KnowMyLoan: Privacy Policy

1. Who we are and what the Service does

KnowMyLoan is an educational software tool. A borrower uploads a mortgage Loan Estimate and receives a plain-English breakdown of the costs and a directional comparison to public market data, which is part of every report. If the borrower chooses, they can opt in to have a licensed mortgage professional follow up. KnowMyLoan is software licensed by licensed mortgage professionals; it is not a lender, is not your loan originator, and does not make loans or give individualized financial, legal, or tax advice.

2. Information we collect from borrowers

• Loan Estimate and its contents. The document you upload and the figures we read from it (loan amount, term, costs, property and loan details). This can include nonpublic personal financial information (“NPI”).
• Scenario inputs. Answers you provide to tailor the analysis (e.g., credit-score range, occupancy, property type, loan purpose, property state). We do not run a credit check and do not collect your Social Security number.
• Contact information — only if you opt in. If, and only if, you choose to request a review by a licensed mortgage professional, we collect your name, email, and phone number.
• Consent records. When you opt in, we record the exact consent text you agreed to, a version identifier, the date and time, your IP address, and your device’s user agent, as a record of your consent.
• Technical and usage data. IP address, device and browser information, and basic usage data, used for security, abuse prevention, and to operate the Service.
• Site activity. When you visit our homepage, the tools described in Section 11 record which pages you view and some actions on them, such as playing the video.
• How you arrived. We collect this information when you reach KnowMyLoan through a licensed mortgage professional’s branded page or link, which may contain campaign tags identifying that professional. If you reach that page from a link containing campaign tags, or from another website, we record those tags and the referring site’s domain so that professional can see which of their marketing brought you. We use this only for that purpose, we do not share it, and it is never used for advertising by anyone else.

The free breakdown requires no contact details. We collect contact information only at the opt-in step.

3. Information we collect from loan officers and business customers

• Applications and waitlist signups. If you apply for a seat or join the waitlist, we collect the details you submit: name, email, phone, individual and company NMLS identifiers, brokerage name, state(s), seat preferences, and any notes you include.
• Account and subscription data. Account details, profile information shown on your branded page (professional details only — we do not collect or display headshots), seat and plan records, and usage of the tool (such as analyses run on your page).
• Payment information. Payments are processed by Stripe. Your card details go directly to Stripe; we do not receive or store your full card number. We keep subscription records (plan, status, billing history references) and the record of your acceptance of the Seat Agreement.
• Site activity. When you visit our pages for loan officers and mortgage brokers, the tools described in Section 11 record how you use those pages. If a seat application fails, we log an error code and a few technical details. We do not log your answers (Section 11).

4. How we use information

• To generate the cost breakdown and the directional public-data comparison. The analysis uses only the uploaded document, the scenario answers, and published market data (HMDA, OBMMI, and Fannie Mae/Freddie Mac published adjustments) — no other inputs.
• To route a borrower’s request, only when they opt in and consent, to the licensed mortgage professional whose branded site they used.
• To provide and bill seat subscriptions, deliver service and transactional emails, and notify waitlist members when access opens.
• To operate, secure, and improve the Service, including abuse prevention, usage caps, and rate limiting.
• To measure and improve our website and our marketing, using the tools described in Section 11.
• To comply with law and enforce our Terms.

5. Our status under the GLBA

We treat ourselves as a “finder” under the Gramm-Leach-Bliley Act. We handle NPI in accordance with the GLBA Privacy Rule and maintain an information-security program consistent with the FTC Safeguards Rule (Section 9).

