Privacy Policy
Your privacy is important to us. Learn how we collect, use, and protect your information.
We are committed to maintaining the confidentiality and security of your personal data.
Effective Date: October 14, 2026
Important Notice
We encourage you to carefully review this privacy policy before using our website or services. If you do not agree with the terms outlined herein, please discontinue use of this website and refrain from accessing our services.
Introduction & Scope
This privacy policy explains how Ratespedia ("Company", "we", "us", or "our") collects, utilizes, shares, and safeguards your personal information. It also outlines your rights concerning that data and how you can exercise them.
This policy applies to information gathered through our website ("Website"), directly from you, or from authorized third-party sources in connection with providing our products and services (collectively, "Services"). Our Services are designed exclusively for residents of the United States who are 18 years of age or older.
By accessing or using this Website or our Services, you confirm that you have read, understood, and agree to be bound by this privacy policy as well as our Terms of Use.
Ratespedia Mobile App
This policy also covers the Ratespedia app for Android and iOS, operated by Ratespedia LLC. Anyone may use its public mortgage calculators and open the Ratespedia website application inside the app without an account. The separate banker workspace remains limited to staff-approved personal banker accounts, and the app does not offer public account registration. For banker access information, call (855) 942-7283.
The public application asks about your financing goal, property type and use, address and ZIP code, estimated property value and mortgage balance, current FHA or VA loan status, estimated credit-score range, veteran or active-military status, name, email address and phone number. We use this information to validate the property address, process and respond to your mortgage-information request, send application notices, prevent abuse, document your consent and connect you with Ratespedia and the Platform Partners or parties identified in the consent shown before submission. The application is a request for information and follow-up; it is not a loan approval or rate lock.
The hosted application uses Cloudflare Turnstile for fraud and bot prevention, Google Address Validation for the address you provide, Supabase and our hosting providers for application processing and storage, and our email provider for support and applicant notices. It also uses ActiveProspect TrustedForm to document consent. When the application opens, TrustedForm records and retains the webpage content and your interactions with the form, which may include clicks, scrolling, characters entered in form fields, IP address, page URL, browser and operating-system information, and a consent-certificate identifier. Review the TrustedForm Privacy Notice for its data and retention practices.
The hosted application also uses our Plausible service and Ratespedia operational event logging to measure page and application use and diagnose failures. Those services may process page URL and source information, page views, outbound-link clicks, submit outcome, session or visitor identifiers, IP address, browser, operating system, device platform and screen or viewport size. Ratespedia operational event logging does not include the applicant answers or TrustedForm certificate. The mobile app does not contain advertising SDKs.
The app does not persist public application answers in native app storage, but the website, Ratespedia systems and the providers described above process or retain information transmitted through the hosted application. Submitted application information and consent evidence may be retained for legal, compliance, fraud-prevention, request-fulfillment and business-record purposes under the retention standards in this policy. To ask about, access or request deletion of a public application, contact privacy@ratespedia.com or call (855) 942-7283. A deletion request may not remove records that Ratespedia or another recipient must retain for legal or compliance purposes, or copies independently held by a Platform Partner or other recipient.
We process your account email, authentication credentials and account identifiers to sign you in and enforce your active membership, organization permissions and current User Agreement. Searches use the mail reference you enter. CRM delivery processes the required phone number and the authorized contact, property and mortgage information for the record. We send records to your organization's configured CRM receiver when you request delivery. After confirmed delivery, you can share a CSV with an app or destination you choose; that destination's privacy practices apply to the copy you share.
Ratespedia uses Supabase for authentication and data processing and our hosting providers to run the portal. Connections use HTTPS. CRM receiver credentials remain on the server. The app stores an encrypted sign-in session using a device-protected key and a minimal pending-delivery request marker. It does not save customer records in persistent app storage, and it clears displayed customer details when backgrounded. Exported files and copies held by your CRM or chosen sharing destination are outside that app storage protection.
Our staff audit records include account and organization identity, timestamps, action and response codes, request identifiers, platform and app version for security, troubleshooting and operational accountability. The dedicated banker-workspace mobile audit does not contain customer record payloads, entered phones, CRM credentials or authentication tokens. Authentication and server providers may also process technical connection information such as IP addresses and security logs.
To request deletion of your personal banker account, open Account in the app and choose Request account deletion, or use our public account-deletion instructions. Ratespedia staff verify ownership and review the request. We retain agreement, billing, security and operational evidence where needed for legal obligations, fraud prevention or legitimate business purposes, as described in this policy. Removing your account does not remove independently held CRM exports or your organization's records. Contact support@ratespedia.com or (855) 942-7283 for assistance.
Categories of Personal Information We Collect
Personal information refers to any data that identifies, relates to, describes, or can be associated with you. Below are the types of personal information we may collect:
Personal Identifiers
This includes your full name, telephone or mobile number, email address, residential or mailing address, unique personal identifier, online identifier, IP address, account credentials, username, social media handles, physical characteristics or description, signature, and other similar identifying information.
Protected Classification Data
Where applicable and legally permissible, this may include age, disability status (mental or physical), sex, sexual orientation, gender identity, medical conditions, marital status, military or veteran status, and other classifications protected under California or federal law.
Device & Network Activity Information
We automatically collect technical information when you visit our Website, including your device identifier, internet protocol (IP) address, browser type and version, browsing patterns, search history, pages viewed, links clicked, time spent on pages, and information about your interactions with our Website features, forms, and advertisements.
Commercial & Financial Information
This encompasses records of personal property, financial account information, credit history, products or services purchased or considered, transaction history, and purchasing or consumption patterns and preferences.
Professional & Employment Data
This includes current and past employment status, employer information, job title and description, educational background, professional licenses, certifications, qualifications, and relevant business information.
Behavioral Inferences
We may create profiles based on your preferences, characteristics, psychological trends, predispositions, behavior patterns, attitudes, intelligence, abilities, aptitudes, and other inferred data points derived from your interactions with our Services.
Usage & Interaction Data
This automatically collected information includes the specific features you use, links you access, pages you visit, advertisements you view or interact with, the date and time of your visits, referring and exit pages, session duration, and navigation patterns. This data may be gathered through cookies, session replay software, heat mapping tools, and similar tracking technologies.
Communications & Correspondence
We may record, monitor, and retain all communications between you and our Company, including phone calls, text messages, SMS communications, chat transcripts, email correspondence, form submissions, and other written or electronic interactions. By communicating with us through any channel, you expressly consent to such recording and retention for quality assurance, training, legal compliance, and business purposes.
Note: Any automatically collected information that can directly or indirectly identify you is treated as personal information under this policy.
How We Collect Your Information
We obtain personal information from several sources, including:
Directly From You
Information you provide when you visit our Website, complete forms, request information about our Services, sign up for newsletters or promotions, participate in surveys or contests, submit testimonials or reviews, communicate with customer support, or engage with our marketing materials through any channel.
Third-Party Sources
We may receive your information from marketing partners, data analytics providers, lead generation companies, business partners, affiliated companies, authorized service providers, public databases, social media platforms, and other third parties who have obtained appropriate permissions to share your information with us for business purposes.
Automated Collection Technologies
Our Website employs various technologies including cookies, web beacons, tracking pixels, clear gifs, analytics tools, and similar mechanisms that automatically collect information about your device, browsing behavior, and interactions with our Website.
Tracking Technologies & Cookies
Our Website utilizes cookies, pixels, and other tracking technologies to enhance your browsing experience, remember your preferences, analyze Website performance, and deliver relevant content and advertisements.
What Are Cookies?
Cookies are small text files placed on your device that store information about your preferences and activities. While you have the option to refuse cookies through your browser settings, please note that disabling cookies may limit certain features and functionality of our Website.
Types of Cookies We Use:
Essential Cookies (Required)
These cookies are critical for the basic operation of our Website and Services. They enable core functionality such as security, network management, and accessibility. The Website cannot function properly without these cookies.
Functional Cookies (Optional)
These cookies remember your preferences and choices (such as language settings, region, or customization options) to provide enhanced, personalized features during return visits. You may disable these cookies, though doing so may affect your user experience.
Analytics Cookies (Optional)
These cookies collect aggregated, anonymized data about how visitors use our Website, including which pages are most popular, how users navigate the site, and which content is most effective. This information helps us improve our Website design, content strategy, and overall user experience.
Most modern web browsers allow you to control cookies through their settings. You can set your browser to reject cookies entirely, accept only certain cookies, or notify you when a cookie is being sent. Additionally, you can manage site-specific cookie permissions and clear existing cookies and browsing data at any time.
Please note: Our Website does not currently respond to "Do Not Track" signals or similar global privacy control mechanisms from web browsers, as we only track users for aggregate statistical analysis and essential Website operations.
Communication Recording Technologies
We may record and retain calls and the contents of your interactions with us, including interactions on Our webpages, chat transcripts, web session use, or other written/electronic communications between you and Us. By communicating with Us, you consent to receive electronic communications and the recording and retention of all communications. You acknowledge, understand and consent to third party service providers facilitating in the recordation and storage of these communications.
