Privacy Policy

Effective Date: October 2025

Last Updated: September 29, 2026

1. Overview

This Privacy Policy describes how HOMPWR, LLC ("Hompwr," "we," "us") collects, uses, stores, and discloses information when you use our website and platform (the "Service"). Hompwr is a California company. The Service is offered in the United States and is not directed to people located outside the United States.

Two groups of people are covered by this policy, and they are not the same:

  • Users: loan officers and company administrators who create or are invited to an account.
  • Clients: borrowers and other consumers whose information a user submits, or who view a quote or an approval a user created. A client does not have an account.

If you are a client, start with section 13. The loan officer or company who sent you the quote decides what goes in it. Hompwr hosts the Service they use.

2. Information we collect

Account information

  • Name, email address, phone number, company name, and role.
  • Login credentials. We store passwords in a protected form. We do not ask you to send us your password by email.
  • Billing contact details. Subscription cards are processed by Stripe. We do not store full payment card numbers.

Information users submit about clients

  • Contact and deal details a user enters, such as a client's name and the subject property address.
  • Quote assumptions, scenarios, notes, and approval-document text.
  • Quote attachments a user chooses to add (PDFs, images, videos, and links). Anyone with the quote link can view those attachments.
  • Mortgage-statement files a user uploads for the optional extraction feature described in section 4. We use that file transiently to extract a short list of values.

Messages

  • Text messages the Service sends to a user's own phone, such as a quote link the user asked us to text to them. These come from a telephone number Hompwr controls. We process the message content and metadata, such as the user, the time, and the user's number.
  • Email a user sends through the Service, and related delivery metadata.

Usage information

  • Device and browser data, log files, cookie identifiers, and product-usage events.
  • Security logs, such as sign-in time and the user who exported or shared a quote.

We do not ask users to submit consumer Social Security numbers, consumer credit reports, full financial account numbers, or dates of birth. Users are instructed not to put those items in a quote, an attachment, an approval, or a message.

3. Information users must not upload

If a user uploads a prohibited file anyway, we do not review it before it is stored. It is stored as that user's content. It may be visible to anyone with the quote link until it is removed. We do not have a duty to find prohibited files, and we do not use a Social Security number, full account number, credit report, or date of birth as our own data if one is uploaded.

If you are the person described in a file, or you believe a link contains this kind of information, email [email protected]. After we confirm the report, we will disable access to that file. The user who uploaded it remains responsible for the upload and for any notice their company or the law requires them to give. We may suspend the account and keep logs needed to document what happened.

4. How we use information

  • Provide, secure, and support the Service, including authentication and integrations a user turns on.
  • Host quotes and approval documents and show them to people the user shares them with.
  • Send text messages to a user's own phone, and email a user initiates.
  • Extract a limited set of values from a mortgage statement a user uploads: interest rate, monthly escrow dues, monthly interest amount, monthly principal amount, payment due date, property address, remaining balance, and total payment due. We use those extracted values to prefill the user's calculators. Beyond the transient processing required to extract them, we do not keep the statement image, raw extraction text, or, from that upload, the consumer's name, full account number, Social Security number, or date of birth.
  • Bill subscribers and communicate about the account, support, and policy changes.
  • Improve the Service and understand how it is used.
  • Create deidentified or aggregate information as section 5 describes.
  • Enforce our terms, prevent abuse, and comply with law.

We do not use user content, client information, statement images, message content, or extracted values to train machine-learning models.

Artificial intelligence and automated processing

We use artificial intelligence and machine-learning services from Google Cloud and OpenAI for these features:

  • Fee suggestions. When a user asks for an AI suggestion on a fee name, or imports fees from a Loan Estimate or Closing Disclosure, Google Cloud Vertex AI (Gemini models) suggests a fee category and whether the fee counts toward APR. We send only the fee name and whether the quote is a purchase or a refinance. Before we send it, we remove anything that looks like a Social Security number, email address, phone number, or account number.
  • Document reading. Google Cloud Document AI reads a mortgage statement, Loan Estimate, or Closing Disclosure a user uploads, to extract the values the user asked for.
  • Address standardization. OpenAI standardizes a property address, such as one read from a mortgage statement, into street, city, state, and ZIP.
  • Support. OpenAI helps route a support request a user sends us to the right team.

