Privacy Policy

Access Loan LLC ("Access," "we," "us," or "our") is a mortgage technology company, not a lender or credit decision-maker. This Policy applies when Access determines why and how personal information is processed through our public website, demo gate, public walkthrough, sales, marketing, support, security, contracting, and business operations. In those contexts, Access acts as a controller or business where those terms are used by law.

Customer-branded sandboxes, implementations, portals, and production environments ("Customer Environments") are separate. The customer lender determines why and how applicant and borrower information is processed, and Access generally acts as its service provider or processor under a written agreement. The customer's privacy notices govern its borrower relationship. This Policy is not the customer's borrower-facing or GLBA privacy notice and does not expand Access's rights in Customer Data.

Information you provide. We may collect your name, business email address, phone number, company, role, business website, mailing or property address, address search queries and autocomplete results, one-time-passcode and verification information, demo or meeting requests, product interests, marketing choices, messages, feedback, support requests, and customer representative, account, billing, or contract information.

Information collected automatically. We may collect IP address, approximate location derived from IP, device type, browser, operating system, referring and viewed pages, clicks, timestamps, source or campaign information, session and verification events, error and security logs, and cookie or local-storage identifiers.

Information from other sources. We may receive information from CRM, scheduling, email, phone, SMS, hosting, security, support, and contact-verification providers; referral partners and event organizers; public business sources; and customer organizations.

Demo gate. The gate may collect real business contact and verification information. We use our CRM and communications providers to verify access, schedule or provide the demo, manage the business relationship, and send marketing only according to your choices and applicable law.

Mortgage walkthrough. The walkthrough combines synthetic mortgage scenario data with real business contact and company information provided at the demo gate. Access may use that gate information to personalize demo branding and prefill fields, including fields displayed as borrower contact fields. Those fields are demonstrations only and do not create or submit a loan application. Address autocomplete is provided through Google Maps Platform and may transmit address queries and related technical information to Google. Other walkthrough inputs and selected filenames may remain in browser storage, and selected file contents are not uploaded. The walkthrough does not call live lender, pricing, credit, valuation, title, document, artificial intelligence, CRM, or loan-origination systems. We may still collect ordinary device, access, and security information described above.

You may enter your own business contact information requested at the demo gate and ordinary address information solely to use demo autocomplete. Do not enter information about another real applicant, borrower, consumer, or transaction; Customer Data; customer-confidential or production information; credentials; consumer reports; Social Security numbers; government identification; financial account information; or real documents into the walkthrough.

When a customer uses the Access platform, Access may process information about applicants, borrowers, customer users, transactions, documents, communications, workflows, and integrations on the customer's documented instructions. The customer determines what is collected and why and remains responsible for its notices, authorizations, permissible purposes, lending activity, decisions, official records, and privacy requests.

Access processes Customer Data only to provide, secure, maintain, and support the contracted services; follow customer instructions; comply with law; and protect legal rights. Access does not use Customer Data for Access marketing or third-party advertising. Access and its service providers and subprocessors do not use Customer Data, including documents, extracted text, prompts, outputs, feedback, or metadata, to train, retrain, fine-tune, or improve any general-purpose, foundation, or cross-customer model. Customer Data may be processed only to provide and support the contracted services for that customer and for the other limited purposes stated in this paragraph. Unless the customer agreement states otherwise, the customer's designated loan-origination system is the official system of record, and Access retains only service data, logs, and evidence required by contract or law. Contracted AI-assisted features support customer personnel; Access does not make final credit decisions. Feature-specific processing, integrations, retention, and subprocessors are governed by the customer agreement. Individuals should ordinarily direct requests about Customer Data to the customer lender.

We may disclose personal information:

We require service providers to protect information and use it only for authorized services. Access discloses Customer Data only to the applicable customer and authorized users, customer-directed integrations, contracted subprocessors providing the services, a successor in a corporate transaction subject to applicable customer-contract obligations, and recipients permitted or required by law or reasonably necessary to protect rights, safety, and security. Access does not disclose Customer Data to financing sources or other third parties for their independent business, marketing, advertising, or analytics purposes.

