Privacy Policy

1. Introduction

Secure Systems, Inc. (“Company,” “we,” “us,” or “our“), a Delaware corporation, operates the LoanPulse platform, including the website at loanpulse.com, all related subdomains, the LoanPulse mobile applications for iOS and Android, and all associated APIs and services (collectively, the “Service“).

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, create an account, or use the Service. It also describes your choices regarding your personal information. Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

This Privacy Policy should be read in conjunction with our Terms of Service. Capitalized terms not defined in this Privacy Policy have the meanings set forth in the Terms of Service.

2. Information We Collect

We collect information in the following categories:

2.1 Information You Provide Directly.

(a) Account Information. When you register for an account, we collect your name, email address, phone number, company name, job title, and password. If you register on behalf of an organization, we may also collect the organization’s name, address, and billing contact information.

(b) Billing Information. When you subscribe to a paid plan, we collect payment information including your credit or debit card number, expiration date, CVV, and billing address. Payment processing is handled by our third-party payment processor, Stripe, Inc. We do not store your full credit card number on our servers.

(c) Customer Data. In the course of using the Service, you may upload, submit, or transmit data relating to your borrowers, leads, contacts, and business operations (“Customer Data“). Customer Data may include names, email addresses, phone numbers, mailing addresses, loan amounts, property information, communication records, notes, documents, and other information you choose to store in the Service. You are responsible for ensuring that you have the legal right to collect, store, and process all Customer Data you input into the Service.

(d) Communications. When you contact our support team, submit feedback, request a demo, or participate in surveys, we collect the content of those communications along with your name and contact information.

(e) Form Submissions. When you complete forms on our website (such as the demo request form, newsletter signup, webinar registration, or resource downloads), we collect the information you provide in those forms.

2.2 Information Collected Automatically.

(a) Usage Data. We automatically collect information about how you interact with the Service, including features used, pages viewed, actions taken, time spent on pages, click patterns, search queries, and workflow configurations.

(b) Device & Technical Data. We collect information about the device and browser you use to access the Service, including IP address, browser type and version, operating system, device type, screen resolution, language preference, and time zone setting.

(c) Log Data. Our servers automatically record information when you access the Service, including your IP address, the date and time of your request, the referring URL, the pages you visit, and the resources you access.

(d) Location Data. We may derive your approximate geographic location from your IP address. We do not collect precise geolocation data from your device unless you explicitly grant permission through your device settings (for example, to enable location-based features in the Mobile app).

2.3 Information From Third Parties.

(a) Integration Partners. If you connect Third-Party Services to LoanPulse (such as Zillow, LendingTree, Google, Facebook, or a loan origination system), we may receive information from those services, including lead data, contact information, and application status updates, as authorized by your integration settings.

(b) Analytics Providers. We receive aggregated analytics data from third-party analytics services that help us understand how the Service is used.

(c) Publicly Available Information. We may supplement the information we collect with publicly available information from business directories, social media profiles, and other public sources to improve the accuracy and completeness of our records.

3. How We Use Your Information

We use the information we collect for the following purposes:

(a) Provide and Operate the Service. To create and manage your account, process transactions, deliver the features and functionality of the Service, and provide customer support.

(b) Improve the Service. To analyze usage patterns, diagnose technical issues, identify areas for improvement, develop new features, and optimize performance and user experience.

(c) Personalization. To tailor the Service to your preferences, including recommending features, templates, and workflows based on your usage patterns and business profile.

(d) Communications. To send you transactional messages (such as account confirmations, billing receipts, password resets, and security alerts), respond to your inquiries, and provide customer support.

(e) Marketing. To send you promotional communications about new features, product updates, webinars, educational content, and special offers, subject to your communication preferences. You may opt out of marketing communications at any time (see Section 11).

(f) Analytics & Aggregation. To generate aggregated, anonymized, or de-identified data for analytics, benchmarking, research, and product development purposes. Aggregated data does not identify any individual and is not subject to this Privacy Policy.

(g) Security & Fraud Prevention. To detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity, and to protect the rights, property, and safety of the Company, our users, and the public.

(h) Legal Compliance. To comply with applicable laws, regulations, legal processes, and governmental requests, and to enforce our Terms of Service and other agreements.

4. Legal Bases for Processing

Where applicable data protection laws require a legal basis for processing personal data (such as the EU General Data Protection Regulation or UK GDPR), we rely on the following bases:

(a) Contract Performance. Processing is necessary to fulfill our contractual obligations to you, including providing the Service, processing payments, and managing your account.

(b) Legitimate Interests. Processing is necessary for our legitimate business interests, including improving the Service, conducting analytics, preventing fraud, and marketing our products, provided these interests are not overridden by your data protection rights.

(c) Consent. Where required by law, we process your personal data based on your consent. You may withdraw consent at any time, though withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

(d) Legal Obligation. Processing is necessary to comply with a legal obligation to which we are subject.

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers. We share information with third-party service providers who perform services on our behalf, including payment processing (Stripe), email delivery (SendGrid), SMS messaging (Twilio), cloud hosting (Amazon Web Services), analytics (Google Analytics, Mixpanel), customer support tools, and error monitoring. These providers are contractually obligated to use your information only for the purposes of providing services to us and are required to maintain appropriate security measures.

5.2 Integration Partners. When you enable a Third-Party Service integration (such as Zillow, Google Calendar, Encompass, or Zapier), we share data with that service as necessary to provide the integration functionality you requested. The data shared depends on the specific integration and your configuration settings.

5.3 Business Transfers. In the event of a merger, acquisition, reorganization, bankruptcy, dissolution, or other sale or transfer of some or all of the Company’s assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your information.

5.4 Legal Requirements. We may disclose your information if required to do so by law or in the good faith belief that such disclosure is necessary to: (a) comply with a legal obligation, subpoena, court order, or governmental request; (b) protect and defend the rights or property of the Company; (c) prevent or investigate possible wrongdoing in connection with the Service; (d) protect the personal safety of users of the Service or the public; or (e) protect against legal liability.

5.5 With Your Consent. We may share your information with third parties when you have given us explicit consent to do so.

5.6 Aggregated & De-Identified Data. We may share aggregated, anonymized, or de-identified data with third parties for analytics, benchmarking, industry research, and marketing purposes. This data does not identify any individual.

6. Cookies & Tracking Technologies

6.1 Types of Cookies. We use the following categories of cookies and similar tracking technologies:

(a) Strictly Necessary Cookies. These cookies are essential for the operation of the Service and cannot be disabled. They include cookies that maintain your login session, remember your preferences, and enable core functionality such as security, account access, and payment processing.

(b) Performance & Analytics Cookies. These cookies collect information about how you use the Service, including pages visited, features used, and errors encountered. We use this information to improve the Service. Analytics are provided by Google Analytics and Mixpanel.

(c) Functional Cookies. These cookies enable enhanced functionality and personalization, such as remembering your display preferences, pipeline views, and dashboard configurations.

(d) Marketing Cookies. These cookies are used to track visitors across websites for the purpose of displaying relevant advertisements. We may use marketing cookies from Google Ads, Facebook Pixel, and LinkedIn Insight Tag to measure the effectiveness of our advertising campaigns and to retarget visitors who have expressed interest in the Service.

6.2 Cookie Management. You can manage your cookie preferences through our cookie consent banner displayed when you first visit our website. You may also adjust your browser settings to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of the Service. For more information on managing cookies, visit allaboutcookies.org.

6.3 Other Tracking Technologies. In addition to cookies, we may use web beacons (pixel tags), clear GIFs, and similar technologies in our emails and on our website to track open rates, click-through rates, and user interactions for analytics and marketing purposes.

7. Data Security

7.1 Security Measures. We implement commercially reasonable administrative, technical, and physical safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

(a) Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS 1.3 (Transport Layer Security).

(b) Encryption at rest: Customer Data stored on our servers is encrypted using AES-256 (Advanced Encryption Standard).

(c) Infrastructure: The Service is hosted on Amazon Web Services (AWS) infrastructure that maintains SOC 2 Type II certification.

(d) Access controls: We enforce role-based access controls, multi-factor authentication for internal systems, and principle of least privilege for employee access to Customer Data.

(e) Monitoring: We employ continuous security monitoring, intrusion detection systems, and regular vulnerability scanning.

(f) Backups: Automated data backups are performed every six (6) hours and stored in geographically redundant locations.

(g) Audits: We conduct regular security audits, penetration testing, and employee security training.

7.2 No Absolute Guarantee. While we take the security of your information seriously and implement industry-standard protections, no method of electronic transmission or data storage is 100% secure. We cannot guarantee absolute security, and you acknowledge that you transmit information to us at your own risk.

7.3 Breach Notification. In the event of a data breach that compromises your personal information, we will notify you in accordance with applicable law. Notification will be made without undue delay and will include, to the extent known: the nature of the breach, the categories and approximate number of records affected, the likely consequences of the breach, and the measures taken or proposed to address the breach.

8. Third-Party Services

8.1 Third-Party Links. The Service may contain links to third-party websites, applications, and services that are not owned or controlled by us. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party service you access through or in connection with the Service.

8.2 Third-Party Integrations. When you enable integrations with Third-Party Services (such as Zillow, LendingTree, Google Calendar, Encompass, Zapier, or others), information may be shared between LoanPulse and those services as described in Section 5.2. Each Third-Party Service has its own privacy practices, and we are not responsible for the privacy or security practices of any Third-Party Service.

8.3 Key Service Providers. The following are our primary third-party service providers and their roles:

9. International Data Transfers

9.1 Data Location. The Service is hosted on servers located in the United States. If you access the Service from outside the United States, your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those of your jurisdiction.

9.2 Transfer Safeguards. Where we transfer personal data from the European Economic Area (EEA), the United Kingdom, or Switzerland to countries that have not been deemed to provide an adequate level of data protection, we rely on appropriate transfer mechanisms, including: (a) Standard Contractual Clauses (SCCs) approved by the European Commission; (b) the UK International Data Transfer Addendum; or (c) other legally recognized transfer mechanisms as applicable.

