Privacy Policy

1. What data we collect

• Account email — so you can log in and we can send you transactional messages.
• Uploaded mortgage documents — Note, Deed of Trust, Assignments, Notice of Default, Notice of Trustee Sale, servicer correspondence, modification papers, and similar files you upload for analysis.
• Property address — the address tied to the documents you upload.
• Payment details — handled directly by Stripe. We never see or store full card numbers on our servers.
• Usage analytics — anonymized page views and button clicks via PostHog, so we know which parts of the product are useful.

2. How we use it

• Run automated analysis on your documents via the Anthropic Claude API.
• Verify entities, signers, and citations against public records — FDIC, SEC EDGAR, CourtListener, county recorder data, and similar public sources.
• Save analysis results to your account so you can return to them later.
• Send you transactional emails — account creation, analysis completion, waitlist updates, billing receipts.

3. Who we share it with

We use a small set of sub-processors to run the service. Each one sees only the data it needs to do its job:

• Anthropic — document analysis service provider.
• Supabase — database hosting and authentication.
• Stripe — payment processing.
• AWS S3 — encrypted document storage.
• Loops — transactional email delivery.
• Sentry — error tracking and crash reports.
• PostHog — anonymized product analytics.

We do not sell your data to third parties. Ever.

4. Document storage

• Your uploaded documents are encrypted at rest in AWS S3.
• We keep your documents for the lifetime of your account so you can re-open prior analyses. You can delete your account and all of your data yourself, instantly, from Account Settings. If you request deletion by email instead, we honor it within 90 days.

5. Your rights

• Request a copy of your data. Email privacy@mortgagedefender.ai and we’ll send you what we have on file.
• Delete your account and data yourself. Go to Account Settings and use “Delete my account and data.” This cancels any active subscription and permanently deletes your account, documents, and analyses immediately — it can't be undone.
• Or request deletion by email. Same email as above — we honor deletion requests within 30 days.
• Opt out of marketing email. Every marketing email we send has an unsubscribe link at the bottom. Click it and you’re out.

6. Cookies

• Session cookies — required so we can keep you logged in. Set by Supabase.
• Analytics cookies — anonymized usage tracking via PostHog.

7. Children

This service is not for users under 18. We do not knowingly collect personal data from minors. If you believe a minor has given us data, email us and we’ll delete it.

8. Contact

Privacy questions or requests? Email privacy@mortgagedefender.ai.