We use cookies, local storage, logs, and similar technologies for sessions, verification, preferences, security, analytics, and first-party attribution. The demo may store gate contact details, company information, verification status, marketing choices, related record identifiers, and walkthrough state in browser local storage until you clear it or Access resets it. Your browser may allow you to block or clear these technologies, although some features may not work properly.

Access does not sell personal information for monetary or other valuable consideration, share personal information for cross-context behavioral advertising, or process personal information for targeted advertising. Access does not sell borrower data or leads or sell or share SMS consent data for third-party marketing. We do not permit service providers or subprocessors to use personal information for their own advertising or marketing. If these practices change, we will update this Policy and provide any required notice and choices before the change applies.

We may contact you about a request, verification, demo, meeting, account, customer relationship, support matter, security issue, or legal notice. You may unsubscribe from marketing emails. If you separately consent to marketing texts, message and data rates may apply, consent is not a condition of purchase, and you may reply STOP to opt out. We may retain suppression records and continue sending nonmarketing communications.

A customer may use the platform to send borrower communications under the customer's direction. The customer determines the recipients, content, purpose, timing, sender identity, and legal basis; Access processes the related information as a service provider under the customer agreement.

We retain Access-controlled information for as long as reasonably necessary to fulfill requests, manage the relationship, maintain security and records, comply with legal and contractual obligations, resolve disputes, and enforce agreements. We may retain marketing suppression records as needed to honor your choices.

Customer Data is retained, returned, or deleted under the applicable customer agreement and customer instructions. When information is no longer needed, we delete or deidentify it, subject to legal holds and backup cycles.

We use administrative, technical, and physical safeguards designed to protect personal information, including controls appropriate to the information and services involved. No transmission or storage method is completely secure, and we cannot guarantee absolute security. Production security commitments are stated in the applicable customer agreement.

Depending on your state, our role, and applicable exemptions, you may have rights to access, correct, delete, or obtain a copy of personal information; opt out of certain sale, sharing, targeted advertising, or profiling; limit certain uses of sensitive information; withdraw consent; appeal a denied request; and receive equal service when exercising a right.

To submit a request about information Access controls, use our contact formand identify it as a privacy request. We may verify your identity and authority. Authorized agents may submit requests where permitted by law. For Customer Data, contact the applicable customer lender first; Access will assist the customer as required by contract or law. If Access denies your privacy request, you may appeal by using the same contact form, identifying the submission as a "Privacy Appeal," and providing information sufficient to identify the original request. We will review and respond within the period required by applicable law. If an appeal is denied, we will provide any regulator complaint mechanism required by law. You may withdraw consent through the contact form. Marketing email consent may also be withdrawn through the unsubscribe link, and marketing text consent may be withdrawn by replying STOP.

The Public Services are intended for adults acting in a business or professional capacity and are not directed to anyone under 18. We do not knowingly collect personal information directly from a person under 18 through the Public Services.

The Public Services may link to or incorporate third-party sites or tools. Their privacy practices apply. Address autocomplete in the Public Demo is provided by Google Maps Platform. Google may process address queries and related technical information under the Google Privacy Policy and Google Maps Platform Terms. Access is based in the United States, and information may be processed in the United States and other locations where our service providers operate. Customer Data locations and access restrictions are governed by the applicable customer agreement.

We may update this Policy prospectively. The effective date above identifies the current version. If a change materially affects how we handle personal information, we will provide reasonable notice through the Public Services, email, account communication, or another appropriate channel. We will obtain any additional consent required by law.

Access Loan LLC | Attention: Privacy | 400 E. Pratt Street, 8th Floor, Baltimore, MD 21202
Online: https://www.access.loan/contact | Website: https://www.access.loan