Privacy Notice

Last updated: [May 20, 2026]

Lendica Corp. d/b/a Daylit, together with its subsidiaries and affiliates ("Daylit," "Lendica," "we," "us," or "our"), provides technology, financing, receivables, and accounts receivable intelligence services to businesses. This Privacy Notice explains how we collect, use, disclose, and protect personal information when you visit our websites, use our products and services, communicate with us, apply for or receive financing, connect third-party systems, or otherwise interact with us.

This Privacy Notice applies to:

our websites, including daylit.com, golendica.com, and related online properties;
the Daylit Accounts Receivable Intelligence Platform and related dashboards, APIs, integrations, recommendations, workflows, and support services;
AI-enabled features that generate, summarize, analyze, or recommend information related to accounts receivable or related workflows;
Lendica financing, receivables purchase, cash advance, PayLater, DrawDown, FundNow, and related strictly business-to-business products and services;
sales, marketing, customer support, implementation, security, billing, and business operations.

Our products and services are intended for businesses and business representatives only. We do not offer consumer-purpose credit or consumer financial products under this Privacy Notice.

This Privacy Notice does not replace any contract we have with a customer. If a customer agreement, order form, data processing addendum, AI services addendum, financing agreement, or other written agreement applies, that agreement may contain additional or more specific terms about how we process data.

1. Who this notice covers

Depending on the context, we may process personal information about:

representatives, employees, contractors, owners, officers, directors, and agents of our business customers and prospects;
authorized users of the Daylit platform;
merchants, applicants, guarantors, beneficial owners, principals, and other individuals involved in financing or receivables transactions;
customer contacts, account debtors, vendors, or other business counterparties whose information appears in accounts receivable, ERP, CRM, banking, accounting, payment processing, invoice, remittance, or similar business records made available to us by or on behalf of a customer;
website visitors and people who communicate with us by email, phone, SMS, chat, forms, events, or other channels.

Our services are intended for businesses and are not directed to children.

2. Personal information we collect

The personal information we collect depends on the product or service used and the way you interact with us.

A. Information you provide directly

We may collect information such as:

name, title, company name, business role, email address, phone number, mailing address, billing address, and other contact details;
account registration information, login credentials, authentication information, permissions, and user settings;
communications with us, including emails, forms, support tickets, chat messages, meeting notes, call recordings, SMS messages, feedback, survey responses, and testimonials;
billing, order, contract, payment, tax, and invoicing information;
information submitted in connection with financing, receivables purchase, underwriting, risk review, servicing, collections, true-up, compliance, or dispute processes;
information included in documents you upload or send to us, such as bank statements, payment processing statements, accounts receivable aging reports, invoices, receivables records, tax records, corporate records, licenses, permits, identity or ownership information, and related business records.

B. Information from connected systems and integrations

When a customer or merchant connects third-party systems or authorizes us to access them, we may collect information from banking, payment processing, ERP, CRM, accounting, ecommerce, point-of-sale, invoicing, collections, treasury, and related tools. This may include:

accounts receivable, invoice, customer, payment, remittance, collection, and dispute data;
bank account, balance, transaction, deposit, withdrawal, cash flow, and settlement data;
ERP, CRM, accounting, sales, customer, and operational data;
payment processing data, chargeback history, card processing history, processor statements, and related communications;
usage-related data needed to calculate fees, usage metrics, volume tiers, overages, true-ups, or minimum commitments;
credentials, permissions, tokens, metadata, and authentication settings needed to connect, maintain, secure, and troubleshoot integrations.

C. Information from service providers, partners, and third parties

We may receive information from third-party sources such as:

financial institutions, payment processors, card processors, bank connectivity providers, data aggregators, and similar service providers;
credit reporting agencies, database providers, identity verification providers, public records providers, fraud prevention providers, and compliance screening providers;
business partners, referral partners, implementation partners, marketplaces, affiliates, and financing partners;
advertising, analytics, marketing, and event providers;
publicly available sources, corporate registries, government databases, regulatory records, and professional profiles.

