Privacy Policy

1Who we are

Riverstone Lending App (“Riverstone,” “we,” “us”) is operated by [Legal entity name], located at [Registered address]. We run a loan marketplace at riverstonelendingapp.com. We are not a lender. When you submit a loan request, we pass it to lenders and other partners in our network, who decide whether to make you an offer.

This policy covers information collected through our website, our loan request form and our communications with you. Lenders and partners that receive your information have their own privacy policies, which govern how they use it.

2Information we collect

The information we collect depends on how you use the site. If you only read our guides, we collect mainly device and usage data. If you submit a loan request, we collect the details needed to match you with lenders.

Some of these categories, such as Social Security number, financial account details and precise location, are treated as sensitive personal information under some state laws.

3Where your information comes from

• You, when you fill in our loan request form, contact us or sign up for emails.
• Your device, automatically, through cookies, pixels and similar technologies.
• Our form and technology provider, which operates the application form on our site: [Names/categories of form provider and network partners].
• Lenders and network partners, which may tell us whether you received or accepted an offer.
• Verification and fraud-prevention services, which may confirm your identity, phone number or address.

Lenders, not Riverstone, request credit reports from credit bureaus when they evaluate your request.

4How we use your information

• To process your loan request and share it with lenders and partners that may be able to make you an offer.
• To show you offers, send updates about your request and respond to your questions.
• To verify your identity and help prevent fraud, spam and misuse of the site.
• To operate, maintain, analyze and improve our website and services.
• To send marketing emails, calls or texts, only where you have agreed or the law allows.
• To comply with laws, respond to legal requests and enforce our Terms of Use.

5How we share your information

Because we are a marketplace, sharing your request with lenders is how the service works. We share information with:

• Lenders and network partners that may offer you a loan or related product. They may contact you and may obtain your credit report. [Names/categories of form provider and network partners]
• Our form and technology provider, which hosts the application form and routes your request.
• Service providers that help us run the business, such as hosting, analytics, email and customer support. They may use the information only to provide services to us.
• Legal and safety recipients, when required by law, subpoena or court order, or to protect rights, property or safety.
• A buyer or successor, if we are involved in a merger, acquisition or sale of assets.

We may be paid by lenders when you submit a request or accept an offer. See how we make money.

6Sale and sharing of personal information

Some state laws define “sale” broadly to include giving personal information to a third party for money or other valuable consideration, and define “sharing” to include giving it to third parties for cross-context behavioral advertising. Passing your loan request to lenders that pay us, and using advertising cookies, may count as a sale or sharing under these laws.

[State whether you sell or share personal information, the categories involved and the categories of recipients over the past 12 months.] You can opt out as described in Making a request, and we honor browser-based opt-out signals such as Global Privacy Control where required.

7Federal financial privacy laws

The Gramm-Leach-Bliley Act (GLBA) requires financial institutions to explain their information-sharing practices and to safeguard customer information. Lenders that receive your request may give you their own GLBA privacy notice. Depending on how our business is structured, some information we collect may be covered by the GLBA and exempt from certain state privacy laws. [Confirm with counsel whether and how GLBA applies to your business, and whether a separate GLBA notice is required.]

8California privacy rights

If you live in California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you these rights, subject to exceptions:

California’s Attorney General states that a Global Privacy Control signal must be honored by covered businesses as a valid request to opt out of the sale or sharing of personal information. We treat a GPC signal from your browser as an opt-out for that browser.

9Rights in other states

A growing number of states have comprehensive consumer privacy laws. As of 2026, published trackers list laws in effect in states including:

• California
• Colorado
• Connecticut
• Delaware
• Florida*
• Indiana
• Iowa
• Kentucky
• Maryland
• Minnesota
• Montana
• Nebraska
• New Hampshire
• New Jersey
• Oregon
• Rhode Island
• Tennessee
• Texas
• Utah
• Virginia

Depending on where you live, these laws may give you rights to access, correct, delete and get a copy of your data, and to opt out of targeted advertising, the sale of personal data and certain profiling. Many also let you appeal if we deny your request. Thresholds and exemptions differ by state, and some exempt data covered by the GLBA. *Florida’s law applies only to a narrow set of very large companies.

10How to make a privacy request

• Email [email protected] with the subject “Privacy request.”
• [Privacy request methods/toll-free number]
• To opt out of sale or sharing, use the [“Do Not Sell or Share My Personal Information” link] or enable Global Privacy Control in your browser.

We will verify your identity before acting on requests to know, correct or delete, usually by matching information you give us with information we hold. You may use an authorized agent, who must show written permission. If we deny your request, we’ll explain why and how to appeal where your state law provides that right.

11Calls, texts and email

If you give consent on our form, we and lenders or partners named in that consent may contact you by phone or text, including with automated technology. Consent is not required to buy any goods or services. Message and data rates may apply.

• Texts: reply STOP to any text to opt out, or HELP for help.
• Calls: tell the caller you no longer want to be contacted, or email us.
• Email: use the unsubscribe link in any marketing email. Transactional messages about a request you made may still be sent.

Opting out with Riverstone doesn’t stop lenders that already received your request from contacting you. Contact them directly to opt out of their messages.

12Cookies and analytics

We use cookies and similar technologies to keep the site working, remember preferences, understand how visitors use the site and measure advertising. Tools we use: [Cookie/analytics tools used].

You can block or delete cookies in your browser settings, but parts of the site, including the loan request form, may not work properly. Turning on Global Privacy Control signals your opt-out of sale and sharing where state law requires us to honor it.

13How long we keep information

We keep personal information only as long as needed for the purposes in this policy, including to meet legal, accounting and record-keeping duties and to keep proof of consent. [Retention periods for each category]

14Security

We use administrative, technical and physical safeguards designed to protect personal information, such as encrypted connections for our website and limiting access to staff and providers who need it. [Describe your actual security measures and any certifications you hold] No method of transmission or storage is completely secure, so we can’t guarantee absolute security.

15Children’s privacy

Our services are for adults 18 and older. We do not knowingly collect personal information from children, including children under 13 as defined by the Children’s Online Privacy Protection Act. If you believe a child has given us information, contact us and we will delete it.

16Third-party sites and lenders

Our site links to lenders, government agencies and other websites. When you leave our site or accept an offer from a lender, that company’s privacy policy applies. We are not responsible for their practices.

17Changes to this policy

We may update this policy from time to time. We’ll change the “Last updated” date at the top and, where the changes are significant, give additional notice as the law requires.

18Contact us

This page is general information, not legal advice.