BrokerOS LLC ("BrokerOS," "we," "us," or "our") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the BrokerOS platform at brokerostools.com. By accessing or using the Platform, you agree to the terms of this Privacy Policy.
Who We Are
BrokerOS LLC is a software company providing AI-powered workflow tools for mortgage brokers and loan officers. Our Platform is intended for licensed mortgage professionals and their authorized support staff.
Questions about this policy?
Email: support@brokerostools.com
Website: brokerostools.com
Information We Collect
Account Information
When you register for a BrokerOS account, we collect:
- Name and email address
- NMLS ID number (required for account creation — verified at signup)
- Company name and brokerage affiliation
- Billing and payment information (processed by our payment processor — we do not store full card numbers)
- Password (stored in encrypted form)
Usage Data
We automatically collect certain information when you use the Platform, including IP address, browser type, pages visited, session timestamps, and diagnostic data.
Tool Inputs
🔒 BrokerOS does not collect, store, or retain any borrower or consumer personal information entered into its tools. All scenario calculations are performed in-session and are not saved to our servers or databases.
Users are solely responsible for ensuring that any information entered into the Platform complies with applicable privacy laws.
Communications
If you contact us via email or support channels, we may retain those communications to respond to your inquiry and improve our service.
How We Use Your Information
We use the information we collect to:
- Create and manage your account
- Provide, operate, and improve the Platform
- Process payments and manage subscriptions
- Send transactional emails (receipts, account notices, password resets)
- Send product updates and marketing communications (you may opt out at any time)
- Monitor usage patterns to improve performance
- Detect, prevent, and respond to fraud or security incidents
- Comply with applicable legal obligations
AI-Powered Features and Third-Party Processors
BrokerOS uses third-party AI providers to power certain platform features. These providers process inputs solely to generate outputs on our behalf and are bound by data processing agreements.
| Provider | Role | Data Protection |
|---|---|---|
| OpenRouter, Inc. | AI model routing and aggregation | Zero Data Retention (ZDR) enabled — inputs are not logged or stored after processing |
| Anthropic, PBC | AI language model provider (Claude) | Bound by data processing agreement; inputs used only to generate requested output |
| Supabase, Inc. | Database and authentication infrastructure | Stores account credentials and broker profile data; SOC 2 compliant; data encrypted at rest and in transit |
| Stripe, Inc. | Payment processing | PCI-DSS compliant; BrokerOS does not store card numbers or payment credentials |
We do not use AI processing for automated decisions about individuals.
How We Share Your Information
We do not sell your personal information — ever.
We may share information only in these limited circumstances:
- Service Providers: Third-party vendors (payment processors, hosting, analytics), each bound by confidentiality obligations
- AI Processors: As described in Section 4
- Legal Requirements: If required by law, court order, or governmental authority
- Business Transfers: In connection with a merger or acquisition, with notice to affected users
- With Your Consent: For any other purpose with your explicit consent
Data Retention
We retain your account information for as long as your account is active or as needed to provide services. If you close your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.
Tool inputs and scenario data are not retained beyond your active session.
Security
We implement industry-standard technical and organizational measures to protect your information, including:
- TLS encryption for data in transit
- Encrypted storage for account credentials
- Role-based access controls
- Regular security reviews
No method of transmission or storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security.
Your Rights and Choices
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Request deletion of your account and associated data
- Opt out of marketing communications
- Request a portable copy of your data
To exercise any of these rights, contact us at support@brokerostools.com. We will respond within 30 days.
California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete, and the right to opt out of the sale of personal information.
We do not sell personal information. To submit a CCPA request, contact us at support@brokerostools.com.
Cookies and Tracking
The Platform may use cookies and similar technologies to maintain session state, remember preferences, and analyze usage. You can control cookie settings through your browser. Disabling cookies may affect certain Platform functionality.
We do not use third-party advertising cookies or behavioral tracking for ad targeting.
Third-Party Links
The Platform may contain links to third-party websites. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies before providing any information.
Children's Privacy
The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal information, we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or in-platform notification at least 30 days before the change takes effect. Your continued use of the Platform after the effective date constitutes acceptance.