Business Customer Information
When you register to use our platform as a lender or financial institution, we collect:
Company name, business address, and registration information
Contact person name, email, phone, and job title
Usage data (which documents are processed, submission rates, processing times)
Support inquiries, feedback, and service communications
Website and Platform User Information
When you visit our websites or use our platform, we automatically collect:
Device information (browser type, operating system, device model)
Access information (IP address, pages visited, time spent on each page)
Approximate geographic location (derived from IP address)
Interaction data (links clicked, forms completed, downloads initiated)
Communication and Marketing Information
When you contact us or opt into communications, we collect:
Email address and phone number
Inquiry details and support history
Content preferences and engagement history (if subscribed to updates)
Professional background (if provided during signup or inquiry)
Job Application Information
If you apply for employment with Prudent AI, we collect:
Full name, contact information, and location
Employment and education history
Resume, portfolio, and work samples
Reference contact information
Background check information (as permitted by law)
HOW WE USE PERSONAL INFORMATION
Prudent AI and our service providers use Personal Information for the following purposes:
To Deliver Our Services
Processing and validating financial documents
Extracting structured data from submitted materials
Delivering results and extracted summaries to authorized users
Managing your account and access credentials
Providing technical support and troubleshooting
To Communicate with You
Sending account notifications (submission status, processing updates)
Responding to your inquiries and support requests
Notifying you of service changes or maintenance windows
Confirming your identity for security purposes
To Ensure Security and Compliance
Detecting and preventing fraud or unauthorized access
Maintaining compliance audit logs and transaction records
Performing system monitoring and threat detection
Investigating security incidents or policy violations
Meeting legal and regulatory obligations
To Improve Our Services
Analyzing usage patterns and platform performance (in aggregated, anonymized form)
Identifying technical issues or areas for improvement
Developing new features or enhancements
Testing system reliability and scalability
For Marketing and Business Development
Sending information about new features, updates, or services (to existing customers and opted-in prospects)
Tracking email opens, clicks, and engagement using marketing platforms (HubSpot, Apollo, Clay)
Inviting you to webinars, events, or educational content
Sharing industry insights and compliance resources
Measuring the effectiveness of marketing communications
You can opt out of marketing communications at any time using the unsubscribe link in our emails.
To Meet Legal Requirements
Responding to lawful government requests, court orders, or regulatory inquiries
Complying with financial services regulations and audit requirements
Protecting our rights, property, or safety
Enforcing our agreements and policies
DISCLOSURE OF PERSONAL INFORMATION
Our Customers (Lenders and Financial Institutions)
The primary purpose of our platform is to deliver extracted data and summaries to the lender or financial institution you submitted documents to. Your lender controls what happens with that data and how it’s used in their lending decisions.
Our Service Providers and Technical Partners
We work with carefully selected vendors who help us operate our platform:
Cloud and hosting providers (for secure data storage and processing)
Security and monitoring providers (for threat detection and incident response)
Payment processors (for billing management)
Customer support platforms (for ticketing and communication)
Analytics vendors (for performance monitoring, in anonymized form)
All service providers sign agreements requiring them to protect your information and use it only for the services they provide to us.
Our Affiliates
Prudent AI has a wholly owned subsidiary entity (Prudent AI Private Limited) supporting engineering and operations. Your information may be shared with this affiliate, subject to the same protections described in this Policy.
When Required by Law
We may disclose information when legally required by:
Government agencies and regulators (Federal Reserve, OCC, FDIC, CFPB, etc.)
Law enforcement or criminal investigations
Court orders, subpoenas, or lawful requests
Financial services compliance requirements
We will notify you of such disclosures unless legally prohibited from doing so.
Business Transitions
If Prudent AI is involved in a merger, acquisition, asset sale, bankruptcy, or other business restructuring, your information may be transferred to the acquiring company. We will notify you of any such change and ensure the new company is bound by similar privacy protections.
