Privacy notice
This notice explains what Criteria by Lendmind collects when you connect it to Claude and use it there, why, who handles it and how long it is kept.
Who we are
Criteria is provided by LENDMIND LTD, a company registered in England and Wales under company number 16822276, at 60 Milton Drive, Borehamwood, England, WD6 2BB. We are the controller of the personal data described here.
Contact us about privacy at support@lendmind.com.
What we collect, and why
Your email address
You sign in to Criteria with your email address, and we send you a sign-in link. We use your address to sign you in and to recognise your account. Sign-in is handled for us by Google Identity Platform, and sign-in emails are sent from no-reply@lendmind.com through Google Workspace.
An account identifier
The sign-in service gives your account a random identifier. Criteria uses it, rather than your email address, to link your connection to Claude, your plan and your usage.
Your connection to Claude
When you connect Criteria, Claude registers itself with us and you approve it. We keep the registration, which holds no personal data, and records of your approval and of the access Claude was given: when each was issued and when it expires or was withdrawn. The access codes themselves are stored only as one-way fingerprints, so they cannot be read back.
Daily usage counts
For each account and each day, we count the requests Claude makes and the quoted passages it reads. We use the counts to apply the daily limits and to spot misuse.
The words of each request
Each request from Claude carries a few words, such as a topic, a lender's name or a feature of a case like "HMO". We use them to answer that request and then discard them. We do not store them, and we do not log them. Criteria never asks Claude for your chats, files or memory, and never receives them. Please do not put your clients' personal details into questions: Criteria does not need them.
Request logs
Google Cloud records each request to criteria.lendmind.com: its time, address and status, and the network address it came from. For each request to the connector, Criteria adds one line of its own: which tool was used, the outcome, how many passages were returned and how long it took. That line never holds the words of a question, an email address or an access code.
Why we are allowed to use it
We use your information to provide the service you ask for, which is the contract between us, and to keep Criteria secure and fair to use, which is our legitimate interest.
How long we keep it
- Sign-in sessions last five days.
- Approval requests expire after ten minutes, and the one-time codes that complete an approval after sixty seconds.
- Claude's access lasts an hour at a time, and Claude renews it while you use Criteria. If it goes unused for thirty days, it lapses and you connect again. Access records are removed in routine clean-up once they have been expired for seven days.
- Request logs are kept for thirty days.
- Your email address, account identifier and daily usage counts are kept while your account exists. Ask us and we will delete them.
Who handles it
- Google hosts Criteria in Google Cloud in London, runs sign-in through Google Identity Platform, and sends sign-in emails through Google Workspace. Google acts for us under its data processing terms.
- Anthropic runs Claude. Claude sends Criteria the requests described above and receives Criteria's answers, which are lenders' published criteria. Anthropic's privacy policy covers your conversations in Claude.
We do not sell your information, use it for advertising or use it to train AI models.
How we protect it
Criteria accepts connector requests only from Anthropic's servers, over encrypted connections. Access codes are stored as one-way fingerprints, access expires quickly and can be withdrawn, and each part of the service holds only the database access it needs.
Your rights
You can ask for a copy of your information, ask us to correct or delete it, or object to how we use it. Contact us at the address above. You can disconnect Criteria in Claude at any time from Settings, then Connectors. If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office.
Criteria is for mortgage professionals and is not intended for anyone under 18.
Changes to this notice
If we change what we collect or how we use it, we will update this notice and the date at the top.