Privacy Policy

Privacy Policy

Last Updated: February 3, 2026

1. Information We Collect

Account Data

Name, email, and business details provided during signup.

Financial Metadata

If you use our Digital Verification feature, we use Stripe Financial Connections to view account balances. Rafter does not store your bank login credentials.

Uploaded Documents

Any bank statements or property documents you upload are stored securely for the sole purpose of sharing them with your designated deal partners.

2. How We Use Data

We use your information to:

  • Facilitate the "Commitment Wizard" and generate Proof of Liquidity PDFs.
  • Provide a secure "Deal Room" for communication between brokers and lenders.
  • Manage your SaaS subscription and provide customer support.

3. Third-Party Sharing

We share data only with essential service providers:

  • Paddle: To process your SaaS subscription and manage tax compliance.
  • Stripe: To facilitate secure bank account verification.
  • ActiveStorage/Cloud Providers: To host your uploaded project documents.

4. Security

We utilize industry-standard encryption (SSL/TLS) for all data in transit and at rest. As a Rails 8 application, we adhere to modern security protocols to protect your proprietary deal data.

5. Data Processing Agreement (DPA)

For the purposes of data protection laws (including GDPR and CCPA where applicable), Rafter acts as a Data Processor with respect to the personal data of lenders or third parties that you (the Broker/Customer) upload or verify through the platform.

Processing Instructions

We process such data solely to provide the services outlined in our Terms and Conditions and according to your documented instructions within the app (e.g., clicking "Verify" or "Share Document").

Data Subject Rights

If a lender contacts Rafter to exercise their data rights, we will redirect that request to you as the Data Controller.

Sub-processors

We utilize a limited number of sub-processors (Google, Stripe, and Paddle) to provide essential infrastructure. We ensure these partners maintain industry-standard security protections.

Data Breach Notification

In the event of a security incident affecting your account data, Rafter will notify you without undue delay.