Privacy Policy
Effective Date: July 23, 2026
Introduction
Projo ("Projo," "we," "us," or "our") operates a real-estate lending marketplace that connects borrowers (real-estate investors, developers, and the companies they control) with private lenders, funds, and institutions. This Privacy Policy explains how we collect, use, share, and protect your personal and financial information when you use our website, mobile application, and related services (together, the "Services").
Because the Services involve loan applications, we handle sensitive financial and identity information. Please read this policy carefully. If you do not agree with it, please do not use the Services.
Information We Collect
The information we collect depends on how you use the Services and whether you act as a borrower, a lender, or an investor. It includes:
Account and identity information — name, email address, profile photo, bio, website, years of experience, locale, and the login credentials managed by our authentication provider.
Business-entity information — legal entity name and type (e.g., LLC, LP, S-Corp, C-Corp, sole proprietorship, or trust), formation state, business address, and Employer Identification Number (EIN).
Documents you upload — for example articles of organization, operating agreements, IRS EIN letters, certificates of good standing, purchase and sale agreements, bank statements, rent rolls, scopes of work, and tax returns.
Financial information extracted from your documents and applications — such as EIN, formation year, adjusted gross income, Schedule E income, average bank balances, purchase price, property value, monthly rent, requested loan amount, and property address or parcel identifiers.
Credit information — where you authorize a credit check, your Social Security Number (or equivalent identifier) is used to obtain a credit report and credit score from a consumer reporting agency.
Loan application data — the loan type, requested amounts, and computed metrics such as loan-to-value (LTV), debt-service-coverage (DSCR), and debt-to-income (DTI).
Messages and communications — chat threads between borrowers and lenders, and messages you exchange with us.
Device and notification data — mobile push tokens and browser push subscriptions used to deliver notifications.
Usage and technical data — IP address (including approximate location used to set your language), device and browser information, and product-analytics events.
How We Use Your Information
We use the information we collect to:
Provide and operate the marketplace — create and manage your account, build your company profile, and route your loan application to the lenders you select.
Read and organize your documents using automated optical character recognition (OCR) so we can pre-fill applications and verify entity information.
Support underwriting with AI — generate underwriting analyses, risk assessments, draft messages, and term-sheet suggestions to help lenders evaluate deals (see “Automated Decision-Making and AI” below).
Match borrowers and lenders and surface relevant deals based on lender criteria.
Facilitate billing and fees, communicate with you, send service and transactional notifications, and (with your consent) marketing.
Maintain security, prevent fraud, verify identity and entities, keep audit logs, and comply with legal and regulatory obligations.
Analyze and improve the Services, including creating vector embeddings of deal data to power search and underwriting features.
Automated Decision-Making and AI
The Services use automated processing and artificial intelligence to read your documents and to help lenders evaluate loan applications. Documents are processed with optical character recognition, and application data is analyzed by third-party AI models to produce underwriting analyses, risk indicators, and draft communications.
These outputs are decision-support tools. Lending decisions are made by the lenders you apply to, not by Projo, and are subject to human review by those lenders. If you would like more information about how an application was processed, contact us at admin@projo.co.
Credit Checks and Consumer Rights
We obtain a credit report and score only after you provide authorization. When you authorize a credit check, we record your consent, including the version of the disclosures presented to you at that time.
Depending on where you live, laws such as the U.S. Fair Credit Reporting Act (FCRA) may give you rights regarding information obtained from consumer reporting agencies — including the right to know what was obtained and to dispute inaccurate information. To exercise these rights or ask about a credit-related decision, contact us at admin@projo.co.
How We Share Your Information
We do not sell or rent your personal information. We share information in the following ways:
With lenders you select — when you submit a loan application, the application and its supporting information are shared with the lenders you choose so they can evaluate and respond to your request. Each lender sees only the copy routed to it. This sharing is a core function of the marketplace.
Public investor profiles — if you choose to publish an investor profile, information such as your entity name, rank, verified deal count, reputation score, and partner count may be visible publicly. You control whether to publish this profile.
Service providers (subprocessors) — we share information with vendors who process it on our behalf to run the Services (see “Service Providers” below).
Legal and safety — we may disclose information to comply with law, enforce our agreements, or protect the rights, property, or safety of Projo, our users, or others.
Business transfers — information may be transferred as part of a merger, acquisition, financing, or sale of assets.
Service Providers
We rely on trusted third parties to operate the Services. These providers process information only as needed to perform services for us. You can request a current list of the specific vendors we use by contacting us at admin@projo.co.
These providers fall into the following categories:
Cloud infrastructure providers — hosting, authentication, database, file storage, and job processing.
Document processing and AI providers — optical character recognition of uploaded documents and AI analysis of application and document data.
Payment processors — payment processing and billing.
Electronic signature providers — signature of term sheets and related documents.
Consumer reporting agencies — credit reports and scores, where you authorize a credit check.
Communications providers — in-app chat and messaging, transactional and notification email, and mobile and browser push notifications.
Property data providers — property and market data enrichment.
Analytics and error-monitoring providers — product analytics, error monitoring, and diagnostics.
Data Security
We implement technical and organizational measures designed to protect your information. Sensitive identifiers such as EIN and SSN are encrypted at rest, access to personal information is restricted, and views and downloads of sensitive records are logged for auditing.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will act in accordance with applicable law.
Data Retention
We retain your information for as long as your account is active and as needed to provide the Services. We may retain certain information after account closure where required for legal, regulatory, tax, audit, dispute-resolution, or fraud-prevention purposes. When information is no longer needed, we delete or de-identify it.
International Data Transfers
Projo operates from Israel and serves users in multiple countries. Your information may be processed and stored in the United States, Israel, and other locations where we or our service providers operate. These countries may have data-protection laws that differ from those in your country. Where required, we take steps to protect your information when it is transferred internationally.
Your Rights
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, contact us at admin@projo.co. We may need to verify your identity before responding, and some information may be retained as described in “Data Retention.”
Notifications and Marketing
With your consent where required, we may send you notifications, offers, and marketing communications by email, SMS, push notification, or other means. You can opt out of marketing at any time by following the unsubscribe instructions in our messages, adjusting your notification settings, or contacting us. We may still send you non-promotional messages about your account and the Services.
Children's Privacy
The Services are intended for users who are at least 18 years old. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, provide additional notice. The latest version will always be available on our website.
Contact Us
If you have any questions about this Privacy Policy or how we handle your information, please contact us at admin@projo.co.
