Privacy Policy

Effective date: April 30, 2026 · Last updated: April 30, 2026

1. About This Policy

MYLOA INC ("MyLOA," "we," "our," "us") is a Delaware C-Corp providing AI-powered mortgage operations technology to licensed mortgage lenders, mortgage bankers, and credit unions. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you interact with our platform via SMS, voice, email, web, or mobile applications.

MyLOA is a financial technology vendor. We act as a service provider to licensed mortgage lenders ("Lender Tenants"). Your loan application, credit, and origination data are processed by us on behalf of the Lender Tenant you are working with. The Lender Tenant is the financial institution responsible for your loan; MyLOA provides the technology that supports their operations.

2. Information We Collect

Information You Provide Directly

• Identity: full legal name, preferred name, date of birth, Social Security number, driver's license, government-issued ID
• Contact: phone number, email address, mailing address, current and prior residential addresses
• Household and dependent information: marital status, dependents, co-applicant information
• Employment and income: employer, position, income type and amount, employment history, business ownership
• Financial: bank accounts, asset balances, retirement accounts, gift funds, real estate owned
• Credit-related: liabilities, payment history, public records, credit consent
• Loan-specific: loan purpose, property details, occupancy intent, transaction urgency
• Demographic information collected under HMDA (voluntary): ethnicity, race, sex
• Documents you upload: paystubs, W-2s, tax returns, bank statements, identification, contracts, insurance, divorce decrees, military discharge documents

Information Collected Automatically

• Communications metadata: phone numbers, email addresses, timestamps, channel of contact, session identifiers
• Voice call recordings and transcripts (where permitted by law and disclosed at the start of the call)
• SMS message content and delivery status
• IP address, device type, browser, and general geolocation when you use our web or mobile interfaces
• Interaction data: pages visited, features used, errors encountered

Information From Third Parties

• Credit bureaus (Equifax, Experian, TransUnion) when you authorize a credit pull
• Verification of employment and income vendors (such as The Work Number) when you authorize verification
• Asset verification vendors (such as Plaid or Finicity) when you connect financial accounts
• Public records: property tax records, county recorder data, MLS data sheets where available
• Real estate professionals you have engaged: realtor name, brokerage, contact information
• Your Lender Tenant's loan origination system when relevant to your application

3. How We Use Your Information

• To collect, organize, and route your loan application to your Lender Tenant's licensed loan officer
• To communicate with you about your loan application via the channels you have authorized
• To verify your identity and the accuracy of information you provide
• To request and review credit reports, employment verification, and asset verification with your authorization
• To prepare structured loan files (1003 application data, supporting documents) for your Lender Tenant
• To detect and prevent fraud, including identity theft and misrepresentation
• To comply with applicable federal and state law including TILA, RESPA, ECOA, FCRA, GLBA, HMDA, and state mortgage licensing requirements
• To maintain audit trails as required by federal and state regulators
• To improve our platform's accuracy, reliability, and user experience

We do not use your personal information to train foundation AI models. Your loan data is not used to train, fine-tune, or develop large language models or AI products of any kind.

4. How We Share Your Information

We share your information only as necessary to deliver the service you have requested or as required by law. Categories of recipients:

• Your Lender Tenant (the licensed mortgage lender you have applied with) — receives your full loan file
• Service providers and sub-processors who support our platform under written contracts that restrict their use of your information: cloud hosting (Amazon Web Services), telephony and messaging (SignalWire, Twilio), AI conversational platform (Retell AI), email delivery (SendGrid or equivalent), database (PostgreSQL hosted infrastructure)
• Credit bureaus and verification vendors when you authorize their use
• Federal and state regulators when required by law, subpoena, or examination
• Law enforcement when required by valid legal process
• Successors in the event of a merger, acquisition, or sale of MyLOA assets, subject to equivalent privacy protections

We do not sell your personal information. We do not share your personal information with advertisers or marketers unaffiliated with your Lender Tenant.

5. Your Rights and Choices

Depending on your state of residence, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your information, subject to legal retention requirements (federal mortgage law typically requires we retain loan records for 5 years after closing)
• Portability: Request your information in a structured, commonly used format
• Opt out of profiling or automated decision-making: Where applicable
• Withdraw consent: For consent-based processing, including marketing

California residents have rights under the California Consumer Privacy Act (CCPA/CPRA). Virginia, Colorado, Connecticut, Utah, Iowa, Indiana, Tennessee, Oregon, Texas, Montana, Delaware, New Jersey, New Hampshire, Minnesota, Maryland, Rhode Island, and Kentucky residents have similar rights under their state privacy laws. To exercise your rights, contact us at the address below.

You may opt out of SMS communications at any time by replying STOP, UNSUBSCRIBE, CANCEL, END, or QUIT. You may opt out of email communications by following the unsubscribe instructions in any email or by contacting us directly.

6. Security

We implement administrative, technical, and physical safeguards designed to protect your information consistent with the Gramm-Leach-Bliley Act Safeguards Rule. These include:

• Encryption of personal information in transit (TLS 1.2 or higher) and at rest (AES-256)
• Multi-factor authentication for personnel with access to systems holding personal information
• Role-based access controls limiting personnel access to information necessary for their role
• Vendor management programs requiring service providers to implement equivalent safeguards
• Continuous monitoring, intrusion detection, and incident response procedures
• Personnel training on data security and privacy

No system is perfectly secure. If we discover a security incident affecting your information, we will notify you and applicable regulators consistent with state breach notification laws.

7. Data Retention

We retain your information for as long as necessary to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements. Mortgage records are typically retained for at least 5 years from loan closing or final disposition, consistent with RESPA, TILA, ECOA, and state requirements. Audit logs and compliance records are retained for at least 7 years.

8. Children's Privacy

Our platform is not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us so we can delete it.

9. International Users

MyLOA's platform is operated from the United States and is intended for use by residents of the United States in connection with U.S. residential mortgage transactions. If you access our service from outside the U.S., you understand that your information will be transferred to and processed in the U.S.

10. AI and Automated Communications

MyLOA's platform uses artificial intelligence to assist licensed loan officers in collecting and organizing your loan application. When you communicate with our platform via SMS, voice, or chat, you may be interacting with an AI assistant. The AI will identify itself as an AI assistant in every interaction. The AI does not make underwriting decisions, name loan programs, or commit you to any loan. All decisions about your loan are made by your Lender Tenant's licensed personnel.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new effective date. Material changes will be communicated via the email or phone number you have provided.

12. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact:

MYLOA INC
Privacy Officer
Email: privacy@myloaagent.com
Website: www.myloaagent.com