Privacy policy

Who this covers

This policy is from Tenon, LLC (“Tenon”, “we”). It applies to visitors to tenonloans.com, to businesses that ask about or apply for financing, to the individuals who own those businesses or sign as guarantors, and to members who lend. The full, versioned Platform Privacy Policy is presented in the member portal at https://app.tenonloans.com/privacy and accepted there before an account is used; where a federal privacy law treats an individual as a consumer, that document is also our privacy notice to that individual.

This website

Interest forms

The business and lender interest forms ask for a name, a business name, an email address, a phone number, a city, and a few short answers about what you are looking for. Sending one tells us you agree to be contacted at that email and phone about your inquiry. The form is delivered to Tenon’s own systems (or, if those are unavailable, opens an email to us from your own mail program). It is not a credit application, no decision is made from it, and no documents are collected through it.

Analytics and logs

This website may use Google Analytics 4, first-party, to measure traffic. It honors the Global Privacy Control signal from your browser by disabling advertising storage. There are no advertising pixels, no retargeting, and no third-party advertising cookies on this website or in the member portal. Our hosting provider keeps ordinary server logs (IP address, browser, pages requested) for security and operations.

The member portal

What we collect

Business applicants and borrowers: legal name, entity details and registry number, EIN, addresses, ownership, officers and owners of 25% or more, financial statements, tax returns, bank statements or a read-only bank-data connection, debt schedules, lien and judgment search results, leases, insurance, licenses, references, and the loan terms requested.

Owners and guarantors of a borrower: name, home address, date of birth, Social Security number or ITIN, government ID, contact details, ownership percentage, personal financial statement, personal tax returns, and — only if you have agreed to sign a personal guarantee — a consumer credit report obtained on your written instruction.

Members who lend: legal name and entity details, EIN or SSN, W-9 certification, addresses, beneficial owners and control persons with ID, sanctions-screening results, a source-of-funds attestation, state of residence or organization, enough about the bank account that receives repayments to identify it on statements (money never passes through Tenon), your pledges, and your loan history on the platform including the rolling twelve-month count of Utah commercial financing transactions.

Everyone: account credentials, acceptance records (version, timestamp, IP address, device and browser), messages sent through the platform, electronically signed documents and their audit trails, and technical logs.

Where it comes from

From you and the documents you upload; from business registries and public records; from identity, business-verification and sanctions-screening providers; from bank-data providers you connect, read-only; from consumer reporting agencies through a reseller (guarantors only); from tax-transcript services you authorize; and from the other parties to your loan.

Consumer credit reports

We obtain a consumer report on an individual only if that individual has agreed to personally guarantee the business’s loan and has given us written instructions to obtain it. We use it to evaluate the application and to produce a credit tier. We do not show the report, the score, or the tradelines to members; a member who wants the report itself must obtain the guarantor’s separate written authorization through the platform. If information from a consumer report contributes to a decline or less favorable terms, the guarantor receives the notice the Fair Credit Reporting Act requires.

How we use information

To verify identity and eligibility; to evaluate applications against the published credit box and produce the Tenon Score, credit memo and listing; to operate the deal room; to prepare loan documents and payment schedules; to reconcile payments from read-only bank data and send statements and reminders; to prepare year-end interest statements and Form 1099-INT where required; to maintain the Utah transaction count; to screen against sanctions lists; to detect fraud and protect the platform; to meet legal obligations; to send service communications; and to improve the platform using de-identified data.

How we share it

With approved members, in the deal room: a borrower’s business information, financials, score, memo, guarantor name and ownership, and the guarantor’s credit tier — only to members who have signed the lender agreement and are bound by its confidentiality terms. Bank-account numbers, a guarantor’s SSN, date of birth and consumer report are not shown there. Borrower contact details are released to a member only when a loan reaches closing. With the other parties to your loan: executed documents, schedules, payment status and statements. With service providers under contracts requiring confidentiality and safeguards: hosting, database, email and SMS delivery, electronic signature, document generation, identity and business verification, sanctions screening, bank-data access, credit-report reseller, tax-transcript, Form 1099 filing, payment processing for Tenon’s own fees, error monitoring and backups. For legal reasons: to comply with law, subpoena or court order; to enforce our agreements; to protect the rights, property or safety of Tenon, our users or others; and in a merger, financing or sale of Tenon’s business, under confidentiality.

We do not sell personal information and do not share it with third parties for their own marketing.

How we protect it

Tenon maintains an information security program designed to meet the FTC Safeguards Rule and the Utah Protection of Personal Information Act: a designated person responsible for the program, encryption in transit and at rest, multi-factor authentication, role-based access with borrower and lender isolation, logging of access to sensitive records, secure disposal, vendor oversight, and training. No system is perfectly secure. If we discover a breach affecting your unencrypted personal information we will investigate and notify you, and the authorities the law requires, without unreasonable delay.

How long we keep it

• Applications that are declined, withdrawn or expire unfunded: 25 months after the decision.
• Funded loans: the life of the loan plus 7 years.
• Member onboarding records: the membership period plus 7 years.
• Consumer reports: the shorter of the periods above or what our reseller agreement allows.

Your choices

You may review and correct your account information at any time, ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. We honor deletion requests except where we must keep information for a signed loan, a legal obligation, or the retention periods above, and we will tell you which exception applies. You may withdraw a bank-data connection at any time, though doing so may prevent us from confirming payments on your loan.

Children

Nothing here is directed to anyone under 18, and we do not knowingly collect information from them.

Changes

Changes are posted with a new version number and effective date. If a change materially reduces your rights or expands our sharing, we will notify you and, where the law requires, obtain your consent before it applies to information already collected.

Contact

Privacy requests and questions: notices@tenonloans.com
Tenon, LLC, 135 W 900 N, Springville, UT 84663

See also the terms of use and disclosures.