For financing or receivables products, this may include credit reports, business credit history, criminal or background reports where permitted by law, public records, tax verification information, bank account information, payment processing information, and information bearing on credit standing, credit capacity, character, ownership, authority, or business operations.

D. Information collected automatically

When you visit our websites or use our online services, we and our service providers may collect:

IP address, device identifiers, browser type, operating system, device type, referring URLs, language preferences, pages viewed, links clicked, forms submitted, and similar usage data;
log data, diagnostic data, security events, error reports, performance information, session information, and feature usage;
approximate location inferred from IP address and, where enabled, more precise location information;
cookie, pixel, SDK, local storage, and similar tracking information.

3. How we use personal information

We may use personal information for the following purposes:

A. Providing and operating our services

create, authenticate, manage, and support accounts;
implement, configure, maintain, and troubleshoot integrations;
ingest, reconcile, analyze, display, and process accounts receivable, financial, customer, and operational data;
provide dashboards, reports, workflows, insights, recommendations, alerts, analytics, benchmarks, and related platform functionality;
process orders, subscriptions, payments, invoices, fees, usage metrics, minimum commitments, overages, true-ups, renewals, and billing;
provide customer support, training, implementation, and professional services;
communicate administrative, operational, security, legal, and service-related information.

B. Financing, receivables, underwriting, servicing, and collections

evaluate applications and eligibility for financing, receivables purchase, cash advance, PayLater, DrawDown, FundNow, or related products;
verify identity, ownership, authority, bank account information, financial condition, receivables, payment processing history, business operations, and compliance information;
conduct underwriting, risk review, fraud prevention, credit review, background checks, due diligence, and compliance screening;
fund transactions, service accounts, process payments, conduct reconciliation or true-up processes, monitor performance, manage disputes, and collect amounts owed;
communicate about applications, agreements, transactions, servicing, renewals, changes, or collections;
comply with legal, regulatory, tax, accounting, audit, and recordkeeping obligations.

C. AI-enabled features

We may use Inputs, Outputs, Customer Data, usage data, feedback, and related information to:

generate, summarize, analyze, classify, reconcile, or recommend information related to accounts receivable, collections, cash flow, customer activity, operational workflows, or related business processes;
provide draft communications, suggested workflows, insights, recommendations, and decision-support tools;
operate, secure, monitor, evaluate, test, customize, tune, and improve AI-enabled services for a customer’s use;
detect, investigate, and prevent misuse, errors, harmful outputs, security incidents, and policy violations;
develop and improve models, features, products, analytics, benchmarks, safety systems, and quality assurance processes using de-identified, anonymized, or aggregated Customer Data where permitted by contract and law.

We do not use identifiable Customer Data, Inputs, or Outputs for general model training. General model training and model improvement use de-identified, anonymized, or aggregated Customer Data only, where permitted by contract and law.

AI-enabled features are intended to assist business users. Unless expressly configured and authorized by the customer, AI-enabled features do not independently execute, authorize, or commit financial, accounting, or communications actions. Customers and users are responsible for reviewing and validating AI-generated outputs before taking financial, operational, legal, compliance, or other significant actions.

D. Security, compliance, and protection of rights

protect our websites, services, systems, users, customers, partners, and business;
monitor for fraud, unauthorized access, misuse, policy violations, security threats, and illegal activity;
enforce agreements, terms, policies, and legal rights;
respond to subpoenas, court orders, government requests, regulatory inquiries, legal process, and lawful requests;
establish, exercise, or defend legal claims;
conduct audits, compliance reviews, due diligence, investigations, and risk management.

E. Product improvement and business operations

understand usage, performance, adoption, and customer needs;
develop, test, improve, support, and operate our products and services;
create analytics, benchmarks, models, insights, and quality assurance processes;
conduct research, business intelligence, forecasting, and product planning;
manage vendors, partners, affiliates, corporate transactions, finance, accounting, tax, insurance, and internal operations.

F. Marketing and communications

respond to inquiries and provide information about our services;
send marketing communications, newsletters, event invitations, product updates, and promotional materials;
personalize website content, advertising, and outreach;
measure the effectiveness of marketing campaigns;
request feedback or testimonials, where permitted.

