Privacy Policy

LoanDeck (“LoanDeck,” “we,” “us,” or “our”) is operated by LoanDeck LLC, a company based in Long Beach, California. This Privacy Policy explains how we collect, use, disclose, and protect information when you use LoanDeck at loandeck.app (the “Service”).

By using the Service, you agree to the practices described in this policy.

1. Who This Policy Applies To

This policy applies to two types of users:

Brokers — licensed mortgage professionals who create accounts and use LoanDeck to build loan comparisons.

Clients — borrowers who receive and view a shared comparison link from a broker. Clients do not create accounts.

2. Information We Collect

From Brokers (account holders)

Account information:

• Name, email address, and password when you sign up
• Google account information if you sign in with Google (name, email, profile photo)

Professional profile information:

• NMLS license number, state license number, company name, company NMLS number
• Phone number, website, booking URL, LinkedIn profile, Instagram handle
• Title (e.g., Senior Loan Officer)
• Brand preferences including accent color, flyer theme, default credit score, and default disclaimer text

Comparison data:

• Loan scenarios you build, including loan type, rate, term, purchase price, down payment, and other financial inputs
• Client names you associate with comparisons
• Tax filing status, household income, federal marginal tax rate, and estimated state income tax entered for tax advantage calculations
• Debt consolidation details including individual debt items with balances, rates, and monthly payments
• Property details, realtor information, video URLs, and notes you enter
• Borrower's Choice selections made by clients (which scenario was chosen and when)
• Audit trail of actions taken on each comparison with timestamps
• Closing cost templates and loan templates you create

Data imported from a connected loan origination system:

If you connect LoanDeck to your loan origination system (LOS), either through a direct API connection or through an automation platform such as Zapier, we import a limited, allowlisted set of fields to build a comparison for you:

• Loan and property terms — loan type, rate, term, purchase price, down payment, loan amount, occupancy, property address, and similar transaction details
• Borrower and co-borrower names, used to title and label the comparison
• The loan's identifier in your LOS, so a later refresh updates the existing comparison instead of creating a duplicate

We do not import Social Security numbers, dates of birth, borrower contact information, employment, income, credit scores or credit data, or contact details for third parties on the file such as escrow or HOA agents — even where the connected system makes those fields available to us. The allowlist is enforced in code, not by policy alone.

Realtor data:

• Name, email, phone, company, license number, headshot, and logo for realtors you save to your account

Files you upload:

• Mortgage statement PDFs for AI-powered data extraction
• Property photos for open house flyers
• Broker headshot and company logo images

Notification preferences:

• View notification frequency setting
• Borrower's Choice notification setting
• Custom notification email address if provided

Support chat conversations:

• The messages you send to the in-app help assistant and the replies it gives
• The page you were on when you asked, and your account and organization identifiers
• When the assistant cannot answer a question, a short topic summary of what was asked, written by the assistant itself and containing no personal information from your question

The assistant is instructed not to ask for client information, and the chat panel asks you not to paste client statements or Social Security numbers. We store whatever you send it, so please do not send those.

Usage data:

• How you interact with the Service (features used, pages visited, actions taken)
• AI feature usage (number of AI entry sessions, statement extractions, summaries generated, and support chat messages)
• Device type, browser, operating system, and IP address
• Session timestamps and duration
• Session recordings of your use of the broker application. Our analytics provider records how you move through the signed-in application — pages, scrolling, clicks and the content displayed on screen — so we can diagnose problems and see where the product is confusing. Two things are held back. What you type into form fields is masked and is not captured. Client and lead names, email addresses and phone numbers are masked wherever they are displayed, so a recording cannot be tied back to a named individual. The loan figures in a comparison do appear, because a recording exists to show us what the screen showed you and those numbers are usually the thing that went wrong. Recording runs only on the signed-in broker application. It does not run on the comparison pages your clients open, and it does not run on our internal support screens.

From Clients (borrowers viewing a shared link)

Engagement data:

• When and how many times a comparison link was viewed
• Which loan option was selected as a Borrower's Choice, with timestamp
• Detailed behavioral session data including: scroll depth, time spent viewing each module, specific interactions (scenario toggles, time horizon changes, PDF downloads, video plays, closing cost expansions, and tour interactions)
• Up to 50 sessions of engagement data are stored per comparison

We collect this engagement data to help brokers understand how their clients are interacting with their comparisons. This data is accessible to the broker who created the comparison.

From viewing a comparison, we do not collect:

• Any account credentials — clients do not create accounts
• Any financial information beyond what is displayed in the comparison the broker built
• Contact information. Viewing a comparison never asks for your name, email address or phone number. If you choose to fill in a request form on an open-house comparison, what you enter there is covered in “If you submit a request form” below.

If you submit a request form

Some open-house comparisons include an optional form to request a personalized quote. Nothing else on the page requires it.

