StatementPull is a financial technology service operated by Lexcrypta LLC ("Lexcrypta", "we", "us", or "our"). StatementPull enables mortgage borrowers ("Borrowers") to securely share verified bank statements with their mortgage broker ("Brokers") through a Plaid-powered bank connection.
This Privacy Policy explains how we collect, use, and protect information from both Brokers and Borrowers who use StatementPull.
Our registered business address and contact information are provided in Section 13.
We use the data we collect solely to provide the StatementPull service:
We do not use your data for advertising, profiling, data brokering, or any purpose unrelated to the direct delivery of StatementPull services.
🔒 Key fact: StatementPull uses Plaid solely to generate an asset report (bank statement PDF). We request read-only access to transaction and balance history. We do not access, store, or transmit your bank login credentials at any time.
StatementPull uses Plaid Inc. ("Plaid") to connect Borrowers' bank accounts. When a Borrower completes the Plaid Link flow:
Plaid's collection and use of data is governed by Plaid's own Privacy Policy, available at plaid.com/legal/privacy-policy. By using StatementPull's connect flow, Borrowers also agree to Plaid's End User Privacy Policy.
StatementPull requests the minimum data scope necessary: the Plaid Assets product only, limited to the number of months requested by the Broker (typically 2–3 months).
✅ StatementPull does not store borrower financial data. Bank statement PDFs are transmitted directly from Plaid to the Broker's email and are never written to disk, database, or any persistent storage on StatementPull infrastructure. This is a core architectural and compliance commitment.
Specifically, StatementPull does not store:
What StatementPull does store (in our Supabase database):
We do not sell, rent, or trade personal data. We share data only with the following third-party service providers, strictly as necessary to operate the service:
All third-party providers are contractually bound to use data only as necessary to provide their services to us and are prohibited from using it for their own commercial purposes.
We may disclose data if required by law, court order, or to protect the rights, property, or safety of StatementPull, our users, or the public.
We implement industry-standard security measures appropriate to the sensitivity of the data we handle:
Despite these measures, no system is 100% secure. If you believe your account has been compromised, contact us immediately at the address in Section 13.
Brokers may request deletion of their account and associated metadata at any time by contacting us. Note that certain records may be retained where required by law.
Depending on your jurisdiction, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at the address in Section 13. We will respond within 30 days.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
Note: StatementPull does not sell personal information to third parties. We do not engage in cross-context behavioral advertising.
To submit a CCPA request, contact us at the address in Section 13 with "CCPA Request" in the subject line.
StatementPull is intended exclusively for use by licensed mortgage brokers and adult borrowers (18 years of age or older) in connection with mortgage applications. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have inadvertently collected personal information from a minor, we will delete it promptly.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. For material changes, we will notify Brokers via email at least 14 days before the changes take effect. Continued use of StatementPull after changes take effect constitutes acceptance of the updated policy.
We encourage you to review this policy periodically.
For privacy-related questions, data subject requests, or to report a security concern, please contact us:
We aim to respond to all privacy inquiries within 5 business days.
Our team takes data protection seriously. Reach out anytime.
Contact Privacy Team →