Privacy Policy

Effective Date: April 29, 2026

1. Scope

This Privacy Policy explains how BasisPoint Data collects, uses, discloses, and protects personal information.

2. Information We Collect

In addition to consumer information, we may collect business and investor account data for underwriting analysis, portfolio management, institutional onboarding, and enterprise support.

Information You Provide

• Name
• Email address
• Phone number
• Mailing address
• Property address
• Loan goals and refinance interests
• Uploaded documents
• Messages and inquiries

Information Collected Automatically

• IP address
• Device identifiers
• Browser type
• Operating system
• Pages viewed
• Referral URLs
• Clickstream data
• Cookies and similar technologies

Information From Third Parties

• Public property records
• Credit-related prequalification partners where authorized
• Marketing partners
• Analytics providers
• CRM systems

3. How We Use Information

• Provide services and tools
• Respond to requests
• Deliver alerts and updates
• Personalize website content
• Improve products and analytics
• Prevent fraud and abuse
• Comply with legal obligations
• Market services where lawful
• Measure advertising performance

4. Legal Bases Where Applicable

Where laws require, we rely on consent, contract necessity, legitimate interests, and legal obligations.

5. Cookies and Tracking Technologies

We use cookies, pixels, tags, and similar tools for login functions, analytics, preferences, security, and advertising. You may manage cookies through browser settings.

6. Sharing of Information

We apply contractual controls with vendors where appropriate, including confidentiality, security, and processing obligations.

We may share information with:

• Service providers
• Hosting providers
• Analytics vendors
• Communication platforms
• Lending, insurance, or finance partners when you request offers
• Professional advisors
• Regulators or law enforcement when required
• Buyers in mergers, acquisitions, or asset sales

We do not sell personal information in exchange for money unless disclosed separately. Some targeted advertising activity may be considered a sale or sharing under certain state laws.

7. Consumer Privacy Rights

Depending on your state, you may have rights to:

• Know what data we collect
• Access data n- Correct inaccurate data
• Delete data
• Opt out of sale, sharing, or targeted advertising
• Limit certain sensitive data uses where applicable
• Appeal denied requests

To exercise rights, contact BasisPoint Data through the website.

8. California Privacy Rights

California residents may have rights under the California Consumer Privacy Act, as amended.

9. Nevada Rights

Nevada residents may request to opt out of certain future sales of covered information.

10. Children’s Privacy

Services are not directed to children under 13. We do not knowingly collect personal information from children under 13.

11. Data Security

We use reasonable administrative, technical, and physical safeguards, which may include role-based access controls, encryption in transit, secure credential management, logging, monitoring, and vendor risk review. No system is fully secure.

12. Data Retention

We retain information as needed for business operations, investor reporting, servicing workflows, legal compliance, tax obligations, dispute resolution, fraud prevention, audit readiness, and contractual purposes.

13. Cross-Border Transfers

Information may be processed in the United States and other countries where vendors operate.

14. Email and SMS Choices

You may unsubscribe from marketing emails using the link provided. Text messages may be stopped by replying STOP where supported.

15. Do Not Track

Because standards vary, our website may not respond to browser Do Not Track signals.

16. Sensitive Information

We process sensitive information only as reasonably necessary for requested services, security, legal compliance, or as permitted by law.

17. Changes to This Policy

We may update this Privacy Policy. Revised versions become effective when posted.

18. Contact Us

Use the contact details listed on BasisPoint Data.

19. State-Specific Addendum

If your business operates nationwide, add state-specific notices for California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, and other applicable states as laws evolve.