Skip to main content
Mortgage Go

Legal

Privacy Policy

What information Mortgage Go collects, how it is used, who it is shared with, how it is protected, and the choices you have. Includes GLBA notice, state privacy rights, cookies, and communication opt-out.

Placeholder copy. This page is a structural placeholder pending Nexus compliance sign-off. Final, legally reviewed language will replace this draft prior to live publication.

1. Scope and effective date

This Privacy Policy explains how Mortgage Go and the licensed lending entity that operates Mortgage Go (collectively, "we," "us," or "Mortgage Go") collect, use, share, and protect information when you visit mortgagego.io, interact with our forms, apply for a mortgage, or otherwise engage with our services. It applies to consumer mortgage loan inquiries and applications. If you have an active loan with us or our servicer, that relationship is governed by the privacy notice provided at account opening (the GLBA initial notice), which is updated as required.

2. Information we collect

Information you provide directly. Name, address, phone, email, date of birth, Social Security number, marital status, dependents, citizenship, military service, employment and income, assets and liabilities, property address and details, intended occupancy, transaction type, prior addresses, and supporting documents (paystubs, W-2s, tax returns, bank statements, IDs, divorce decrees, etc.) needed to evaluate a mortgage.

Information collected automatically. Device identifiers, IP address, browser type, operating system, referrer, pages viewed, links clicked, session duration, approximate location derived from IP, and similar telemetry collected through cookies, pixels, SDKs, and analytics or session-replay tools.

Information from third parties. Credit reports and scores from consumer reporting agencies; bank account, transaction, and asset data when you link an account through a financial-data provider; employment and income verification from employer or payroll partners; property and title information from county records, appraisers, and title companies; identity-verification and fraud-prevention vendors; co-borrowers and authorized agents; and marketing or referral partners that direct you to us.

We do not knowingly collect information from children under 13, and our site is not directed to children.

3. Sensitive personal and financial information

Mortgage applications inherently involve sensitive information, including your Social Security number, government IDs, financial account numbers, credit information, and other nonpublic personal information ("NPI") as defined by the Gramm-Leach-Bliley Act (GLBA). We collect and use this information only as needed to evaluate, process, originate, underwrite, fund, close, sell, service, or otherwise administer a mortgage loan, to meet legal and regulatory obligations, and to prevent fraud.

4. How we use information

  • Respond to inquiries and pre-qualification requests.
  • Process and underwrite mortgage applications, including AUS submissions (DU / LP).
  • Verify identity, employment, income, and assets, and prevent fraud and money laundering.
  • Order credit reports, appraisals, title, flood, and insurance.
  • Communicate about your application, disclosures, and required notices.
  • Comply with federal and state lending laws, regulatory reporting (HMDA, BSA/AML), and law-enforcement requests.
  • Maintain, secure, audit, and improve our site, products, and customer service.
  • Send marketing communications you have consented to receive (you can opt out at any time — see Section 11).
  • Conduct analytics and aggregated research, including with de-identified data.

5. Automated processing and AI

We may use automated underwriting systems, machine-learning models, and AI tools to help evaluate applications, route inquiries to a licensed loan officer, score lead quality, or assist customer service. A licensed loan officer is involved in every credit decision. Credit decisions are not based on race, color, religion, national origin, sex, marital status, age (provided you are of legal age to contract), receipt of public assistance, or the good-faith exercise of any right under the Consumer Credit Protection Act, in accordance with the Equal Credit Opportunity Act (ECOA) and its implementing Regulation B.

6. How we share information (categories of partners)

We share information only as needed to provide mortgage services, to comply with the law, or with your consent. Categories of recipients include:

  • Our licensed lending entity and individual licensed loan officers.
  • Service providers that operate on our behalf — loan origination systems, CRM, document and e-sign platforms, hosting, analytics, communications, identity verification, and fraud prevention.
  • Credit-reporting agencies (Experian, Equifax, TransUnion) and other consumer reporting agencies under FCRA.
  • Verification partners for employment, income, assets, bank linking (e.g. financial-data aggregators), tax-return retrieval, and identity.
  • Real-estate transaction partners — appraisers, title and escrow companies, settlement agents, mortgage insurers, hazard and flood insurers, and homeowner-association vendors.
  • Investors, warehouse lenders, secondary-market participants, and loan servicers in connection with funding, selling, or servicing your loan.
  • Government and regulators — including HUD, FHA, VA, USDA, CFPB, state regulators, and tax authorities, as required.
  • Affiliates for joint marketing or as permitted by law (see Section 7 for your opt-out rights).
  • Legal, professional, and compliance advisors bound by confidentiality.
  • Successors in interest in connection with a merger, acquisition, financing, or sale of assets.
  • Law enforcement, courts, or other authorities in response to lawful process or to protect rights, safety, or property.

