# Security and how we handle your data Source: https://businessloanbroker.ai/security/ Site: BusinessLoanBroker.ai (powered by Levr) > Your application and documents are encrypted, shared only with lenders you approve, and never sold. See how AI assistant access works through OAuth. Your application and documents are encrypted in transit and at rest, shared only with lenders you are matched with and only after you approve the submission, and never sold. If you use an AI assistant, it gets only the access you grant through OAuth, and you can revoke that access at any time. ## Key facts - **Encryption:** In transit and at rest for applications and documents - **Who sees your application:** Only lenders you are matched with, after you approve each submission - **AI assistant access:** Granted by you through OAuth, scoped to what you allow, revocable at any time ## How is your data protected? Everything you send us, from the application form to your bank statements and tax returns, is encrypted while it travels to us and while it is stored. Access inside the company is limited to the people and systems that need it to support your application. BusinessLoanBroker.ai runs on Levr, so the same security program covers both. We do not list certifications here; we would rather you read the current state of the program on Levr's [trust and security page](https://levr.ai/trust-security/), which is the authoritative source and is kept up to date. ## How do AI assistants get access? Through OAuth consent, the same kind of permission screen you see when you connect an app to your email or calendar. When you connect Claude, ChatGPT, Gemini, Grok or another assistant to our [MCP server](https://businessloanbroker.ai/agents/mcp/), you sign in to your own account and approve what the assistant may do. The assistant never sees your password. Your assistant only gets the access you grant, and you can revoke it at any time from your account without affecting your application. Submissions to lenders still require your approval, even when an assistant prepared the file. Scopes, tokens and what each tool can do are on our [agent security page](https://businessloanbroker.ai/agents/security/). ## Who sees your application? Only the lenders you are matched with, and only after you approve the submission. Matching happens first, inside the platform, without sending your file anywhere. You then see which lenders fit and approve the submission before any lender receives your application and documents. We do not send your application to every lender on the platform or to lenders you were not matched with. Each lender sees it to make a credit decision, under its own privacy obligations. For the lender's side after that, read [what happens after you submit](https://businessloanbroker.ai/guides/what-happens-after-you-submit/). ## Do we sell your data? No. We do not sell your application, documents or contact details to anyone, and we do not share them with marketers or lead buyers. We are paid by lenders when a loan funds, as explained on [how we make money](https://businessloanbroker.ai/how-we-make-money/), so we have no revenue from your information. Our [privacy policy](https://businessloanbroker.ai/privacy/) sets out what we collect, why, and your rights over it. ## How are your documents stored? Documents are stored to support your application: so lenders can review them, so you do not have to upload them again for a second lender, and so offers can be tracked back to the file they were based on. They are encrypted at rest, stored with access controls, and not used for anything outside your application. If you want documents removed, ask through the [contact page](https://businessloanbroker.ai/contact/). Some records must be kept for a period after a loan funds to meet lender and legal obligations, and we will tell you plainly what can be deleted and when. ## What should you do on your side? Use a strong, unique password and keep your email account secure, since that is how account recovery works. Share documents only inside the application or through an assistant you connected yourself; never email statements to someone claiming to be us. Review what you have granted to assistants from time to time and revoke anything you no longer use. If anything looks wrong, tell us through the [contact page](https://businessloanbroker.ai/contact/). ## Questions and answers **Can my AI assistant see my password?** No. You sign in to your own account through OAuth and approve what the assistant may do. It receives a scoped token, not your credentials, and you can revoke that token at any time. **Which lenders can see my application?** Only the lenders you are matched with, and only after you approve the submission. Matching happens inside the platform first. Lenders you were not matched with never see your file. **Do you sell or share my information with marketers?** No. We do not sell your application or contact details to anyone, and we do not share them with marketers or lead buyers. Our revenue comes from lenders when a loan funds, not from your data. **Where can I read the full security program?** On Levr's trust and security page, which is the current, authoritative description of the program covering BusinessLoanBroker.ai. For how AI assistants connect, see our agent security page. ## Related - [Security, consent and data handling](https://businessloanbroker.ai/agents/security/) - [Privacy policy](https://businessloanbroker.ai/privacy/) - [How we make money](https://businessloanbroker.ai/how-we-make-money/) ## Apply Apply for the business: https://apply.businessloanbroker.ai/signup?utm_source=direct&utm_medium=organic&utm_content=md-security MCP server for AI agents: https://mcp.businessloanbroker.ai/mcp (docs: https://businessloanbroker.ai/agents/mcp/)