Privacy Policy

• Visitors to our public marketing site
• Prospective borrowers who submit a scenario, contact form, or callback request
• Clients who upload documents through the Byrd & CO Client Document Portal
• Lending partners who register in our Lender Marketplace or receive term-sheet requests
• Listing agents, investors, builders, and developers who receive outreach from us
• Any user of our Debt Quote Studio or Pre-Approval Letter Studio

Directly from you:

• Name, email, phone number, company, and state — when you request a callback, register for the portal, or interact with our team
• Property, borrower, and financial information — required to underwrite and place your loan
• Documents you upload — tax returns, rent rolls, operating statements, identification, and other underwriting files
• Communications — emails, messages, and any content you send us

Collected automatically:

• Log data (IP, browser type, timestamps) needed to operate and secure the site
• Cookies and similar technologies for authenticated portal sessions
• Usage analytics on how features are used, so we can improve the product

From third parties:

• Public web sources (LinkedIn, Crexi, LoopNet, brokerage websites) to enrich outreach prospect records for lender / listing-agent / investor / builder / developer outreach programs
• Credit and background information from lending partners as part of the loan-placement process
• Marketing sources (Google Ads, referrals) that route you to our site

• To place your loan — sharing your scenario and documents with lending partners you authorize us to approach
• To operate your Byrd & CO account, Client Document Portal, and Studio tools
• To send you transactional emails (portal invites, deal updates, pre-approval letters, quotes, replies)
• To send outreach emails to lenders, listing agents, investors, builders, or developers when appropriate for the deal
• To generate branded PDFs (loan quotes, pre-approval letters, deal packages)
• To improve our service, prevent fraud, comply with law, and enforce our terms

We do not sell your personal information. We do not share your underwriting file with any lender without your consent.

We share information only with:

• Lending partners you have authorized to review your scenario
• Service providers that power our platform — including Postmark (transactional email), Backblaze B2 (encrypted document storage), Cloudflare (edge, DDoS protection), and MongoDB Atlas (database)
• AI providers where we generate letters, quotes, drafts, or research — currently Anthropic (Claude), Google (Gemini), OpenAI, and Perplexity via the Emergent LLM proxy. Client documents are not submitted to these models without your explicit action inside the portal
• Analytics providers — Google Ads (attribution) and internal audit logging
• Government agencies or law enforcement when required by law or subpoena
• Successors in the event of a merger, sale, or restructuring — you will be notified before your data is transferred

Byrd & CO offers an authenticated API and a Model Context Protocol (MCP) server so that authorized AI agents (ChatGPT Custom GPTs, Claude Projects, scripts) can act on our data on our behalf. These agents:

• Only run against a token minted by a Byrd & CO administrator
• Can read and modify records but cannot delete data
• Cannot send external emails without explicit administrator approval — every outreach email, invite, or letter delivery is human-approved
• Are audit-logged per token so we can trace any action back to its source

• All traffic is served over HTTPS with modern TLS
• Passwords are bcrypt-hashed; API tokens are SHA-256-hashed at rest and shown only once
• Optional two-factor authentication is available for portal accounts
• Document storage is encrypted at rest via Backblaze B2 server-side encryption
• Automated daily backups run off-site with retention
• Access to production systems is limited to a small number of authorized administrators and is audit-logged

We retain your information for as long as your account is active or as needed to provide services, comply with legal obligations, and enforce our agreements. When you close your account or request deletion, we deidentify or delete your personal information (except records we are legally required to retain, such as closed-loan documentation).

Depending on where you live, you may have the right to:

• Request access to the personal information we hold about you
• Correct or update inaccurate information
• Request deletion (subject to legal retention obligations)
• Opt out of marketing outreach — every marketing email includes an unsubscribe link
• Withdraw consent for a specific lender to receive your scenario

To exercise any right, email wayne@byrd-co.com. We respond within 30 days.

We use a minimum of cookies — a session cookie for authenticated portal login, plus cookies set by Cloudflare (security) and Google Ads (attribution when you arrive from an ad). You can block cookies in your browser but the portal will not function without the session cookie.

Byrd & CO is a business service. We do not knowingly collect information from anyone under 18. If you believe a child has submitted information, contact us and we will delete it.

We may update this policy from time to time. Material changes will be posted here with a new "Last updated" date and, for portal accountholders, sent by email.

Questions about this policy or your data? Reach out directly: