Privacy Policy

1. Information We Collect

We collect personal and financial information when you apply for a mortgage loan, create an account, or interact with our services. This includes:

Information You Provide Directly

• Full legal name, date of birth, Social Security number
• Current and prior addresses, phone number, email address
• Employment history, employer name, income information
• Bank account information, asset statements, tax returns
• Credit authorization and consent forms
• Property information and purchase agreements
• Government-issued identification documents

Information We Collect Automatically

• Credit report and credit score (obtained with your written authorization via Experian)
• Income verification data (obtained with your authorization via Plaid)
• Identity verification data (obtained with your authorization via Socure)
• IP address, browser type, and device information when you use our portal

Information from Third Parties

• Appraisal reports from licensed Iowa appraisers
• Title reports from title companies
• Employment verification from your employer

2. How We Use Your Information

We use your information solely for legitimate mortgage lending purposes, including:

• Evaluating your mortgage loan application
• Verifying your identity, income, employment, and assets
• Processing your loan and servicing your account
• Communicating with you about your application and loan
• Complying with federal and state mortgage lending laws
• Detecting and preventing fraud
• Maintaining records as required by law (25-month minimum per Regulation B)

We use AI-assisted document processing (Claude API by Anthropic) to help extract and organize financial data from your uploaded documents. This tool assists our underwriting team — it does not make credit decisions and does not store your information beyond the processing session.

3. How We Share Your Information

We do not sell your personal information. We share your information only as follows:

• Service providers: Experian (credit reporting), Plaid (income verification), Socure (identity verification), Supabase (secure data storage), Anthropic Claude API (document processing). All are bound by confidentiality agreements.
• Investors, loan participants, and servicers: Your loan may be funded, purchased, participated in, or serviced by private investors or loan participants and by our loan servicer. We share loan information with these parties only as necessary to fund, service, administer, and enforce your loan. This use is permitted without an opt-out under the Gramm-Leach-Bliley Act (12 C.F.R. 1016.14), which covers servicing and processing and secondary-market or similar transactions related to your loan. Investors who hold only a passive economic interest generally receive loan-level performance information (such as principal balance and payment status); the party that holds or services your loan may receive identifying information to the extent needed to service and enforce it. We do not sell your information and we do not share it with investors, participants, or servicers for their own marketing.
• Iowa Finance Authority: If you use IFA down payment assistance, required information is shared with IFA per program requirements.
• Legal and regulatory: As required by Iowa Division of Banking, CFPB, or other lawful authority.
• Closing: Title company, closing attorney, and other parties necessary to complete your loan closing.

4. Gramm-Leach-Bliley Act (GLBA) Notice

As a financial institution, EquityBoost LLC is subject to the GLBA Privacy Rule (16 C.F.R. Part 313). We provide this notice to explain our privacy practices regarding your nonpublic personal information (NPI).

Categories of NPI We Collect

Information from applications and documents you provide; information from consumer reporting agencies; information from your transactions with us; information from third parties to verify your identity and financial status.

Our Opt-Out Policy

We do not share your NPI with nonaffiliated third parties for marketing purposes. Therefore, no opt-out is required or available for marketing sharing — we simply do not do it.

Former Customers

We continue to protect your NPI after your loan relationship ends, in accordance with our data retention schedule and applicable law.

5. Data Security

We implement the following security measures to protect your information:

• All data stored in Supabase with AES-256 encryption at rest
• All data transmitted using TLS 1.2 or higher encryption in transit
• Row-level security on all database tables — each user sees only their own data
• No full account numbers stored — only last 4 digits of routing and account numbers
• Access restricted to authorized EquityBoost personnel only
• Annual cybersecurity review

No method of transmission over the internet is 100% secure. If you believe your information has been compromised, contact us immediately at the address below.

6. Data Retention

We retain loan files, applications, and supporting documents for a minimum of 25 months from the date of action, as required by Regulation B (Equal Credit Opportunity Act). Certain records may be retained longer as required by other applicable law.

7. Your Rights

You have the following rights regarding your personal information:

• Access: You may request a copy of information in your loan file.
• Correction: You may dispute inaccurate information in your file.
• Credit report disputes: If we used a credit report in our decision, you have the right to obtain a free copy of that report and dispute inaccuracies directly with the credit reporting agency.
• Adverse action explanation: If your application was denied, you have the right to a written statement of the specific reasons, which we provide in our Adverse Action Notice.

8. Cookies and Tracking

Our portal uses session cookies necessary for login and security. We do not currently use third-party advertising cookies or analytics tracking. If this changes, we will update this policy and provide notice.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new effective date. For material changes, we will provide direct notice to existing customers.

11. SMS / Text Messaging

If you provide your mobile phone number and consent to receive text messages, EquityBoost LLC may send you SMS text messages relating to your loan application and account — including application and status updates, document requests, closing-process and title or abstract logistics, payment reminders, and customer-care replies. Consent to receive text messages is not a condition of any loan or other purchase.

What We Collect for Text Messaging

• Your mobile phone number
• Your consent record (date, time, and the form on which you opted in)
• Message content and delivery logs for the texts we send and receive

Message Frequency and Rates

Message frequency varies based on your application and account activity. Message and data rates may apply. EquityBoost does not charge for text messages, but your mobile carrier's standard rates apply.

Opting Out and Getting Help

You can opt out of text messages at any time by replying STOP to any message. After you reply STOP, we will send one confirmation and then stop sending texts unless you opt back in. For help, reply HELP to any message or contact us using the information in the Contact Us section below. Carriers are not liable for delayed or undelivered messages.