Privacy notice

You type it. Name, email, phone, and password when you create an account. Property, income, asset, and debt figures when you build a file. Documents you upload. A Loan Estimate you upload for an explanation. Messages you send to the assistant or to request a call.

We generate it. A session cookie that keeps you signed in, security events such as sign-in and document access, and the results of automated checks on the numbers you entered.

We do not collect it here. The public calculator, the rate pages, and the pre-qualification letter do not ask for a Social Security number, a date of birth, or an account number, and the builder does not either. Do not put those in a document filename or in the chat. When a credit inquiry is eventually available, the authorization on that screen describes exactly what is requested.

To provide the page you asked for, to keep your file available when you come back, to secure accounts, to respond when you request a call, and to meet record-keeping duties that apply once we broker loans. We do not use your information to train public models, and we do not sell or share it for cross-context advertising.

The Gramm-Leach-Bliley Act privacy rule will apply to us once we are a financial institution servicing customers. This notice is written to that standard now: we limit collection, we limit who can see a file, and we will deliver the annual privacy notice the rule requires when it applies.

You can. Staff can see a file only when their role allows it: a loan officer sees files assigned to them and files nobody has claimed; an administrator sees all of them. Every staff view of a document is recorded. Service providers who host the database and the site process data for us under contracts that prohibit other uses. We do not give your file to a lender unless you later ask us to submit it, and we cannot submit one until we are licensed.

We disclose information if a law, a regulator, or a valid legal process requires it, and we will say so unless the law forbids that.

Account and file data stays while your account is open and for the period mortgage rules require after a loan file closes, generally several years. Documents you delete are removed from view immediately; their encrypted bytes are purged within 30 days. Security logs are kept long enough to investigate abuse. You can ask us to delete an account that never became a loan file.

Uploaded documents are encrypted before they are stored. Links that open a document expire within minutes and still require your session. Staff sign-ins require a second factor once the site leaves demonstration mode. Sensitive actions, including authorizing a credit inquiry, ask you to confirm your identity again. No method of storage is perfect; if we learn of a breach of your information we will notify you as applicable law requires.

California residents can request access to, correction of, or deletion of personal information, and can appeal a denial, under the California Consumer Privacy Act as amended. We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is no sale to opt out of. Send requests to hello@formamortgage.net. We will verify the request before acting on it, and we will not discriminate against you for making one.

You may withdraw consent to electronic delivery as described in the disclosures, and you may close your account from the account page or by email.

This site is for adults obtaining a mortgage. We do not knowingly collect information from anyone under 18.