Privacy Policy

Who we are, and who this covers

Mortgage Clarity is software sold to mortgage advisors, operated by Get Mortgage Clarity, Co. It holds information about three different groups of people, and they are not treated the same way.

• Advisors. Our direct customers. We decide how their account information is used, so we are the controller of that data.
• Borrowers and their co-borrowers. Your clients, not ours. Some create a sign-in on our pages to reach the workspace you opened for them, for example from your invitation or an open house sign-up form, but the relationship is still yours. We hold their information only to provide the service to you, we act on your instructions, and we do not use it for our own purposes.
• Real estate agents invited by an advisor to a shared workspace.

What we collect

From advisors: name, email, phone, NMLS ID, company, lender of record, licensed states, profile and logo images, billing details handled by Stripe, and a record of activity in the product.

From borrowers, entered by their advisor or by the borrower in their workspace: name, email, phone, and the financial details needed to model a loan, including income, assets, debts, credit information, property details, and loan terms. Where an advisor uploads a loan estimate or closing disclosure, we hold that document and the figures extracted from it.

Automatically: a session cookie, IP address, and browser information. We use a strictly necessary session cookie to keep you signed in. We also use a product analytics service to understand which features are used and where people get stuck. It runs on advisors' pages and on the public pages of this website, never in client workspaces, shared reports or agent workspaces. On the public website it records which pages are visited, where the visit came from, and clicks on our sign-up and demo buttons, using a first-party cookie to tell a returning visitor from a new one; it does not record the screen there. On advisors' pages it records pages visited and actions taken. Where it records the screen, all text and form entries are masked, and borrower financial details are not sent to it. We do not use advertising cookies, we do not sell data to advertisers, and we do not track you across other websites.

How we use it

To operate the product: generate analyses, publish reports, run client and agent workspaces, send transactional email, take payment, and provide support. We do not sell personal information, and we do not use borrower information to market to borrowers.

Artificial intelligence

Some features send information to a third-party AI provider (Anthropic): drafting an analysis, answering questions in the advisor's assistant and in the client Pilot (a chat assistant a client can use inside their workspace, which the advisor controls), generating a call recap from a transcript, and reading uploaded documents such as closing disclosures, mortgage statements, purchase contracts, listing sheets, rate sheets, and condominium documents. That can include borrower financial details, the contents of those documents, and what a client writes to the Pilot.

We contract for this data not to be used to train the provider's models. If you work under a lender or employer whose policy restricts sending borrower documents to third-party AI services, review that policy before using these features.

Who we share it with

Only with service providers who help us run the platform, and only for that purpose. Each works under its terms of service with us, and we are putting a signed data processing agreement in place with each of them. Our current subprocessors are Supabase (database, authentication, and file storage), Render (hosting), Cloudflare (edge network and TLS, reached through our hosting provider), Anthropic (AI), Stripe (payments), Resend (email), Google (sign-in and fonts), Fathom (call recordings, where an advisor connects it), Composio (brokers the accounts an advisor connects), Cotality and RentCast (property data), HubSpot (our own records of advisor accounts and demo bookings; no borrower data), PostHog (product analytics), TitleCapture (title and closing costs), and Mapbox and ArcGIS (maps). All process data in the United States.

Advisors can also connect their own accounts, such as Zoom, Google Meet, Drive, Sheets, and Calendar, Fireflies, tl;dv, Calendly, Cal.com, Slack, Dropbox, and Box. Those services act under the advisor's own agreement with them, Composio brokers the connection, and nothing is connected unless the advisor chooses it. Data moves between those accounts and the platform only for the feature the advisor turned on.

We also disclose information where the law requires it, and to a successor in a merger or acquisition, in which case this policy continues to apply until replaced.

How it is protected

Data is encrypted in transit and at rest. Access is scoped so one advisor cannot reach another advisor's clients. We keep an audit trail of advisor access to borrower records, enforce a content security policy, hold session tokens in httpOnly cookies rather than browser storage, and run periodic security review. No system is perfectly secure, and we do not claim otherwise.

How long we keep it

We keep advisor account data for as long as the account exists. We keep borrower data for as long as the advisor's account holds it, since the advisor may have their own record-retention obligations. Some uploaded documents, such as fee sheets and condominium documents, are deleted automatically after 90 days.

Cancelling a subscription pauses the account and deletes nothing. To delete an account, an advisor schedules deletion in Settings or asks us in writing. After a 30-day window in which the request can be cancelled, we delete the account and the borrower records it holds, other than what we must retain for legal, tax, or audit reasons and what remains in routine database backups until they expire. On written request we will also return an advisor's data.

Your choices

Advisors can view and correct their information in Settings, download an export of their account's core records (uploaded files and some workspace content are provided on request), and schedule deletion of their account. Borrowers should contact their own advisor, who controls their record. If you contact us directly about a borrower record, we will refer you to the advisor rather than act on it ourselves, because the data is theirs to control, not ours.

Some information is covered by the Gramm-Leach-Bliley Act, which changes which privacy rights apply. Where a state law grants you rights over information not covered by that Act, we will honour them.

Other things worth saying plainly

The service is for use in the United States and is not directed to children. We will post material changes here and ask advisors to accept the updated version before continuing to use the product.

Contact

Questions about this policy, or a privacy or security concern, go to privacy@mortgageclarityplatform.com, or write to Get Mortgage Clarity, Co.