Privacy notice
Last updated 6 October 2026. This notice covers loanlogs.com.
1. Who we are
LoanLogs is run by Productimiser Ltd, a company registered in England and Wales (company number 15016956), registered office InfoHub, 41 Petley Road, London, W6 9SU. Productimiser Ltd also runs ExactSum. For privacy questions email support@exactsum.com.
2. Two kinds of data, two roles
Your data (your account, payments and how you use the site): we are the controller.
Your client's data (the bank statements you upload and what we read from them): you are the controller and we are your processor. We use it only to produce your report, on your instructions. Section 9 covers this in more detail.
3. What we collect
- Account: your email address and password. The password is stored only as a one-way hash, so we can't read it.
- Payments: what you bought, when and how much. Stripe takes the card payment; we never see or store your full card details.
- Cases: the statements you upload, the transactions we read from them, the report we produce, and any label, company name or company number you add. With a company number we also fetch the company's name and its directors' and shareholders' names from Companies House.
- Use of the site: server logs (IP address, browser, pages requested, time) and, on loanlogs.com, Google Analytics (see section 10).
- Messages: anything you send us by email.
4. Why we use it
- To run your account, produce your reports and take payment: needed to provide the service you signed up for (contract).
- To keep the service secure, stop misuse and fix problems: our legitimate interests in running a reliable service.
- To keep payment and accounting records: a legal obligation.
- To email you about your account, your cases or changes to these terms. We won't send you marketing unless you have agreed to it.
5. What we never do
We never contact your client, never sell or rent data, and never pass cases or leads to lenders or other brokers. No lender using our other products can see LoanLogs cases.
6. How long we keep it
- Statements and the transactions read from them: deleted 7 days after upload, or straight away if you click delete.
- Reports (figures only, no statements): kept in your account until you delete the case or close your account.
- Account details: kept while your account is open, then deleted when you ask us to close it, apart from what we must keep by law.
- Payment and accounting records: kept for 6 years, as UK tax law requires.
7. Who processes it for us
We use a small number of providers, each only for its part of the service:
- hosting and file storage providers, including Cloudflare, for running the site and storing files;
- AI providers, reached through OpenRouter, Google and Anthropic, which read the statements and return the transactions to us;
- Stripe, for payments;
- Google, for Google Analytics on loanlogs.com;
- Companies House, when you add a company number (we only look up public records).
Some of these providers are based outside the UK, including in the United States. Where data goes outside the UK we rely on the safeguards UK data protection law provides for, such as the UK's adequacy regulations and international data transfer agreements.
8. Security
The site runs over HTTPS, passwords are hashed, and access to case data is limited to what is needed to run and support the service. Statements are deleted on a fixed schedule so as little as possible is held at any time.
9. Your client's data
When you upload a client's statements you act as the controller of that data and we process it on your behalf. That means:
- make sure you have a lawful basis and your client's permission to share their statements for a business finance enquiry;
- we only use the statements to produce your report, and the providers in section 7 only to help us do that;
- we delete statements and transactions 7 days after upload, or as soon as you click delete;
- we will help you answer any request your client makes about their data, and will tell you without undue delay if we become aware of a breach affecting it.
10. Cookies
- Essential: a session cookie keeps you signed in and protects forms from misuse. The site doesn't work without it.
- Analytics: on loanlogs.com, Google Analytics sets cookies (such as
_ga) to count visits and see which pages are used. It does not see your cases. You can block these cookies in your browser settings without affecting the service.
11. Your rights
You can ask to see the data we hold about you, correct it, delete it, restrict or object to how we use it, or get a copy to take elsewhere. Email support@exactsum.com and we will reply within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk, though we'd appreciate the chance to put it right first.
12. Changes
We may update this notice. The date at the top shows when it last changed, and we will tell you about any significant change by email or in the app.