6. How we share information — and how we don't

• We do not sell a borrower's Loan Estimate, report, or contact details, and we never use them for advertising. On the pages listed in Section 11, the Meta Pixel sends page and event data to Meta so we can measure our ads and show them to past visitors. Some state privacy laws treat that as "sharing" or "targeted advertising," or as a "sale." Section 11 explains how to opt out.
• With the licensed mortgage professional you choose — only on opt-in. When a borrower consents, we share three things with the single licensed mortgage professional whose branded page they used: the Loan Estimate they uploaded, their KnowMyLoan report, and the contact details they provided. Nothing is shared without that consent. We do not broadcast information to multiple professionals, and we never sell it as a lead.
• With the partner whose code you used. If you join KnowMyLoan with a partner's code, that partner sees your first name, your last initial, how many seats you have, the month you joined, whether your seat is active and whether you pay monthly or yearly.
• Service providers. Vendors who support the Service under contracts limiting their use of data to providing those services: application hosting and database, AI document processing (our AI provider processes uploaded documents to generate the analysis and does not use them to train its models), payments (Stripe), transactional email, and bot protection (Cloudflare Turnstile, which is why you may see a brief verification step before submitting).
• Advertising and analytics tools. Meta and Microsoft receive data from the tools described in Section 11. Each handles that data under its own terms and privacy policy. Those terms let it use the data for its own purposes, including advertising.
• Legal and safety. When required by law, to enforce our Terms against a subscribing mortgage professional or any other user, or to protect rights and safety. Consumers are never contacted for enforcement purposes; those provisions address subscribers of the Service.

7. Your consent and contact preferences (TCPA)

KnowMyLoan itself contacts you only to deliver your report and to send service messages about your own request. We share your details with a licensed mortgage professional who will contact you only after you opt in and check the consent box naming that professional. Consent is not a condition of receiving your breakdown. You can opt out at any time, including by replying STOP to a text or asking to be removed. Waitlist members can unsubscribe from waitlist updates at any time via the link in those emails.

8. Data retention

We keep information only as long as needed to provide the Service, meet legal and recordkeeping obligations (including consent and acceptance records), and resolve disputes, then delete or de-identify it.

If you don't ask for a second opinion, your Loan Estimate is deleted after 72 hours. If you do, it's kept for 90 days so your loan officer can follow up, then deleted.

9. Security

We maintain administrative, technical, and physical safeguards consistent with the FTC Safeguards Rule, including encryption in transit and at rest, access controls and multi-factor authentication for privileged access, vendor oversight, and an incident-response plan. Uploaded documents are stored privately and are accessible to the chosen licensed mortgage professional only through short-lived, access-controlled links. No method of transmission or storage is perfectly secure.

10. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your information, and to limit certain uses. To exercise any right, contact support@knowmyloan.com.

We do not sell a borrower's Loan Estimate, report, or contact details. Regardless of where you live, you may request access to or deletion of your information as described in this policy, and we honor verified requests.

11. Cookies, analytics, and advertising tools

We use cookies and similar tools. Some keep the Service working and secure, and others help us measure and improve our website and our marketing. This section lists each one, where it runs, and how to opt out.

