Privacy Policy

Who we are, and who this covers

Mortgage Clarity is software sold to mortgage advisors, operated by Mortgage Clarity, LLC, a Delaware limited liability company. It holds information about three different groups of people, and they are not treated the same way.

• Advisors. Our direct customers. We decide how their account information is used, so we are the controller of that data.
• Borrowers and their co-borrowers. Your clients, not ours. They never signed up with us. We hold their information only to provide the service to you, we act on your instructions, and we do not use it for our own purposes.
• Real estate agents invited by an advisor to a shared workspace.

What we collect

From advisors: name, email, phone, NMLS ID, company, lender of record, licensed states, profile and logo images, billing details handled by Stripe, and a record of activity in the product.

From borrowers, entered by their advisor or by the borrower in their workspace: name, email, phone, and the financial details needed to model a loan, including income, assets, debts, credit information, property details, and loan terms. Where an advisor uploads a loan estimate or closing disclosure, we hold that document and the figures extracted from it.

Automatically: a session cookie, IP address, and browser information. We use a strictly necessary session cookie to keep you signed in. We also use a product analytics service to understand which features are used and where people get stuck, which records pages visited and actions taken in the app. Borrower financial details are never sent to it. We do not use advertising cookies, we do not sell data to advertisers, and we do not track you across other websites.

How we use it

To operate the product: generate analyses, publish reports, run client and agent workspaces, send transactional email, take payment, and provide support. We do not sell personal information, and we do not use borrower information to market to borrowers.

Artificial intelligence

Some features send information to a third-party AI provider (Anthropic) to draft an analysis, answer a question in a report chat, generate a call recap, or read an uploaded closing disclosure. That can include borrower financial details and the contents of uploaded loan documents.

We contract for this data not to be used to train the provider's models. If you work under a lender or employer whose policy restricts sending borrower documents to third-party AI services, review that policy before using these features.

Who we share it with

Only with service providers who help us run the platform, each under contract and only for that purpose. Our current subprocessors are Supabase (database, authentication, and file storage), Render (hosting), Cloudflare (edge network and TLS, reached through our hosting provider), Anthropic (AI), Stripe (payments), Resend (email), Google (sign-in, optional email integration, and fonts), Fathom (call recordings, where an advisor connects it), PostHog (product analytics), RentCast (property data), TitleCapture (title and closing costs), Mapbox and ArcGIS (maps), and Cal.com (scheduling links). All process data in the United States.

We also disclose information where the law requires it, and to a successor in a merger or acquisition, in which case this policy continues to apply until replaced.

How it is protected

Data is encrypted in transit and at rest. Access is scoped so one advisor cannot reach another advisor's clients. We keep an audit trail of advisor access to borrower records, enforce a content security policy, hold session tokens in httpOnly cookies rather than browser storage, and run periodic security review. No system is perfectly secure, and we do not claim otherwise.

How long we keep it

We keep advisor account data for as long as the account is open. We keep borrower data for as long as the advisor's account holds it, since the advisor may have their own record-retention obligations. On written request we will delete or return an advisor's data, and we will delete it after account closure other than what we must retain for legal, tax, or audit reasons.

Your choices

Advisors can view and correct their information in Settings, request an export, and request deletion of their account. Borrowers should contact their own advisor, who controls their record. If you contact us directly about a borrower record, we will refer you to the advisor rather than act on it ourselves, because the data is theirs to control, not ours.

Some information is covered by the Gramm-Leach-Bliley Act, which changes which privacy rights apply. Where a state law grants you rights over information not covered by that Act, we will honour them.

Other things worth saying plainly

The service is for use in the United States and is not directed to children. We will post material changes here and ask advisors to accept the updated version before continuing to use the product.

Contact

Questions about this policy, or a privacy or security concern, go to privacy@mortgageclarityplatform.com, or write to Mortgage Clarity, LLC.