What we collect: the information you enter — your name and email address, and, if you provide them, your phone number, buying timeline, and any notes — together with your IP address and browser user-agent, which we keep in order to detect abuse of the form.

Why we collect it: we collect it on behalf of the loan officer whose comparison you are viewing. We use it to deliver your request to them and to email you a confirmation that it arrived. That loan officer sees it in their LoanDeck account and can add their own notes to it.

Where it goes: your request is emailed to that loan officer, and a confirmation is emailed to you. If the loan officer has connected LoanDeck to other tools — a CRM, an automation platform such as Zapier, or their own webhook endpoint — your request is also sent to the destination they have chosen, at their direction. Once it arrives there it is governed by that service's terms and privacy policy rather than ours. We do not sell your information.

How long we keep it: until the loan officer deletes it or their account is deleted — see Section 6. You can ask us to delete it at any time using the contact details in Section 11; we may also need to ask the loan officer to remove their own copy.

Browser storage

We use browser sessionStorage to temporarily cache market rate data and AI entry results during your session. This data is stored locally on your device and cleared when you close your browser tab. It is not transmitted to our servers beyond the normal course of using the Service.

3. How We Use Your Information

To provide the Service:

• Create and manage your broker account
• Store and display the comparisons you build
• Generate shareable client links and PDFs
• Process mortgage statement uploads through AI extraction
• Generate AI-powered comparison summaries
• Provide rental estimate data for investment property analysis
• Answer your questions in the in-app help assistant
• Import loan data from a loan origination system you connect, and send comparison events to services you connect

To communicate with you:

• Send email notifications when your client views a comparison or makes a Borrower's Choice selection, per your notification preferences
• Send account-related emails such as email confirmation, password reset, and security alerts
• Send daily digest summaries of client activity if you have enabled that setting

To improve the Service:

• Analyze usage patterns to understand how brokers use LoanDeck
• Identify bugs and performance issues
• Develop new features
• Read support chat conversations to find where our help articles fall short, and write the topic summaries described above so we know which help article to write next
• Use aggregated and de-identified data derived from use of the Service to operate, maintain, secure, and improve it

We do not:

• Sell your information to third parties
• Use your data or your clients' data to train AI models
• Share your client data with other brokers or third parties outside of what is described in this policy
• Use your comparisons or client information for advertising

4. Third-Party Services We Use

LoanDeck uses third-party services to operate. Each has its own privacy policy governing how they handle data. We use services in the following categories:

Database and authentication providers

Store your account data, comparisons, templates, realtor records, and uploaded files securely. Row-level security policies ensure brokers can only access their own data.

Email delivery services

Send transactional emails including account confirmation, password reset, and comparison activity notifications.

AI processing services

Power AI features including the AI Loan Entry tool, mortgage statement data extraction, email summary generation, and the in-app help assistant. We use two AI providers: a primary provider and a fallback provider used when the primary is unavailable. Both providers process requests via API and do not use API request content to train their models, per their respective data processing terms.

When you upload a mortgage statement for extraction, the document contents are sent to one of these AI providers for processing. Mortgage statements may contain sensitive borrower financial information. We do not send client personally identifiable information to AI providers beyond what is contained in documents you choose to upload.

The help assistant sends your messages, and the text of our help articles, to the AI provider each time you send a message. If you paste document contents into the chat, those contents are sent to the provider along with your message.

Product analytics services

Help us understand how brokers use LoanDeck so we can improve the product. Analytics data may include usage events, feature interactions, device and browser information, IP address, and session recordings of the signed-in broker application as described in Section 2. On pages that do not require an account — including the comparison page a client opens from a shared link — nothing is sent to our analytics provider unless you accept analytics in the cookie banner, and no session recording is ever made there.

Hosting and infrastructure providers

Host the application and process web requests. May receive request logs and IP addresses.

Address lookup and mapping services

Power address autocomplete when you enter property locations.

Real estate and rental data providers

Supply market data including home price trends, rental rate estimates, and days on market displayed in location cards.

Mortgage rate data providers

Supply current mortgage rate data used to populate rate suggestions.

PDF generation services

Render comparison and flyer PDFs from your comparison data.

Video embedding services

Enable video previews when you add a YouTube, Vimeo, Loom, or similar video URL to a comparison.

Loan origination system integrations

Retrieve loan data from the LOS you connect, either directly or through an automation platform such as Zapier. Where an automation platform sits in the middle, the data passes through that platform and is subject to its privacy policy and to your own account settings there, including its record of past runs.

We do not sell your information to any third party. We share data with the service providers above only to the extent necessary to run the Service. Separately, we transmit data to services you connect, at your direction — see below.

