PRIVACY POLICY

Effective date: August 31, 2026

Last updated: August 31, 2026

Who we are

Corlan ("we", "us") is a commercial real estate finance company. We place commercial real estate debt for sponsors, developers and investors.

This policy explains what information we collect through corlan.io and our related services, why we collect it, and what we do with it.

Contact: dealroom@corlan.io

Address: One Sansome Street, San Francisco, California

What we collect

Information you give us directly

Deal information. When you submit a deal or use our sizing tool: property address and type, purchase price or value, loan amount sought, net operating income, rent roll detail, cost basis, business plan, sponsor experience and related financial information.
Contact information. Name, company, role, email address, telephone number.
Broker and lender information. For brokers registering with us and lenders registering appetite: firm, coverage, asset classes, credit box parameters and contact details.
Correspondence. Anything you send us by email or through a form.

Information we collect automatically

Standard web analytics: pages visited, time on page, referring source, approximate location derived from IP address, browser and device type.
We use cookies and similar technologies for site function and analytics. See "Cookies" below.

Information from third parties

Market and lender intelligence from third-party data providers.
Publicly available property, ownership and transaction records.
Information from a broker or intermediary who submits a deal on your behalf.

Why we use it

To size, underwrite, package and place financings.
To identify capital sources whose criteria fit a transaction and to approach them on your behalf.
To communicate with you about a transaction, a program or our market research.
To improve our underwriting standard, our platform and our market intelligence. Where we use deal outcomes to improve our models and our published market research, we use them in aggregated or de-identified form and do not identify you, your property or your terms.
To meet legal, regulatory and record-keeping obligations.

Who we share it with

Capital sources. To place a financing we share deal information with lenders, debt funds, life companies, agencies, banks and other capital providers. We do this to obtain terms for you. Where a lender requires it before receiving detail, we share on a no-names basis first.

Service providers. Cloud hosting, customer relationship management, email, e-signature, analytics and document storage providers who process information on our behalf under contract.

Professional advisers. Legal, accounting and compliance advisers where necessary.

Legal. Where required by law, regulation, subpoena or court order, or to establish or defend a legal claim.

Business transfer. If Corlan is involved in a merger, acquisition, financing or sale of assets, information may transfer as part of that transaction.

We do not sell your personal information. We do not share it with third parties for their own marketing.

Deals that do not proceed

If you submit a deal and we do not proceed, or you decide not to proceed with us:

We retain the deal record for our own underwriting and market intelligence purposes.
We do not share your deal information with any capital source after you tell us not to.
You may ask us to delete your contact information at any time. We may retain the underlying deal and terms data in de-identified form, without your name, your entity or the specific property address, as part of our market research.

How long we keep it

Deal records: seven years from the last activity on the deal, or longer where a closed transaction requires it.
Contact records: until you ask us to delete them, or after three years of no contact.
Analytics: twenty-six months.

How we protect it

We use access controls, encryption in transit, and vendor agreements requiring appropriate safeguards. Access to deal information inside Corlan is limited to people working on that deal.

No system is completely secure. If we become aware of a breach affecting your personal information we will notify you where the law requires it and in any event without undue delay.

Where your information goes

Corlan is based in the United States. Some of our team and some service providers are located in Canada. If you are outside the United States, your information will be processed in the United States and may be processed in Canada.

Your choices

Depending on where you live you may have the right to:

Access the personal information we hold about you.
Correct information that is inaccurate.
Delete your personal information, subject to our need to keep transaction records.
Opt out of marketing communications at any time, using the unsubscribe link or by emailing us.
Object to certain processing, or ask us to restrict it.
Portability, meaning a copy of information you gave us, in a usable format.

California residents. If the California Consumer Privacy Act applies to us, you also have the right to know what personal information we collect, use and disclose, the right to delete, the right to correct, and the right not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA.

Canadian residents. You may access and correct your personal information and may withdraw consent to our use of it, subject to legal and contractual restrictions and reasonable notice.

To exercise any of these, email dealroom@corlan.io. We will verify your identity before acting and will respond within the time the applicable law requires.

Cookies

We use:

Essential cookies, needed for the site to work.
Analytics cookies, to understand how the site is used.

You can block cookies in your browser. Essential cookies are required for parts of the site to function.

Children

Our services are for businesses and professionals. We do not knowingly collect information from anyone under 18.

Changes

We will post any change here and update the "last updated" date. Material changes will be notified by email where we hold your address.

Contact

dealroom@corlan.io

Corlan, One Sansome Street, San Francisco, California