Under their terms for these services, Google Cloud and OpenAI do not use this information to train their models, and we have not given either of them permission to. We do not send borrower income, asset, or credit information to these services.

Fee-name categorization is written onto the user's fee template, and the user can change the category and the APR setting. Values read from an uploaded Loan Estimate, Closing Disclosure, or mortgage statement are shown for review before they are used. AI output is not verified and is not a compliance determination. AI does not make or influence underwriting, credit, or loan-pricing decisions. A fee's APR setting changes the APR a quote shows once that fee is on the quote.

We keep the fee name submitted for a suggestion, and the model's response, for 90 days. After that we remove them and keep only a one-way hash of the fee name and the resulting classification. Questions about how we use AI can be sent to [email protected].

Names and property addresses a user types into a contact, quote, or approval are kept as part of that user's content. That is separate from a statement image, which is not kept after extraction.

5. Deidentified and aggregate information

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

We may in the future deidentify or aggregate information so it cannot reasonably be used to infer information about, or be linked to, a particular consumer or household. We reserve the right to use and disclose that deidentified or aggregate information for analytics, benchmarking, and industry reporting, including for a fee. We do not currently sell or license that information.

If we do use deidentified information, we will:

  • Take reasonable measures so it cannot be associated with a consumer or household;
  • Maintain and use it in deidentified form, and not attempt to reidentify it, except to test whether our deidentification process works; and
  • Contractually require any recipient to do the same.

A property-level record that can reasonably be linked to a person or household is still personal information. We will not treat that record as deidentified. "Aggregate" in this policy means information about a group, from which individual identities have been removed, that is not reasonably linkable to a consumer or household. It does not mean a list of individual files with the names removed.

6. When we disclose information

We disclose information in these situations:

  • People the user shares with. Anyone with a quote link can view that quote and its attachments. A user may also send an approval document or an email to a recipient the user chooses.
  • The user's company. Administrators on a company or team account can see account, membership, billing, and branding information for that account.
  • Systems the user connects. If a user connects a CRM or similar system, we send the contact and deal information the user selects to that system. The other system's practices apply after the transfer. The user is responsible for having authority to send the information there.
  • Service providers. We use vendors to host the Service (Vercel, and Google Cloud and Firebase), process payments (Stripe), deliver text messages (Twilio) and email (SendGrid, Customer.io), read uploaded documents (Google Cloud Document AI), suggest fee classifications (Google Cloud Vertex AI), standardize addresses and route support requests (OpenAI), return property and closing-cost data for an address, and provide analytics. They may process information only on our instructions. A current list is available on request from [email protected].
  • Legal and safety. We may disclose information if we believe it is reasonably necessary to comply with law, regulation, legal process, or a government request; to enforce our terms; to protect the rights, safety, and property of clients, users, Hompwr, or others; or to detect and prevent fraud or security incidents.
  • Business transfer. We may disclose information in connection with a merger, financing, acquisition, or sale of all or part of the business. We will require the recipient to honor this policy for personal information already collected, or we will give affected account holders notice.

7. Quote links and approval documents

Quote links are built to be hard to guess, and quote pages are not intended for search-engine indexing. A link still works for anyone who receives it, forwards it, or copies it. We do not control screenshots or printed copies.

Shared quote pages are not designed to display a client's phone number or email address. An approval document may display the client's name and the subject property address, because the user included them in the document. The user decides who receives the document.

8. Text messages and email

The Service texts a quote link only to the user's own phone number, from a telephone number controlled by Hompwr. The Service does not text clients. If a user forwards that link to a client, the user sends it from the user's own phone or account, and that message is the user's message.

A user who no longer wants texts from the Service can reply STOP to our number, change notification settings, or email [email protected].

We use message content to deliver the message the user requested, to troubleshoot delivery, to secure the Service, and to honor opt-outs.

Email sent through the Service is transmitted at the user's direction. If the user connects their own mailbox, the email is sent from that mailbox. Commercial email from a user is the user's message. Marketing email from Hompwr itself includes an unsubscribe link and our postal address.

9. Cookies and analytics

We use cookies, local storage, and similar tools that are needed to sign you in, keep the Service secure, remember settings, and understand product usage. Our analytics tools are Google Analytics, Vercel Analytics, and Customer.io. You can control cookies through your browser settings. Blocking some cookies may prevent sign-in.

