Privacy Policy

1. Information We Collect

Account Information. When you register, we collect information such as your name, email address, company name, phone number, mortgage broker license information, and billing details.

Client Data You Upload. As part of using the Service, you upload or import data about your past clients — which may include names, contact information, loan terms, property information, interest rates, loan origination dates, and related mortgage details. We process this data solely to provide the Service to you (see Section 2).

Payment Information. Subscription payments are processed by our third-party payment processor, Stripe. We do not directly store your full payment card details — Stripe collects and processes that information subject to its own privacy policy and PCI-DSS security standards.

Usage and Technical Data. We automatically collect certain technical information when you use the Service, including IP address, browser type, device information, log data, and how you interact with the Service (e.g., pages visited, features used).

Cookies and Similar Technologies. We may use cookies and similar tracking technologies to operate the Service, remember your preferences, and understand usage patterns through analytics tools.

2. How We Use Information

We use the information described above to:

• Provide, operate, and maintain the Service, including analyzing Client Data to surface potential refinance, HELOC, and ARM-reset opportunities for you;
• Process subscription payments and manage your account;
• Communicate with you about your account, updates, and support requests;
• Monitor, analyze, and improve the performance, security, and functionality of the Service;
• Detect, prevent, and address fraud, abuse, security incidents, or technical issues;
• Comply with legal obligations.

We do not sell Client Data or Account Information to third parties, and we do not use Client Data for marketing purposes unrelated to providing the Service to you.

3. How We Share Information

We share information only in the following circumstances:

Service Providers. We use trusted third-party vendors to operate the Service, including: Stripe (payment processing), cloud hosting providers (to store and process data securely), and analytics providers (to help us understand Service usage). These providers are contractually restricted to using information only to perform services on our behalf.

Legal Requirements. We may disclose information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers. If 2nded is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to standard confidentiality protections.

With Your Consent. We may share information for other purposes with your explicit consent.

4. Broker Responsibility for Client Data

If you are a Broker uploading Client Data to the Service, you are responsible for ensuring you have the legal right and any necessary consents to share that data with 2nded, in compliance with applicable law, including the Gramm-Leach-Bliley Act and applicable state privacy and financial-privacy laws. This Privacy Policy describes how 2nded handles data it receives — it does not replace your own obligations to your clients regarding notice and consent.

5. Data Retention

We retain Account Information and Client Data for as long as your account is active or as needed to provide the Service. If you cancel your subscription, we will retain data for a limited period in accordance with our standard retention practices, after which it will be deleted or anonymized, except where we are required to retain it for legal, tax, or accounting purposes.

6. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, alteration, or disclosure, including encryption in transit (TLS), encryption at rest, role-based access controls, and secure hosting infrastructure. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Privacy Choices and Rights

Depending on your state of residence, you may have certain rights regarding your personal information, which may include the right to access, correct, delete, or obtain a copy of your information, and the right to opt out of certain uses of your information. If you would like to exercise any of these rights, contact us using the information in Section 11, and we will respond in accordance with applicable law. This Policy is intended to apply broadly and in a manner consistent with general U.S. state privacy law principles (such as those reflected in the California Consumer Privacy Act) as a matter of good practice, even where a specific law may not strictly apply to your circumstances.

8. Children's Privacy

The Service is intended for use by licensed mortgage professionals and is not directed to individuals under 18. We do not knowingly collect personal information directly from children.

9. Third-Party Links

The Service may contain links to third-party websites or services. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you interact with.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice (such as by email or an in-app notice) before the changes take effect. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise any privacy rights, please contact us at: