Privacy Policy

No sale of personal information

We do not sell your personal information to anyone. It’s just not the type of business we’re in.

Minimum collection

We only collect what we need to provide or improve the Services.

Controlled sharing

We share your personal information only with your permission or as described in this policy.

Accountability

You trust us with your information, and this policy holds us accountable for protecting your rights and privacy.

When you use the Services, we collect the following, and use it only as described below.

• Account information — name, address, email and phone, used to set up your account and contact you.
• Communications with us — support emails and their contents, kept so we can resolve your inquiries.
• Files you provide — documents and content you upload, stored and processed to provide the Services.
• Usage information — IP address, device or browser type, and the page you visited before ours, to analyze performance.
• Location and cookies — used to customize, improve and protect the Services and remember your preferences.

We share your information only as described below.

• Third parties you authorize — access you explicitly grant; their use is governed by their own policies.
• Following the law — disclosures reasonably necessary to comply with law or prevent fraud or abuse; we scrutinize and challenge overbroad requests.
• Others working for Loan Factory — trusted vendors for support, hosting and analytics, required to protect your data to the same standard.
• Business transfers — in a merger, acquisition or sale of assets, information may transfer as part of the deal.

We collect sensitive personal information (e.g. SSN, financial account info, precise geolocation) only as necessary to provide Services, detect and prevent fraud, and comply with legal requirements. We do not use or disclose it beyond purposes allowed under the CPRA without your consent.

While no service is completely secure, we have a dedicated security team. We use firewalls, network redundancy, and vulnerability testing to keep your information safe. Payment information is transmitted using HTTPS encryption, and we maintain PCI DSS certification.

We retain personal information only as long as necessary for the purposes disclosed here, for legal compliance, or as otherwise required by law. Retention periods are listed in the Notice at Collection table above.

We may email you service-related announcements and transaction updates, plus optional marketing you can unsubscribe from at any time. By providing your phone number, you consent to receive conversational SMS related to your mortgage inquiry, application, and status updates.

Right to know

What categories and specific pieces of personal information we collect, use, disclose, or share.

Right to delete

Personal information we have collected, subject to legal exceptions.

Right to correct

Inaccurate personal information we hold about you.

Right to opt out

Of any sale or sharing of your personal information.

Right to limit

Use of sensitive personal information to only necessary purposes.

Non-discrimination

We will not discriminate against you for exercising your privacy rights.

We may modify this Privacy Policy from time to time. When we do, we will post the updated version and update the “Last Updated” date. If a modification meaningfully reduces your rights, we’ll notify you in accordance with the procedures in our Terms & Conditions.