The way I understand it, you control the private key and the lenders are given access to the platform via API keys. That means you can also control the funds provided by lenders. You, as the platform owner, is also capable of doing anything like changing the access of lenders to their funds.