With Your Consent
We may share your information for other purposes with your explicit consent or at your request.
INFORMATION SECURITY
We seek to use reasonable organizational, technical, and administrative measures to safeguard the security of Personal Information within our organization. Our security measures include:
Encryption of data in transit and at rest
Access controls and multi-factor authentication
Centralized security monitoring and threat detection
Regular security assessments and audits
Endpoint protection and device management
Secure authentication and identity management practices
Additional safeguards may include least-privilege access, role-based authorization, data access logging, vulnerability management, secure software development practices, vendor risk management, backup and recovery controls, employee security training, and incident response procedures.
The safety and security of Personal Information also depend on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
Unfortunately, transmission of information via the Internet is not secure with absolute certainty. Although we do our best to protect Personal Information and provide transmission security in line with commercially approved methods, we cannot guarantee the security of Personal Information. If you have reason to believe that your interaction with us is no longer secure, please contact us in accordance with the Contact Information section below.
DATA RETENTION
We retain Personal Information for as long as needed or permitted for the purpose(s) for which it was obtained and consistent with applicable law. In addition, we retain Personal Information as required by our legal obligations, or as necessary to resolve disputes, defend our legal rights, and enforce our agreements.
The criteria used to determine our retention periods include:
For borrower/applicant data processed on behalf of customers, retention and deletion are governed by customer instructions, the applicable Master Service Agreement, and applicable law. Upon termination, offboarding, or verified customer request, Prudent AI will delete or anonymize such data from active production systems in accordance with the applicable agreement.
Personal Information contained in backups will be protected from further processing and securely deleted or overwritten in accordance with Prudent AI’s standard backup-retention lifecycle, unless a longer retention period is required by law, litigation hold, regulatory requirement, or the applicable agreement.
The length of time we have an ongoing relationship with you and provide the Services to you (for example, for as long as you have an account with us or continue using the Services;
Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); or
Whether retention is advisable considering our legal position (such as regarding applicable statutes of limitations, litigation or regulatory investigations).
JURISDICTION AND CROSS-BORDER TRANSFER
Primary Storage Location
All Prudent AI data is stored and processed exclusively within the United States using secure cloud infrastructure. We do not store customer or borrower data outside the U.S., except as required by specific customer agreements.
Geographic Processing
While Prudent AI operates team members in other countries who provide engineering and support services, your financial data remains within U.S. infrastructure. Offshore staff access systems through secure, monitored connections where data stays within U.S. boundaries.
International Data Transfers
If you are located outside the United States, your information will be transferred to and processed within the U.S. By using our Services, you consent to this transfer. We maintain adequate safeguards such as standard contractual clauses to protect your data during cross-border processing.
COOKIES AND TRACKING
What are Cookies?
Cookies are alphanumeric identifiers or small data text files that are sent from a server during a browsing session. Cookies are small pieces of information that are stored directly on your computer when you visit certain websites.
How We Use Cookies:
We use cookies for the following reasons:
To improve your experience when navigating our website
To remember preferences, session information, or authentication state where appropriate
To perform analytics and understand the pages and advertisements that you like, how you ended up on our website, and from what type of devices
If you subscribe to our mailing list, we can use cookies to know if you opened your email and if so, from what device. If you click on an offer that we sent you by email, you will be redirected to our website, and we will know that you visited our website through this communication. This will help us understand which promotions work better than others for you and allow us to send you more personalized offers
Types of Cookies We Use:
Essential cookies: Enable basic site functionality (login, session management, security)
Performance cookies: Track how visitors use our site (popular pages, error rates, traffic sources)
Preference cookies: Remember your settings and choices for future visits
Marketing cookies: Display relevant content and measure campaign effectiveness
Analytics cookies: Help us understand user behavior and optimize our website
How Cookies Work
Cookies are small text files stored on your device. They may be:
Session cookies: Deleted when you close your browser
Persistent cookies: Remain on your device for weeks or months
Analytics and Third-Party Services
We use Google Analytics to understand website usage patterns. Google may collect information about your browsing across multiple websites. You can:
Opt out of Google Analytics tracking using their browser add-on
Adjust your privacy settings in your Google Account at myactivity.google.com
Learn more about Google’s practices at google.com/policies/privacy/
We also use Sentry and PostHog for application performance monitoring. Sentry captures technical error data and performance diagnostics to help us detect and resolve issues quickly. PostHog helps us understand how users interact with our website so we can identify areas for improvement.
Email Tracking
We use email marketing and engagement platforms (including HubSpot, Apollo, and Clay) that track when marketing emails are opened, which links are clicked, and other engagement metrics. This helps us understand which communications are effective and allows us to send more relevant content to interested prospects and customers.
These platforms use tracking pixels embedded in emails and tracking links to collect this data. You can opt out of email tracking by:
Clicking the “Unsubscribe” link at the bottom of any marketing email from us
Blocking images in your email client (prevents pixel loading)
Using privacy-focused email clients that block tracking pixels by default
Contacting us at marketing@prudent.ai to request removal from our mailing lists
Third-Party Advertising
Prudent AI does not currently run retargeting or display advertising campaigns on third-party websites. We do not place tracking pixels on other sites to display ads to you across the web based on your visit to our site.
However, we do use cookies, tracking pixels, and analytics tools on our own websites and platform to measure performance and user behavior—see the sections below for details on what we track and how to manage your preferences.
Controlling Cookies
Most browsers allow you to control cookies through settings:
Open your browser settings (typically “Privacy,” “Security,” or “Cookies”)
Choose to block all cookies, allow only certain types, or delete existing cookies
Note: Blocking cookies may affect website functionality
We recommend keeping cookies enabled for the best platform experience, but you have the right to control your preferences.
YOUR CHOICES AND ACCESS
Right to Access Your Information
For borrower/applicant data that Prudent AI processes on behalf of a lender or financial institution, Prudent AI may direct your request to that customer because the customer determines how the data is used and is responsible for responding to data-subject or consumer-rights requests, unless applicable law or the customer agreement requires Prudent AI to respond directly.
Right to Correct Information
If you believe any information, we hold about you is inaccurate or incomplete, you can request correction. We will update your information and confirm the changes within the timeframe required by applicable law.
Right to Delete Information
You can request deletion of your personal information, subject to certain exceptions (legal holds, litigation, regulatory requirements, or legitimate business purposes). We will respond to deletion requests within the timeframe required by applicable law and will delete information legally permitted.
Right to Restrict Processing
You can request that we limit how we use your information while we investigate a dispute or comply with your request.
Right to Opt Out of Marketing
You can unsubscribe from marketing communications at any time by:
Clicking the “Unsubscribe” link in any email we send
Contacting us at marketing@prudent.ai
Updating your preferences in your account settings
Service-related communications (account notifications, support responses) cannot be disabled, as they are necessary for account management.
Right to Withdraw Consent
If you previously consented to process your information, you can withdraw that consent at any time by contacting us.
How to Submit a Request
Where required by applicable law, you may designate an authorized agent to submit a privacy request on your behalf. Prudent AI may require proof of authorization and may verify your identity directly.
We will verify your identity before processing your request to prevent unauthorized access to sensitive information. We may request additional information such as your full name, email address, or account details.
THIRD-PARTY LINKS
Our website and communications may contain links to third-party websites, applications, and services operated by other companies. This Privacy Policy does not apply to those external sites. We are not responsible for their privacy practices, security measures, or content. Before sharing information with third-party services, we recommend reviewing their privacy policies to understand how they handle your data.
UPDATES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The “Effective Date” at the top of this Policy indicates when it was last updated.
Material Changes
If we make significant changes that affect how we handle your information, we will:
Post the updated Policy on our website
Request your explicit consent if required by law