We do not sell your personal information for monetary consideration. We do not share sensitive personal information for cross-context behavioral advertising.

7. GLBA notice and your affiliate-sharing opt-out

As a financial institution under the Gramm-Leach-Bliley Act, we provide a separate GLBA Privacy Notice at the start of a loan relationship and annually as required. Federal law gives you the right to limit certain sharing of your nonpublic personal information with our affiliates for marketing purposes. To exercise this right, contact us using the information in Section 14. Your choice will apply to the joint borrowers on your loan to the extent permitted by law.

8. How we protect your information

We maintain administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of your information, including encryption in transit (TLS) and at rest, role-based access controls, vendor due diligence and contractual data-protection terms, secure software development practices, ongoing monitoring, and incident-response procedures. No method of transmission or storage is 100% secure; we cannot guarantee absolute security but work to maintain a defensible program aligned with industry standards (e.g. NIST CSF and applicable state safeguard rules such as the NYDFS Part 500 framework where applicable).

9. How long we keep information

We keep information for as long as needed to provide our services, satisfy legal, regulatory, tax, accounting, and audit requirements (mortgage records are typically retained for several years after origination or denial under federal and state rules), resolve disputes, enforce agreements, and prevent fraud. When information is no longer needed, we securely delete or de-identify it.

10. Cookies, analytics, and tracking technologies

We use cookies and similar technologies for site functionality, performance, personalization, and limited measurement. Categories include strictly necessary cookies, analytics cookies (to understand site usage), and advertising or attribution cookies (where permitted). You can control cookies through your browser. We honor Global Privacy Control (GPC) signals where required by law as an opt-out of sale or sharing for targeted advertising. We do not currently respond to Do Not Track (DNT) browser signals because no consensus standard exists.

11. Marketing communications, calls, SMS, and email opt-out

By submitting a form on this site that captures your phone number or email address, you consent to receive calls (including from an automatic telephone dialing system or an artificial or prerecorded voice), text messages, and email from Mortgage Go and the licensed lending entity that operates Mortgage Go regarding your inquiry, at the number and address you provided. Consent is not a condition of purchasing any product or service. Message frequency varies. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.

How to opt out:

  • Text messages: reply STOP to any text we send. Reply HELP for help.
  • Email: use the unsubscribe link at the bottom of any marketing email.
  • Calls: ask to be added to our internal do-not-call list during any call, or contact us using Section 14.

Transactional messages about an active application or loan continue after a marketing opt-out because we need them to service your file. Full TCPA and CAN-SPAM terms are in our Email & Text Policy.

12. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or receive a portable copy of your personal information; to opt out of certain sales, sharing, or targeted advertising; to limit use of sensitive personal information; and to appeal a denial of a rights request. Many financial records are exempt from these rights because they are governed by GLBA and the FCRA; we will respond to the extent the law applies.

California residents (CCPA / CPRA): the categories of personal information we collect, use, and disclose are described in Sections 2, 4, and 6. You may request to know, delete, correct, or receive a copy of your personal information; opt out of the sale or sharing of personal information (we do not sell, and do not share for cross-context behavioral advertising); limit the use of sensitive personal information to what is necessary; and designate an authorized agent. We do not discriminate against you for exercising these rights. California "Shine the Light" (Civ. Code § 1798.83) requests can also be sent using Section 14.

Other state residents (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, Tennessee, Minnesota, New Jersey, and others as laws come into effect): you have similar rights of access, correction, deletion, data portability, and opt-out of targeted advertising, sale, or profiling that produces significant effects, subject to legal exemptions for GLBA-regulated data.

How to exercise rights: submit a request using the contact details in Section 14. We will verify your identity before responding and may need additional information. You can appeal a decision by replying to our response within the time allowed by your state's law.

13. Credit reports and adverse-action rights

When you apply for credit, we may obtain your consumer credit report under the Fair Credit Reporting Act (FCRA). If we take adverse action on an application based in whole or in part on a credit report, we will provide you with an adverse-action notice that includes the credit reporting agency's contact information and your rights to a free copy of the report and to dispute its accuracy.

14. Contact us

For privacy questions, requests, or to exercise your rights, contact us at hello@mortgagego.io or by mail at the address listed in our site footer. For loan-specific privacy inquiries, please reference your loan number or the email associated with your application so we can verify your identity.

15. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date will reflect the most recent change. Material changes will be communicated as required by law, including by posting a prominent notice on this site or by direct notice to applicants and borrowers.