You may opt out of marketing emails by using the unsubscribe link in the email or contacting us as described below. We may still send non-marketing communications, such as service, legal, billing, security, or transactional messages.

4. How we disclose personal information

We may disclose personal information to the following categories of recipients:

A. Service providers and contractors

We may disclose information to vendors and service providers that help us provide, secure, support, and improve our services, including cloud hosting, data storage, analytics, payments, bank connectivity, integration and data-sync providers, identity verification, credit reporting, underwriting support, fraud prevention, customer support, communications, email delivery, SMS delivery, CRM, marketing, logging, monitoring, cybersecurity, compliance, legal, accounting, and professional services providers. These may include providers such as Plaid, Decision Logic, Merge, cloud hosting providers, analytics providers, email and SMS providers, CRM and support tools, AI infrastructure providers, and model providers.

B. Financial institutions, processors, data providers, and integration partners

We may disclose information to banks, payment processors, card processors, financial data aggregators, ERP, CRM, accounting, ecommerce, point-of-sale, and similar third-party systems as needed to connect systems, retrieve data, process transactions, verify information, perform reconciliation, provide services, or support financing and receivables products.

C. Affiliates and financing entities

We may disclose information among Lendica, Daylit, affiliates, subsidiaries, financing entities, and commonly controlled entities for the purposes described in this Privacy Notice.

D. Customers and authorized users

Where we provide services to a business customer, we may disclose information to that customer and its authorized users, administrators, affiliates, managing parties, implementation partners, and other personnel acting on the customer’s behalf.

E. Business partners and referral partners

We may disclose information to business partners, referral partners, marketplace partners, implementation partners, and promotional partners where necessary to provide requested services, administer a program, process referrals, or offer relevant products or services.

F. Legal, compliance, safety, and enforcement purposes

We may disclose information when we believe disclosure is necessary or appropriate to comply with law, legal process, subpoenas, court orders, regulatory requests, government inquiries, audits, tax obligations, or law enforcement requests; to enforce agreements or policies; to protect rights, property, and safety; to prevent fraud or security incidents; or to establish, exercise, or defend legal claims.

G. Corporate transactions

We may disclose or transfer information in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, due diligence process, or other corporate transaction.

H. De-identified, anonymized, or aggregated information

We may disclose de-identified, anonymized, or aggregated information for lawful business purposes, including analytics, benchmarking, product development, research, reporting, and service improvement. We do not attempt to re-identify de-identified information except as permitted by law, such as to test our de-identification processes.

5. Cookies and similar technologies

We and our service providers may use cookies, pixels, web beacons, SDKs, local storage, and similar technologies to operate our websites and services, remember preferences, authenticate users, maintain security, analyze usage, measure performance, personalize content, and support marketing and advertising.

Your browser or device may allow you to block or delete cookies. If you block cookies, some features may not work correctly. Where required by law, we will provide additional choices or consent mechanisms for certain cookies or tracking technologies.

6. SMS and communications

We may use SMS or similar text messaging for one-time passcodes, account authentication, service notifications, transaction updates, reminders, and other communications you request or consent to receive. Message frequency varies. Message and data rates may apply. You may opt out of marketing or non-essential text messages by replying STOP. You may receive a final confirmation message. For help, reply HELP or contact us using the information below.

7. Data retention

We retain personal information for as long as reasonably necessary to provide the services, fulfill the purposes described in this Privacy Notice, comply with contracts, resolve disputes, enforce agreements, prevent fraud or misuse, comply with legal, tax, accounting, audit, and regulatory obligations, and support legitimate business purposes.

Retention periods vary depending on the type of information, product, relationship, applicable contract, legal requirements, sensitivity of the information, and operational needs. For example:

account, platform, integration, and customer records may be retained for the subscription term and a reasonable period afterward;
financing, receivables, underwriting, servicing, payment, tax, compliance, and collection records may be retained for longer periods where required or permitted by law;
support, security, logging, diagnostic, and usage records may be retained for operational, security, and audit purposes;
where a customer agreement provides for return, deletion, anonymization, or export of Customer Data after termination, we will handle that data in accordance with the applicable agreement, subject to legal, regulatory, security, backup, and recordkeeping exceptions.

