Thanks for visiting Loan Factory! This Privacy Policy describes what information we collect, how we used and shared it, and your rights - especially if you are a California resident. Capitalized terms not defined here have the meanings set forth in our Terms & Conditions. By using our Services, you agree to this Privacy Policy. If you do not agree, you may not access or use our Services. If you have any comments or questions about this Privacy Policy, feel free to contact us.
When it comes to your personal information we believe in transparency, not surprises. So before we get into the details, we want to share with you a few of our core privacy principles.
The table below describes the categories of personal information we collect, the purpose of collection, and our retention practices.
| Category (per CCPA/CPRA) | Examples | Purpose of Collection | Retention Period |
|---|---|---|---|
| Identifiers | Name, postal address, email, phone, IP address | Provide Services, communicate with you, verify identity | While account active + up to 7 years after closure |
| Customer Records | Account login, payment information | Process transactions, detect fraud | While account active + up to 7 years |
| Commercial Information | Service purchase history | Maintain records, improve Services | While account active + up to 7 years |
| Internet/Network Activity | Browsing history, device type, referring URL | Analytics, security, personalization | 3 years |
| Geolocation Data | GPS location, IP-based location | Personalization, fraud prevention | 3 years |
| Audio/Visual Data | Customer support call recordings | Quality control, dispute resolution | 2 years |
| Professional/Employment Data | Job title, employer (if provided) | Loan application processing | While account active + up to 7 years |
| Sensitive Personal Information | SSN, financial account info, precise geolocation, login credentials | Loan processing, compliance with law | While account active + up to 7 years |
We do not sell or share personal information for cross-context behavioral advertising purposes.
When you use the Services, we collect the following information, and use it only as described below:
When you use the Services, we may share your information only as described below:
We do not share data with third parties for marketing/promotional purposes.
We may collect sensitive personal information (e.g., SSN, financial account info, precise geolocation) only as necessary to:
We do not use or disclose sensitive personal information for purposes beyond those allowed under the CPRA without your consent.
California residents have the following rights:
How to Exercise Your Rights
Authorized Agents - You may designate an authorized agent; we will require verification of your identity and the agent’s authorization.
Verification Process – We verify requests by matching identifying information to your account records.
We will respond within 45 days to verify your requests.
While no service is completely secure, we have a security team dedicated to keeping your information safe. We employ security measures such as using firewalls to protect against intruders, building redundancies throughout our network (so that if one server goes down, another can cover for it) and testing for and protecting against network vulnerabilities. Payment information is transmitted using HTTPS encryption, and we maintain a PCI DSS certification.
We retain personal information only as long as necessary for the purposes disclosed in this policy, for legal compliance, or as otherwise required by law. Retention periods are listed in the “Notice at Collection” table above.
Information that you submit through the Services may be transferred to countries other than where you live (for example, to our servers in the US). We also may store information locally on the devices you use to access the Services. We also may transfer information to third parties outside the US for processing or to support the Services, and we require them to provide at least the same level of protection for your information as described in this Privacy Policy.
To modify or delete the personal information you have provided to us, simply log into the Services and update your profile. We may retain certain information as required by law or for necessary business purposes. On request, we'll provide you with a copy of your personal information that we maintain. This request may be subject to a fee not exceeding the prescribed fee permitted by law.
We may periodically email you service-related announcements. We'll also send you emails related to your transactions. We may also send you marketing or promotional communications, but you can opt out of receiving subsequent marketing or promotional communications by clicking the link marked unsubscribe (or a similar phrasing) that's included in those communications.
If you use our Services to operate your own sites, we may process your End Users’ information on your behalf, in accordance with this Privacy Policy. You are responsible for complying with applicable privacy laws for your End Users.
By providing your phone number, you consent to receive conversational SMS messages from Loan Factory, Inc. related to your mortgage inquiry, application, documentation, follow-up and status updates. Reply STOP to opt-out; Reply HELP for support; Message & data rates may apply; Messenger frequency may vary.
No mobile information will be shared with third parties/affiliates for marketing or promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
We may modify this Privacy Policy from time to time. When we do, we will post the updated version and update the “Last Updated” date. If a modification meaningfully reduces your rights, we’ll notify you in accordance with the procedures set forth in our Terms & Conditions.
We affirm that Google Workspace APIs are not used to develop, improve, or train generalized AI and/or machine learning models.
We only request the minimum access necessary to provide our services and use Google Workspace data strictly for the purposes disclosed in this Privacy Policy and in accordance with the Google API Services User Data Policy.
We do not retain or use Google Workspace data to train generalized AI or ML models.