• Needed to run the Service. We use cookies and browser storage to keep you signed in, remember a partner's or referrer's code for 60 days, and hold campaign tags for the length of your visit (Section 2).
• Bot protection. Cloudflare Turnstile checks that a person is submitting a Loan Estimate, an opt-in request, or a seat application.
• Meta Pixel (ad measurement and audiences). It starts on our homepage (knowmyloan.com), our page for loan officers and mortgage brokers (knowmyloan.com/brokers), the loan officer version of our demo (knowmyloan.com/demo?from=broker), and the screen you see after paying for a seat. It sends Meta the page address, your IP address, and browser details. It also sends these actions: scrolling halfway down a page, playing the video, opening the demo, clicking into the seat application, submitting it (only if you agree to advertising sharing on the form), clicking to book a call, starting a free month, and completing a seat payment, including the amount paid. The pixel sets cookies (_fbp, and _fbc if you arrive from a Meta ad) so Meta can recognize your browser. We use this data to measure our ads and to show our ads to people who visited these pages. Meta also uses the data for its own purposes, including advertising, under its own terms and the Meta Privacy Policy.
• Optional server-side reporting to Meta. Only loan officers and mortgage brokers who apply for a seat can choose this on the application form. If you agree, we send Meta your email and your phone number if given, after hashing them, the _fbp and _fbc cookies if available, your IP address and browser details from your application, and the event name when you submit your application, start a free month, or complete a seat payment. A paid checkout includes the amount paid and currency. A free month includes a fixed planning value of $2,388, which is twelve months at the $199 monthly early adopter rate. It is not a payment, a price, or money received. Hashing scrambles contact details for matching; it does not make them anonymous. We use this to measure our ads and find similar loan officers and mortgage brokers. It is optional and does not affect your application or seat. We record your choice, the date and time, the notice shown, the policy version and your region when available. We honor Global Privacy Control as a refusal. We keep the acceptance record if you later withdraw. We check your saved choice before each server report and send nothing if you did not agree or have withdrawn. Turn it off in Advertising choices below or in your seat dashboard Settings. Before you have a seat, email support@knowmyloan.com from your application email to withdraw.
• Microsoft Clarity (session recording and heatmaps). It starts only on knowmyloan.com/brokers and the loan officer version of our demo. Clarity records how you use the page, such as clicks, scrolling, mouse movement, and what the page shows you, so we can replay visits and fix what is unclear. Anything you type into a form field is masked in your browser, and Microsoft says masked content is not uploaded. We also mask the whole seat application form and the email address shown after you apply. We send Clarity step labels, such as "application started," and an error code if an application fails. We do not send your answers. Clarity sets cookies (_clck and _clsk) to recognize your browser and connect the pages you view into one session. Microsoft processes this data under the Clarity Terms of Use and the Microsoft Privacy Statement (microsoft.com/privacy/privacystatement), which allow Microsoft to use it for its own purposes, including advertising.
• Seat application error log. If a seat application fails, we record a short error code, whether the bot check finished, which page you were on, the campaign source tag in the link you used, and whether you were in the Facebook, Instagram, or LinkedIn in-app browser. We do not record your name, email, phone, NMLS ID, brokerage, or IP address in this log. We use it to find and fix problems with the application form and our campaign links.

Branded borrower pages do not load advertising pixels or session recording. When you open a loan officer's or mortgage broker's branded page from their link, including the Loan Estimate upload, the report, and the opt-in step, it does not load the Meta Pixel or Microsoft Clarity. We do not send a borrower's Loan Estimate, report, or contact details to Meta or to Microsoft Clarity.

Your choices.

Advertising choice controls apply immediately in this browser and other open tabs. Signing in lets us also turn off server reporting for your seat. You can also email us to withdraw advertising sharing from your application email. We verify the request before changing your saved choice. In regions requiring consent, advertising tracking stays off unless you agree. If your region cannot be determined, it stays off. Elsewhere ordinary advertising tracking may run unless you refuse or Global Privacy Control is on. Server reporting with contact details always requires your agreement.

• Block or delete cookies in your browser settings, or use a browser or extension that blocks trackers. Our public pages still work.
• For Meta, manage the ads you see in your Facebook or Instagram ad preferences (facebook.com/adpreferences), and review or disconnect the activity Meta receives from websites under "Your activity off Meta technologies" in Accounts Center. You can also opt out of interest-based ads at optout.aboutads.info.
• For Clarity, opt out through the Digital Advertising Alliance at optout.aboutads.info by selecting Microsoft. Microsoft says Clarity also honors Global Privacy Control signals.
• Email support@knowmyloan.com with a question or a privacy request. We cannot identify a visitor from Meta or Clarity data on our own, so use the opt-outs above to stop that collection.

12. Children

The Service is for adults (18+) and is not directed to children. We do not knowingly collect information from anyone under 18.

13. Changes

We may update this Policy and will post the new effective date and version number. Material changes will be made clear on the Service.

14. Contact

Know My Loan LLC — 221 Main St Ste N, Nashua, NH 03060 — support@knowmyloan.com