8. Security

We use administrative, technical, and physical safeguards designed to protect personal information. These safeguards may include encryption in transit and at rest, access controls, authentication, monitoring, logging, vulnerability management, vendor review, incident response procedures, and personnel controls. No security system is perfect, and we cannot guarantee that information will be completely secure.

9. International transfers

We are based in the United States, and personal information may be processed in the United States and other locations where we or our service providers operate. These locations may have privacy laws that differ from those in your jurisdiction. Where required, we use appropriate safeguards for international transfers.

10. Your choices and rights

Depending on your location and relationship with us, you may have rights to:

request access to personal information we hold about you;
request correction of inaccurate personal information;
request deletion of personal information;
request portability or a copy of certain personal information;
opt out of certain disclosures, sales, sharing, targeted advertising, or profiling where applicable;
restrict or object to certain processing;
withdraw consent where processing is based on consent;
appeal a decision we make about a privacy request, where applicable.

To exercise privacy rights, contact us using the information in the Contact us section. We may need to verify your identity and authority before fulfilling a request. Where we process personal information on behalf of a business customer, we may refer your request to that customer or ask that you contact the customer directly.

11. U.S. state privacy disclosures

Certain U.S. state privacy laws require additional disclosures. Depending on the law that applies, the categories of personal information we collect may include:

identifiers, such as name, email address, phone number, mailing address, IP address, account identifiers, device identifiers, and similar information;
commercial information, such as products or services purchased, considered, or used;
financial information, such as bank account, payment, receivables, transaction, invoice, credit, underwriting, and billing information;
internet or electronic network activity information, such as website usage, logs, device information, cookie data, and platform activity;
geolocation information, such as approximate location inferred from IP address and, where enabled, more precise location information;
professional or employment-related information, such as company, title, role, authority, ownership, and business contact information;
audio, electronic, or similar information, such as call recordings, meeting recordings, support interactions, and communications;
inferences, analytics, scores, risk indicators, recommendations, or predictions derived from the information above;
sensitive personal information where permitted and necessary, such as account login credentials, financial account information, government identifiers, precise geolocation, or background information in limited financing, security, compliance, or identity verification contexts.

We use and disclose these categories for the purposes described in this Privacy Notice, including providing services, financing and receivables products, underwriting, servicing, collections, AI-enabled features, security, fraud prevention, compliance, marketing, analytics, and business operations.

We do not knowingly sell personal information of children under 16. We do not use sensitive personal information for purposes that require a right to limit under California law unless we provide that right or an exception applies.

12. Sales, sharing, targeted advertising, and analytics

Some privacy laws define "sale" or "sharing" broadly to include certain advertising, analytics, or cookie-based disclosures. We may use advertising, analytics, prospecting, and business development technologies that involve disclosing identifiers, internet activity, device information, business contact information, or similar data to advertising, analytics, or lead-generation partners. These may include LinkedIn, Instagram/Meta, Clay, Apollo, and similar tools. Where required, we provide ways to opt out of such activities.

13. Automated decision-making and profiling

We may use automated tools, analytics, models, or AI-enabled features to support underwriting, fraud prevention, risk management, receivables analysis, recommendations, workflow support, product functionality, security, and business operations. These tools are intended to support human review and business decision-making. Lending, financing, and receivables decisions are subject to human review and are not made solely by automated means. Where applicable law provides rights relating to automated decision-making, profiling, or significant decisions, we will provide required notices and choices.

14. Children’s privacy

Our services are intended for businesses and are not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided personal information to us, contact us and we will take appropriate steps to delete it.

15. Do Not Track

Some browsers transmit "Do Not Track" signals. Because there is no uniform industry standard for responding to these signals, we do not currently respond to them. We will honor legally required opt-out preference signals where required by applicable law.

16. Changes to this Privacy Notice

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date. If we make material changes, we may provide additional notice as required by law.

17. Contact us

Lendica Corp. d/b/a Daylit
Attn: Privacy / Data Protection Officer
1 Boston Place
Boston, MA 02108
United States
Email: operations@daylit.com
Phone: 617-286-2390

‍