Privacy Policy

Our Commitment to Privacy

Loan Fox CRM is designed from the ground up with privacy and security as core principles. We handle mortgage professional data with the same care we expect for consumer financial data — because that's exactly what it is.

What We Collect

We collect only the data you enter:

• Loan officer account information (name, email)
• Borrower contact records you create and manage
• Loan data you enter for pipeline tracking
• Activity logs and tasks you create
• LO profile information you provide

What We Never Do

• We never sell your data. Not to anyone. Ever.
• We never share your data with third parties for marketing or analytics
• We never use your borrower data to train AI models
• We never expose your API keys or credentials to browser code

AI Lead Scoring

When you use the Lead Scorer feature, anonymized lead characteristics are sent to the Anthropic Claude API for analysis. Please note:

• Lead data is processed in real-time and not stored by Anthropic for model training
• You may use initials or pseudonyms — real names are not required
• Session data is isolated — one user's data is never accessible by another
• Scores are advisory only and do not constitute credit decisions under ECOA or the Fair Housing Act

Security

• All data is encrypted in transit using TLS 1.2+
• Data at rest is encrypted using AES-256
• Row-level security (RLS) ensures each LO can only access their own records
• Sensitive fields (SSN last 4, DOB) are encrypted at the application level
• Authentication uses industry-standard JWT tokens with short expiration

GLBA-Conscious Design

Loan Fox CRM is designed with the Gramm-Leach-Bliley Act (GLBA) in mind. While Loan Fox CRM is a tool for mortgage professionals (not a financial institution itself), we apply GLBA-aligned data protection principles throughout the application:

• Financial information is treated with the highest level of care
• Access is strictly limited to authenticated, authorized users
• Admin impersonation is logged and clearly visible at all times
• Data isolation is enforced at the database level

Data Retention & Deletion

Your data is retained as long as you have an active account. Loan officers can delete individual contacts, loans, and activities at any time. Account deletion requests can be submitted through your administrator.

Contact

Questions about this policy or your data? Contact your account administrator. Loan Fox CRM is a private, white-label application — your admin is your primary point of contact for data-related inquiries.