Google sign-in, and your company's single sign-on provider if your company uses one, may set their own cookies when you choose to use them. Their privacy policies govern those cookies. We do not authorize those providers to sell your Hompwr account information.

We do not use cookies to sell personal information or to share it for cross-context behavioral advertising. If that changes, we will update this policy and provide any opt-out the law requires before the change.

10. How long we keep information

  • Account and billing records: for the life of the account, and afterward for as long as needed for tax, accounting, and dispute resolution.
  • Quotes, attachments, contacts, and approvals: until the user or Hompwr removes them. After an account ends, the user has 30 days to request an export by emailing [email protected], and we may delete them after that. Backup copies may remain until the backup is overwritten.
  • Statement images and raw extraction text: only for the transient period required to extract the values in section 4, then deleted from production systems.
  • Extracted values saved in a quote: for as long as that quote is kept.
  • Message logs: for delivery, security, opt-out enforcement, and dispute resolution, then deleted after one year.
  • AI fee-suggestion logs: the fee name and model response for 90 days, then only a one-way hash of the fee name and the resulting classification, as section 4 describes.
  • Deidentified or aggregate information: may be kept indefinitely, subject to section 5.

We have discontinued some earlier features. If we still hold personal information collected only through a discontinued feature, we keep or delete it under this section, and the person it is about may request deletion.

11. Security and incident notice

Hompwr maintains an information-security program appropriate to the sensitivity of the information we handle. The program includes encryption in transit and at rest, role-based access controls, logging and monitoring, vulnerability management, a secure development process, and incident response. No method of transmission or storage is completely secure.

If we confirm that customer information in our possession was acquired by someone without authorization, we will notify the affected account holder without undue delay, and we will provide information that account holder reasonably needs for notices that account holder must give. The account holder is responsible for notices to its own clients and regulators, except where the law requires Hompwr to notify those people directly.

Users are responsible for protecting their login credentials and for treating quote links as confidential when the quote contains client information.

12. Privacy rights

Depending on the US state where you live, you may have the right to know, access, correct, or delete personal information; to opt out of the sale of personal information, of sharing for cross-context behavioral advertising, and of certain profiling; to appeal a denial; and not to be discriminated against for exercising a right. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

To make a request, email [email protected]. We will verify the request and respond within 45 days, or we will tell you if state law allows us more time. If we deny a request, you may appeal by replying to our decision. We will respond to an appeal within the time your state's law requires.

If your information was submitted by a loan officer or a lending company, contact that loan officer or company first when the request is about their file. Contact us if you cannot reach them, if the request is about an account you hold directly, or if you want a shared link taken down. When another business is responsible for the response, we will assist that business rather than respond as the owner of the file.

California residents

California residents have the rights in the California Consumer Privacy Act, as amended, including the right to know the categories of personal information collected, the right to delete, the right to correct, and the right to opt out of sale or sharing. We do not sell personal information or share it as those terms are defined in that law, and we do not use or disclose sensitive personal information for purposes that would give you a right to limit that use. You may use an authorized agent, with proof of authorization. You may submit a request by emailing [email protected].

We honor browser opt-out preference signals to the extent California law requires for the technologies we actually use.

13. Information about clients of our users

Loan officers and their companies decide which client details to put into a quote, an approval, a contact record, or an email. Hompwr processes that information to provide the Service those users requested.

If you received a Hompwr quote or approval:

  • The document is the loan officer's or their company's document, not a loan offer from Hompwr.
  • The shared quote page is not designed to show your phone number or email address.
  • The approval may show your name and the property address.
  • Anyone the sender forwarded the link or the file to may be able to read it.
  • To correct or delete information in the quote, contact the loan officer or company who sent it. Email [email protected] if you need a link disabled and you cannot reach them.

14. Children

The Service is not directed to anyone under 18. We do not knowingly collect personal information from children. Users must not submit information about a person under 18. If you believe a minor's information was submitted, email [email protected] and we will delete it.

15. Where we operate

We operate in California and offer the Service to users in all 50 US states. We do not offer the Service outside the United States, and we do not intend to collect personal information from people located in other countries. If you access the Service from outside the United States, you do so on your own initiative.

16. Changes to this policy

We may update this Privacy Policy. The posted version will show the date it was last updated. If we make a material change to how we use personal information, we will notify account holders by email before the change takes effect, or we will obtain consent where the law requires it.

17. Contact

Privacy requests and notices may be sent to: