Last updated: September 30, 2026

This policy explains how Bilrost, Inc. (“Bilrost”, “we”, “us”) handles personal information across our website, the Bilrost web application, and the Bilrost add-in for Microsoft Excel (together, the “Service”).

Bilrost works for lending businesses, not consumers

The documents, loan files and borrower details that flow through the Service belong to our customer — the lender or servicer that engaged us — and we handle them on that customer’s instructions. They decide what goes in, who sees it, and how long it stays. We are a service provider to them, not the owner of their data.

We are responsible in our own right only for account records of the people who sign in, and technical data about how the Service is used.

If you work for one of our customers and want information accessed, corrected or deleted, ask your own organization — it is theirs to decide, and we act on their instructions.

What we handle

• Account information — your name, work email, and the organization you belong to, so we can sign you in and show you only your organization’s deals.

• Usage information — IP address, browser and device type, features used, timestamps and error diagnostics, to operate and secure the Service.

• Customer content — the documents and data our customers put into the Service or connect it to, including information about people who are not our users, such as a borrower or guarantor. We use it only to provide the Service to the customer who supplied it.

What the Excel add-in does

The add-in requires a Bilrost account; installing it alone gives access to nothing. When you ask it to, it writes data from your Bilrost deal into designated sheets of the workbook you have open, and reads values that workbook has calculated so they can be recorded against the deal. It acts when you click. It does not run in the background and does not read unrelated workbooks or files on your computer.

Once data is in your workbook, that workbook is yours — where you save it and who you send it to are outside our control.

Artificial intelligence

The Service uses AI to read documents and extract information from them, which is the core of what it does. Customer content is not used to train AI models, including general-purpose or foundation models.

AI output can be wrong. It supports a qualified person’s own review rather than replacing it, and it is not legal, appraisal or underwriting advice.

Who we share it with

We do not sell personal information and we do not share it for advertising.

We use service providers to run the Service — hosting and storage, databases, authentication, AI and document processing, email intake, error monitoring and analytics, and any file-storage service a customer chooses to connect. Each is bound by contract to protect the information and use it only to provide its service to us. Customers can request our current list.

We may also disclose information where the law requires it, to protect rights or safety, or to a successor in a merger or acquisition.

How long we keep it

Customer content is kept for the life of the customer relationship, on the terms of our agreement with that customer, and deleted when that agreement ends or the customer asks us in writing to delete it. Account and usage information is kept only as long as needed to run and secure the Service.

How we protect it

Information is encrypted in transit and at rest. Access is limited to the Bilrost personnel who need it, requires multi-factor authentication, and is reviewed periodically. Each customer’s data is segregated so a user only sees their own organization’s. Customers and prospective customers can request our security documentation.

No system is perfectly secure. If a breach affects your information, we will notify as required by law and by our agreement with your organization.

Cookies

We use cookies necessary to sign you in and keep your session, plus limited analytics. We do not use advertising or cross-site tracking cookies.

Your choices

With a Bilrost account you can view and update your details when signed in, or write to support@bilrost.ai. Requests about content your organization put into the Service go to them, or we act on their instruction.

California residents: Bilrost acts as a service provider for customer content and does not sell or share personal information as California law defines those terms.

Children

The Service is for business use, is not directed to children, and we do not knowingly collect information from anyone under 13.

Changes

Any change will be posted here with an updated date.

Contact

Bilrost, Inc., 447 17th Street, Suite 2503, Oakland, California 94612.
support@bilrost.ai