Services you connect

Separately from the providers above, LoanDeck can send comparison events to services you choose to connect — a Zap, a CRM, or a webhook endpoint you supply. This is different in kind from the list above: you direct it, you choose the destination, and once the data arrives there it is governed by that service's terms and privacy policy, not ours.

When an event fires, the payload includes the comparison title, the client name you entered, the share link, the transaction type, the property address and MLS number if you added one, and for each loan option its label, loan type, rate, term, monthly payment, cash to close, and APR. It does not include uploaded documents, tax or income figures, or debt consolidation details.

Where a comparison includes an open-house request form, the event that fires when someone submits it also includes that person's name, email address, phone number, timeline and notes. This is the one outbound event that carries a prospective borrower's contact details, and it fires only when they have filled in the form themselves.

We require webhook destinations to use HTTPS. We keep a log of these deliveries, including the payload sent — see Section 6 for how long.

Subprocessors: A current list of the subprocessors we use to provide the Service is available on request at hello@loandeck.app.

5. Data Storage and Security

Your data is stored with our database provider, hosted in the United States. We implement the following security measures:

• All data in transit is encrypted using TLS/HTTPS
• Database access is protected by row-level security policies — brokers can only access their own data
• Passwords are never stored in plain text — authentication is handled by an industry-standard auth provider
• API keys and secrets are stored as environment variables, never in code

Support access: LoanDeck support can view a comparison's contents only when you explicitly grant access from within the app. Grants are limited to a single comparison, expire automatically after 7 days, and can be revoked at any time. Every support view is recorded in that comparison's activity history, visible to you. Separately, LoanDeck operators maintain infrastructure-level database access used solely for debugging, security, and operations.

Note on uploaded images: Profile images, logos, and property photos you upload are stored with publicly accessible URLs. This is necessary for them to display correctly in shared comparison links and PDF exports that are viewed by your clients. Do not upload images containing sensitive personal information.

Note on pasted image URLs: Where you supply a property photo by entering a URL rather than uploading a file, we store only the URL. The image itself stays on whatever server hosts it, and your client's browser loads it from there when they open the comparison — which means that server can see that the image was requested. When we generate a PDF or flyer we fetch the image once, server-side, and embed a copy in that document.

While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

Account data: Retained for as long as your account is active. You may request account deletion by contacting hello@loandeck.app or using the account deletion option in Settings. Upon deletion, your data will be removed within 30 days.

Comparisons: Retained until you delete them or request account deletion.

Open-house requests: A request submitted through the form on an open-house comparison is retained until the loan officer deletes it or their account is deleted. It is not pruned automatically.

Uploaded files: Retained until you delete them or request account deletion. This covers logos, headshots and property photos.

Feedback screenshots: Screenshots attached to a bug report or question through the Feedback button are stored privately and deleted automatically after 90 days. The report itself is kept, so the record of what was reported remains after its images are gone.

Session recordings: Retained for up to 30 days, then deleted. Deletion is not instantaneous, so a recording may persist for a short time past that window.

Support chat conversations: Retained for 90 days, then deleted automatically. The topic summaries described in Section 2 are deleted alongside the conversation they came from.

Usage logs: Retained for 12 months, then deleted automatically.

Digest queue: Records of client view activity queued for daily digest emails are deleted automatically 30 days after the digest is sent.

Integration activity logs: Records of events sent to services you connect are retained for 90 days, then deleted automatically. Each record includes the payload that was sent, described in Section 4, so it contains the client name and loan figures for that comparison.

7. Your Rights

Depending on where you are located, you may have the following rights:

California residents (CCPA):

• Right to know what personal information we collect and how we use it
• Right to delete your personal information
• Right to opt out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your rights

All users:

• Access your data by logging into your account
• Update or correct your information in Settings
• Request deletion of your account and associated data via Settings or by contacting hello@loandeck.app
• Opt out of analytics tracking via the cookie consent banner

To exercise any of these rights, contact us at hello@loandeck.app.

8. Cookies and Tracking

LoanDeck uses cookies and similar tracking technologies for:

Necessary cookies: Required for authentication and session management. Cannot be disabled.

Analytics: Used to understand how brokers use LoanDeck so we can improve the product. On the public site and on the comparison page a client opens from a shared link, analytics are off until you accept them in the cookie banner, and no session recording is made on those pages at any time. The banner is not shown inside the signed-in broker application, where account holders have agreed to these terms at signup; analytics and the session recording described in Section 2 run there by default.

Marketing cookies: Not currently used.

9. Children's Privacy

LoanDeck is a professional tool intended for licensed mortgage brokers. We do not knowingly collect information from anyone under 18 years of age. If you believe a minor has provided us with personal information, contact us at hello@loandeck.app and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will update the “Last Updated” date at the top of this page and, for material changes, notify you by email. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data:

Email: hello@loandeck.app
Website: https://loandeck.app

LoanDeck LLC
Long Beach, California