9.3 Data Processing Agreement. Customers who require a Data Processing Agreement (DPA) incorporating Standard Contractual Clauses may request one by contacting privacy@loanpulse.com.

10. Children’s Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information as promptly as possible. If you believe that a child under 18 has provided personal information to us, please contact us at privacy@loanpulse.com.

11. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

(a) Right to Access. You have the right to request a copy of the personal information we hold about you.

(b) Right to Rectification. You have the right to request that we correct inaccurate or incomplete personal information.

(c) Right to Erasure. You have the right to request that we delete your personal information, subject to certain legal exceptions (such as compliance with legal obligations or defense of legal claims).

(d) Right to Restrict Processing. You have the right to request that we restrict the processing of your personal information under certain circumstances.

(e) Right to Data Portability. You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller. The data export functionality in your account settings (Settings → Data → Export) supports this right.

(f) Right to Object. You have the right to object to the processing of your personal information for direct marketing purposes. You may exercise this right at any time by clicking the “unsubscribe” link in any marketing email or by updating your communication preferences in your account settings.

(g) Right to Withdraw Consent. Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

Exercising Your Rights. To exercise any of the above rights, please contact us at privacy@loanpulse.com. We will respond to your request within thirty (30) days, or within the timeframe required by applicable law. We may request reasonable verification of your identity before processing your request.

Non-Discrimination. We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge different prices, provide a different level of quality, or suggest that you may receive a different price or quality of goods or services for exercising your rights.

12. State-Specific Privacy Rights

12.1 California Residents (CCPA/CPRA). If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA“), including:

(a) The right to know what personal information we collect, use, disclose, and sell or share;

(b) The right to delete your personal information;

(c) The right to correct inaccurate personal information;

(d) The right to opt out of the sale or sharing of personal information;

(e) The right to limit the use and disclosure of sensitive personal information.

We do not sell personal information as defined under the CCPA/CPRA. We do not share personal information for cross-context behavioral advertising purposes. In the preceding twelve (12) months, we have collected the categories of personal information described in Section 2 of this Privacy Policy.

To exercise your CCPA/CPRA rights, contact us at privacy@loanpulse.com or call us toll-free at 1-800-LOANPULSE. You may also designate an authorized agent to make a request on your behalf.

12.2 Virginia Residents (VCDPA). Virginia residents have rights under the Virginia Consumer Data Protection Act, including the right to access, correct, delete, and obtain a copy of personal data, and the right to opt out of targeted advertising, sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects.

12.3 Colorado, Connecticut, Utah, and Other States. Residents of states with enacted consumer privacy legislation (including the Colorado Privacy Act, Connecticut Data Privacy Act, Utah Consumer Privacy Act, and other applicable state laws) may have similar rights to those described above. We will honor all valid requests made under applicable state privacy laws. Contact privacy@loanpulse.com to exercise your rights.

12.4 Appeals. If we decline to take action on a privacy rights request, you may appeal our decision by contacting us at privacy@loanpulse.com with the subject line “Privacy Rights Appeal.” We will respond to your appeal within the timeframe required by applicable law.

13. Do Not Track Signals

Some browsers include a “Do Not Track” (DNT) feature that signals to websites that you do not wish to be tracked. Because there is no universally accepted standard for how to respond to DNT signals, we do not currently respond to DNT signals. However, you may manage your tracking preferences through our cookie consent banner and browser settings as described in Section 6.2. We will update this section if and when a uniform DNT standard is adopted.

14. Data Retention

14.1 Active Accounts. We retain your personal information and Customer Data for as long as your account is active and as needed to provide the Service.

14.2 Post-Cancellation. Following account cancellation or termination, we retain your Customer Data for ninety (90) days to allow you to export your data or reactivate your account. After this retention period, Customer Data is permanently deleted from our active systems.

14.3 Backup Retention. Customer Data may persist in encrypted backup systems for up to an additional thirty (30) days following deletion from active systems, after which it is permanently purged.

14.4 Extended Retention. We may retain certain information beyond the periods described above where required to comply with legal obligations (such as tax or financial reporting requirements), resolve disputes, enforce our agreements, or as otherwise permitted by applicable law. Information retained for legal purposes will be stored securely and accessed only as necessary.

14.5 Anonymized Data. Aggregated, anonymized, or de-identified data that can no longer be used to identify you may be retained indefinitely for analytics, benchmarking, and product improvement purposes.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. If we make material changes, we will notify you by: (a) sending an email to the address associated with your account; (b) displaying a prominent notice within the Service; or (c) posting the updated Privacy Policy on our website. The “Last Updated” date at the top of this page indicates when the most recent revision was made.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

If you are an EEA, UK, or Swiss resident and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

© 2026 Secure Systems, Inc. All rights reserved. LoanPulse is a registered trademark of Secure Systems, Inc.
Incorporated in the State of Delaware.