> industry-standard security measures

The industry-standard is to get hacked and have your info leaked online.

"Industry-standard" is like saying "military-grade"

I think based on your responses so far, it’s disappointing, but people should not upload these docs.

There isn’t anything actionable in them. It seems like you are running some kind of scheme to collect these documents. And it’s not clear why you need them at all: you could provide the same advise to everyone regardless of their contents, which is to compare options, or to ask for more lender refunds.

Just replace the entire contents of the privacy policy with the word “None.”

You’ll never ever please the privacy commenters on HN who are armchair security enthusiasts. They’re never going to use your product and they’re never going to stop complaining if you show your product to them.

Normal people just don’t care. For a tiny side project spend your time on the thing that’s potentially useful to people not trying to appease the privacy crowd on HN.