Privacy Policy

1. Who We Are

Stepup Capital LLC is a private hard money lender based in Sugar Land, Texas. We provide short-term real estate bridge loans — including Fix & Flip, Buy & Hold, and New Construction financing — to real estate investors across the state of Texas. We are not a bank, mortgage broker, or consumer lender.

Our registered address is: 902 Kitty Hawk Rd, STE 170-Box 110, Universal City, TX 78148.

2. Information We Collect

Loan Application Information

When you apply for a loan or submit a deal for review, we may collect:

• Full legal name, date of birth, and government-issued ID details
• Contact information: address, phone number, and email
• Social Security Number or Employer Identification Number (EIN)
• Entity information (LLC, corporation, or trust) and operating documents
• Real estate investment experience and project history
• Financial information: bank statements, credit history, and net worth

Property & Deal Information

• Subject property address and legal description
• Purchase price, after-repair value (ARV), and rehab budget
• Scope of work, draw schedules, and contractor information
• Property photos submitted through the AI Deal Analyzer

Website & Technical Information

• IP address, browser type, device type, and operating system
• Pages visited, time spent on site, and referring URLs
• Address searches entered into the Deal Analyzer autocomplete
• Form submissions and contact inquiries

3. How We Use Your Information

We use the information we collect for the following purposes:

Loan Underwriting & Processing

• Evaluating your loan application and deal viability
• Conducting credit checks and background verification
• Ordering appraisals, title reports, and property inspections
• Preparing and issuing term sheets, loan commitments, and closing documents
• Managing your loan, processing payments, and handling draw requests

AI Deal Analyzer

Deal details and property photos submitted through our AI Deal Analyzer are sent to Anthropic's Claude API to generate an underwriting analysis. This data is used solely to produce your deal report. We do not use it to train AI models. Anthropic's data usage policy applies to data processed through their API — please refer to anthropic.com/privacy for details.

Communications

• Responding to your inquiries and loan status updates
• Sending information about loan products, programs, or rate changes
• Sending administrative notices related to your loan

Legal & Compliance

• Complying with applicable federal and Texas state laws and regulations
• Preventing fraud, identity theft, and unauthorized transactions
• Enforcing our loan agreements and protecting our legal rights

4. Information Sharing & Disclosure

Stepup Capital does not sell your personal information to third parties. We may share your information only in the following circumstances:

Service Providers

We work with trusted third parties who assist us in operating our business, including title companies, appraisers, property inspectors, attorneys, loan servicers, and technology providers. These parties are contractually required to protect your information and use it only for the services they provide to us.

Credit Bureaus & Background Check Providers

With your authorization, we may pull credit reports and background checks through third-party providers to evaluate your loan application.

Investors & Capital Partners

In connection with the funding of your loan, we may share deal-level information with capital partners, note purchasers, or warehouse lenders. Personal identifiers are shared only as required to complete the transaction.

Legal Requirements

We may disclose your information when required by law, court order, subpoena, or a regulatory authority, or when we believe disclosure is necessary to protect our rights or the safety of others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and your choices regarding your information.

5. Gramm-Leach-Bliley Act (GLBA) Notice

As a financial services company, we are subject to the federal Gramm-Leach-Bliley Act (GLBA). Under the GLBA, we are required to tell you how we collect, share, and protect your personal financial information.

We collect nonpublic personal information about you from: (a) information you provide on loan applications and other forms; (b) your transactions with us, our affiliates, or others; and (c) credit reporting agencies and other third parties.

We do not share your nonpublic personal information with unaffiliated third parties for their marketing purposes. You do not need to take any action to limit such sharing, as we do not engage in it.

6. Data Security

We implement reasonable physical, electronic, and procedural safeguards to protect your personal and financial information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encrypted data transmission (HTTPS/TLS) across our website and API integrations
• Restricted access to personal data on a need-to-know basis
• Secure storage of loan documents and financial records
• API keys and credentials stored as encrypted environment variables, never in source code

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you believe your information has been compromised, please contact us immediately.

7. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to improve functionality and analyze site performance. We use:

• Essential cookies — required for basic site operation (e.g., form submission, navigation)
• Analytics — anonymized data to understand how visitors use our site and improve the experience

We do not use advertising or cross-site tracking cookies. You can disable cookies in your browser settings, though some features of the site may not function properly as a result.

8. Data Retention

We retain your personal and financial information for as long as necessary to fulfill the purposes outlined in this policy and to comply with applicable law. Specifically:

• Loan application and closing records are retained for a minimum of 7 years as required by Texas law and federal regulation
• Incomplete applications or inquiries that do not result in a loan are retained for up to 2 years
• Website usage data is retained for up to 12 months

When data is no longer needed, we securely delete or anonymize it.

9. Your Rights

Depending on your state of residence, you may have certain rights regarding your personal information, including:

• Access — the right to request a copy of the personal information we hold about you
• Correction — the right to request that we correct inaccurate information
• Deletion — the right to request deletion of your information, subject to legal retention obligations
• Opt-out of marketing — the right to opt out of marketing communications at any time

To exercise any of these rights, please contact us using the information in Section 11. We will respond to verified requests within 30 days.

Note: We may be unable to delete information that is required to be retained under applicable law, or that is necessary to complete a transaction or enforce a loan agreement.

10. Children's Privacy

Our website and services are intended solely for adults engaged in commercial real estate investing. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected such information, we will delete it promptly.

11. Third-Party Links

Our website may contain links to third-party websites, including lender partners, vendor programs, and resource pages. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or services after any update constitutes your acceptance of the revised policy.