For more information about ActiveProspect TrustedForm's data use, collection and retention practices, review the TrustedForm Privacy Notice.
How We Use Your Personal Information
We may use your personal information for the following business purposes:
- Service Delivery & Maintenance: To provide, operate, maintain, improve, and analyze our Website and Services. This includes monitoring usage patterns, identifying technical issues, and conducting routine business operations. This use is essential to our Services, and you cannot limit this sharing unless you discontinue using our Website.
- Request Fulfillment: To respond to your inquiries, questions, service requests, appointment scheduling, and email communications. You cannot limit this use unless you refrain from submitting contact or inquiry forms on our Website.
- Communications & Marketing: To communicate with you about our Services, promotional offers, newsletters, updates, and informative content via email, telephone, SMS, push notifications, or other electronic communication methods. This is necessary to process your inquiries and fulfill your consent. You may limit these communications by revoking your consent or unsubscribing from marketing messages.
- Record Management: To create, maintain, and manage your customer records, including purchase history, service interactions, communications log, preferences, and account information. This is required for our business operations and service delivery. You cannot limit this use unless you do not make inquiries, schedule appointments, or make purchases.
- Technical Support & Optimization: To investigate and diagnose technical problems, manage our server infrastructure, optimize Website performance, and enhance the overall quality and functionality of our Services.
- Security & Legal Compliance: To protect the safety, security, property, and legal rights of our Services, users, employees, and third parties; prevent, detect, and investigate fraud and unauthorized access; manage our technology infrastructure and cybersecurity; and comply with applicable laws, regulations, industry standards, contractual obligations, legal processes, and internal policies.
- Business Transactions: To facilitate, evaluate, or complete corporate transactions such as mergers, acquisitions, asset sales, financing, bankruptcy proceedings, or similar business activities.
How We Share Your Personal Information
We may disclose your personal information to the following categories of recipients:
Authorized Service Providers
We engage trusted third-party companies and individuals ("Service Providers") to perform business functions and services on our behalf under strict contractual obligations. These Service Providers support various aspects of our operations, including: data storage and management; Website hosting, security, and maintenance; customer relationship management; appointment scheduling and call center services; email, postal mail, and SMS delivery; marketing campaign management and analytics; payment processing; fraud detection and prevention; customer surveys and research; technical support; and customer service operations. Service Providers are contractually prohibited from using your information for purposes other than providing services to us.
Social Media Platforms
Our Website may incorporate features, plugins, widgets, buttons, and tools from social media platforms and networks (such as Facebook, Twitter, LinkedIn, etc.). These integrations may enable information collection and sharing between us and those platforms. Please note that these platforms' use of your information is governed by their own privacy policies, not ours. We encourage you to review the privacy policies of any social media platforms you interact with through our Website.
Public Forums & User Content
Certain areas of our Website may offer public forums, comment sections, review platforms, or other interactive features where users can post content. Any information you choose to submit or post in these public areas will be accessible to other users and the general public. Please exercise caution and avoid posting sensitive personal information in public forums.
Legal & Regulatory Authorities
We may disclose your information when required or permitted by law, including in response to subpoenas, court orders, warrants, government investigations, regulatory inquiries, or legal processes; to comply with applicable laws and regulations; to establish, exercise, or defend our legal rights and interests; to protect the rights, property, and safety of our Company, employees, agents, affiliates, users, and the public; to detect, prevent, and address fraud, security breaches, or technical issues; and to enforce our policies, terms of service, and user agreements.
Business Transfers & Transactions
In the event of a merger, acquisition, reorganization, asset sale, financing, bankruptcy, or other business transaction, we may disclose or transfer your personal information to prospective purchasers for evaluation purposes and to successor entities or acquiring parties. Any such successor entity may continue to use your information in accordance with this privacy policy or as otherwise disclosed to you at the time of the transaction.
Important Notice Regarding Mobile Information
Your mobile phone number and text messaging information will never be sold, rented, or transferred to third parties for their promotional or marketing purposes. All text messaging opt-in data and consent information is kept strictly confidential and will only be shared with vendors, carriers, and platform providers to the extent absolutely necessary to deliver our text messaging services to you.
Marketing Communications & Opt-Out Rights
We, or our authorized Service Providers acting on our behalf, may use your contact information to send you newsletters, marketing materials, promotional offers, and other information that may be of interest to you via email or other electronic communication methods.
Email Unsubscribe
You have the right to opt out of receiving marketing emails at any time. To unsubscribe from promotional email communications, you may:
- Click the "Unsubscribe" link at the bottom of any marketing email
- Send an email to: unsubscribe@ratespedia.com
- Contact us using the information provided at the end of this policy
SMS/Text Message Opt-Out
Standard data and messaging rates may apply to text messages, and message frequency will vary based on your interactions with our Services. If you no longer wish to receive text messages from us, you may opt out at any time by:
- Texting any of the following keywords to our short code: STOP, QUIT, END, CANCEL, or UNSUBSCRIBE
- You will receive a one-time confirmation message confirming your successful unsubscription
For assistance with text messaging, please email: info@ratespedia.com
Please note that even if you opt out of marketing communications, we may still send you transactional, service-related, or administrative messages that are necessary for the operation of your account or our Services.
Data Security
The security and confidentiality of your personal information is of paramount importance to us. We implement and maintain reasonable technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, use, alteration, disclosure, loss, or destruction.
Our security practices include, but are not limited to: encryption of data in transit and at rest; secure socket layer (SSL) technology; firewalls and intrusion detection systems; access controls and authentication mechanisms; regular security assessments and audits; employee training on data protection; and incident response procedures.
Important Security Disclaimer
However, please be aware that no method of electronic transmission or storage is completely secure or error-free. Despite our commercially reasonable efforts to protect your personal information, we cannot guarantee its absolute security against all possible threats. We cannot warrant that unauthorized third parties will never be able to defeat our security measures or misuse your information. You transmit information to us at your own risk.
International Data Transfers
Your personal information may be transferred to, processed, and stored in countries other than your country of residence, including the United States, where data protection laws may differ from those in your jurisdiction and may not provide the same level of protection.
By submitting your personal information to us or using our Website and Services, you expressly acknowledge and consent to the transfer, storage, processing, and handling of your information in the United States and other countries where our Service Providers operate. We take appropriate measures to ensure that your information receives adequate protection in accordance with this privacy policy, regardless of where it is processed.
Data Retention
We retain your personal information only for as long as reasonably necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law.
Our retention periods are based on several factors, including but limited to: the nature and sensitivity of the information and the purposes for which we collected it.
We will retain and use your personal information to the extent necessary to: comply with our legal obligations and regulatory requirements; resolve disputes and claims; enforce our legal agreements, policies, and terms; prevent fraud and abuse; and protect our legal rights and interests. When information is no longer needed, we will securely delete or anonymize it in accordance with our data retention and destruction policies.
Children's Privacy
Our Website and Services are not intended for, nor directed to, individuals under the age of 18. We do not knowingly collect, solicit, or maintain personal information from anyone under 18 years of age. If you are under 18, please do not use our Website, submit any information to us, or attempt to register for our Services.
If you are a parent or legal guardian and believe that your child under 18 has provided us with personal information without your consent, please contact us immediately using the contact information provided below. Upon verification, we will promptly take steps to delete such information from our systems and terminate any associated accounts.
If we discover that we have inadvertently collected personal information from a child under 18 without proper parental consent, we will delete that information as quickly as possible and take appropriate measures to prevent future unauthorized access.
Third-Party Websites & Links
Our Website may contain links to third-party websites, applications, services, or resources that are not owned, operated, or controlled by us. We provide these links for your convenience and informational purposes only.
This privacy policy applies solely to information collected by our Website and Services. When you click on a third-party link and leave our Website, you will be subject to that third party's privacy policy and terms of use. We strongly encourage you to carefully review the privacy policies and terms of every website you visit and every service you use.
We have no control over, do not endorse, and assume no responsibility for the content, privacy policies, practices, products, services, or actions of any third-party websites or services. We are not responsible for how third parties collect, use, disclose, or secure your information. Your interactions with third-party websites and services are at your own risk.
Changes to This Privacy Policy
We reserve the right to modify, update, or revise this privacy policy at any time to reflect changes in our practices, technologies, legal requirements, business operations, or other factors. Any changes will become effective immediately upon posting the updated policy on this page, as indicated by the "Effective Date" at the top of this document.
We encourage you to review this privacy policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of our Website or Services following the posting of changes constitutes your acknowledgment and acceptance of those changes.
If we make material changes that significantly affect your privacy rights or how we handle your personal information, we will provide additional notice to you through prominent placement on our Website, email notification (if we have your email address), or other appropriate means prior to the changes taking effect, as required by applicable law.
Contact Us
If you have any questions, concerns, comments, or requests regarding this privacy policy, our data practices, or how we handle your personal information, please don't hesitate to contact us:
We will make every effort to respond to your inquiry in a timely manner, typically within 30 days of receipt.