KnowMyLoan — Privacy Policy

1. Who we are and what the Service does

KnowMyLoan is an educational software tool. A borrower uploads a mortgage Loan Estimate and receives a plain-English breakdown of the costs and an optional, directional comparison to public market data. If the borrower chooses, they can opt in to have a licensed mortgage broker follow up. KnowMyLoan is software provided to licensed brokers; it is not a lender, is not your mortgage broker, and does not make loans or give individualized financial, legal, or tax advice.

2. Information we collect from borrowers

• Loan Estimate and its contents. The document you upload and the figures we read from it (loan amount, term, costs, property and loan details). This can include nonpublic personal financial information (“NPI”).
• Scenario inputs. Answers you provide to tailor the analysis (e.g., credit-score range, occupancy, property type, loan purpose, property state). We do not run a credit check and do not collect your Social Security number.
• Contact information — only if you opt in. If, and only if, you choose to request a broker review, we collect your name, email, and phone number, and your preferred contact method.
• Consent records. When you opt in, we record the exact consent text you agreed to, a version identifier, the date and time, your IP address, and your device’s user agent, as a record of your consent.
• Technical and usage data. IP address, device and browser information, and basic usage data, used for security, abuse prevention, and to operate the Service.
• How you arrived. If you reach a loan officer’s page from a link containing campaign tags, or from another website, we record those tags and the referring site’s domain so that loan officer can see which of their marketing brought you. We use this only for that purpose, we do not share it, and it is never used for advertising by anyone else.

The free breakdown requires no contact details. We collect contact information only at the opt-in step.

3. Information we collect from loan officers and business customers

• Applications and waitlist signups. If you apply for a seat or join the waitlist, we collect the details you submit: name, email, phone, individual and company NMLS identifiers, brokerage name, state(s), seat preferences, and any notes you include.
• Account and subscription data. Account details, profile information shown on your branded page (professional details only — we do not collect or display headshots), seat and plan records, and usage of the tool (such as analyses run on your page).
• Payment information. Payments are processed by Stripe. Your card details go directly to Stripe; we do not receive or store your full card number. We keep subscription records (plan, status, billing history references) and the record of your acceptance of the Seat Agreement.

4. How we use information

• To generate the cost breakdown and the directional public-data comparison. The analysis uses only the uploaded document, the scenario answers, and published market data (HMDA, OBMMI, and Fannie Mae/Freddie Mac published adjustments) — no other inputs.
• To route a borrower’s request, only when they opt in and consent, to the licensed broker whose branded site they used.
• To provide and bill seat subscriptions, deliver service and transactional emails, and notify waitlist members when access opens.
• To operate, secure, and improve the Service, including abuse prevention, usage caps, and rate limiting.
• To comply with law and enforce our Terms.

5. Our status under the GLBA

We treat ourselves as a “finder” under the Gramm-Leach-Bliley Act. We handle NPI in accordance with the GLBA Privacy Rule and maintain an information-security program consistent with the FTC Safeguards Rule (Section 9).

6. How we share information — and how we don't

• We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
• With the broker you choose — only on opt-in. When a borrower opts in, we share their contact details, scenario answers, and uploaded Loan Estimate with the single licensed broker whose branded site they used, so that broker can follow up the way the borrower asked. We do not broadcast information to multiple brokers, and we never sell it as a lead.
• Service providers. Vendors who support the Service under contracts limiting their use of data to providing those services: application hosting and database, AI document processing (our AI provider processes uploaded documents to generate the analysis and does not use them to train its models), payments (Stripe), transactional email, and bot protection (Cloudflare Turnstile, which is why you may see a brief verification step before submitting).
• Legal and safety. When required by law, to enforce our Terms, or to protect rights and safety.

7. Your consent and contact preferences (TCPA)

We contact you, or share your details with a broker who will contact you, only after you opt in and check the consent box naming that broker. Consent is not a condition of receiving your breakdown. You can opt out at any time, including by replying STOP to a text or asking to be removed. Waitlist members can unsubscribe from waitlist updates at any time via the link in those emails.

8. Data retention

We keep information only as long as needed to provide the Service, meet legal and recordkeeping obligations (including consent and acceptance records), and resolve disputes, then delete or de-identify it.

9. Security

We maintain administrative, technical, and physical safeguards consistent with the FTC Safeguards Rule, including encryption in transit and at rest, access controls and multi-factor authentication for privileged access, vendor oversight, and an incident-response plan. Uploaded documents are stored privately and are accessible to the chosen broker only through short-lived, access-controlled links. No method of transmission or storage is perfectly secure.

10. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your information, and to limit certain uses. To exercise any right, contact support@knowmyloan.com.

California residents (CCPA/CPRA). We do not sell or share your personal information as those terms are defined. You may request access, deletion, and correction, and you may designate an authorized agent. We will not discriminate against you for exercising these rights.

Other states. Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, and others) have similar rights; the same contact applies. We add state-specific details here as we operate in those states.

11. Cookies and analytics

We use only the cookies and basic analytics needed to operate and secure the Service, plus Cloudflare Turnstile for bot protection.

12. Children

The Service is for adults (18+) and is not directed to children. We do not knowingly collect information from anyone under 18.

13. Changes

We may update this Policy and will post the new effective date and version number. Material changes will be made clear on the Service.

14. Contact

Know My Loan LLC — 221 Main St Ste N, Nashua, NH 03060 — support@knowmyloan.com