Lien Request LLC
Last updated September 13, 2026. This policy covers the LienRequest application at app.lienrequest.com, the lienrequest.com website, and the ordering service provided through them.
We hold two different kinds of information, and they are governed differently. Account information is about the people who log in — we decide how that is handled. Order information is about transactions and properties, and it is submitted to us by our business customers; we handle it on their instructions, to do the work they asked for.
Invoice history and amounts. Payment is by check; no card processor is connected, and the application records invoice amounts only. We do not collect or store card numbers or bank account numbers. If we add electronic payment we will name the processor here before taking any payment through it.
The application has no field that needs a Social Security number, driver's license number, date of birth or account number, and none should be typed into a note. If one is entered anyway we will remove it on request.
We do not sell personal information. We do not use it for advertising, we do not share it with advertising networks, and we do not use it to train any machine-learning model, and no service connected to the application does so.
We do not otherwise disclose one customer's orders to anyone. Customers see only their own records; the application enforces that separation at the company-code level.
We keep aggregate statistics about issuing offices: which letters a municipality requires, what an office charges, and how long it takes to answer. These figures describe government offices and are what make the service useful. They are derived from completed orders across the platform, they identify no customer, property or individual, and we retain and use them indefinitely, including after an account closes. No customer's order records, client names, file numbers or properties are published, sold or shared.
Information about a party to a real estate settlement can be nonpublic personal information under the Gramm-Leach-Bliley Act and the Federal Trade Commission's Safeguards Rule, 16 C.F.R. Part 314. Where our customer is a financial institution subject to that rule, we act as its service provider: we use the information only to perform the service the customer engaged us for, and we maintain administrative, technical and physical safeguards for it. We will execute a customer's own service-provider or confidentiality addendum on request; ask for it with your rate schedule.
No system is perfectly secure, and we do not represent that ours is.
If we determine that personal information in our systems has been accessed or acquired without authorization, we will notify the affected customer without unreasonable delay, tell it what we know and what we are doing, and cooperate with the notices that customer must give. Pennsylvania's Breach of Personal Information Notification Act, 73 P.S. § 2301 et seq., as amended by Act 151 of 2022, governs notification in this Commonwealth. That Act requires an entity that maintains or stores personal information on behalf of another entity to notify that entity on discovering a breach — which is our position relative to our customers — and sets no fixed number of days, requiring notice without unreasonable delay. Where more than 500 Pennsylvania residents must be notified, the Act also requires notice to the Office of Attorney General and to the nationwide consumer reporting agencies.
Order records are kept for three (3) years after the order closes, so that a recently closed file can be reconstructed if a question arises. After three years they are deleted; a question that surfaces later cannot be answered from our records, so keep whatever your own file-retention rules require. Account records are kept while the account is open and for one (1) year after it closes. Billing records are kept as long as tax and accounting rules require. Aggregate operating statistics under section 4 are kept indefinitely.
Our customers control their own order records and may correct them in the application or ask us to. On written request we will export a customer's records in a machine-readable format, or delete them, subject to the retention obligations above and to any legal hold.
If you are an individual whose information appears in an order — a seller, a buyer, a property owner — we hold it because a business customer gave it to us to perform a records request for a transaction you are part of. Please contact that business first; if you contact us at orders@lienrequest.com we will put you in touch with them and respond as the law requires.
The application sets two cookies: a session cookie that keeps you signed in, and a cookie remembering your company code so your people type only their email and password. The company code is an identifier, not a secret. We use no advertising cookies, no third-party analytics, and no tracking pixels. There is no third-party JavaScript in the application at all.
The service is for business use. It is not directed to children and we do not knowingly collect information from them.
The application and its data are hosted in the United States on Railway, with DNS and TLS through Cloudflare. We do not offer the service outside the United States.
We may revise this policy. The date at the top always shows the current version, and we will notify account administrators of material changes thirty (30) days before they take effect.
Questions about this policy, or a request under it, go to:
