Privacy policy
Last updated: October 2026
MLOStack ("we", "us") provides website and marketing software for licensed mortgage professionals. This policy explains what information we collect, how we use it, and your rights.
Information we collect
Account data: name, email, password (hashed), NMLS ID, company, billing details.
Customer-provided data: the content you publish to your site, leads submitted through your forms, and CRM records you create.
Usage data: pages visited, features used, IP, browser, and device metadata.
How we use it
- Operate, maintain, and improve the platform.
- Provide customer support and security monitoring.
- Bill, send invoices, and detect fraud.
- Send product updates (you can opt out anytime).
TCPA and lead consent
Forms built on MLOStack include a TCPA-compliant consent layer. The account owner — not MLOStack — is the controller of leads collected through their site and is responsible for honoring consent and do-not-contact obligations.
Cookies
We use first-party cookies for session and analytics. Sites built on MLOStack may use third-party analytics (GA4, Meta Pixel) that the account owner configures.
CCPA / state privacy rights
California, Virginia, Colorado, Connecticut, and Utah residents may request access, correction, or deletion of their personal data by emailing privacy@mlostack.com. We respond within 45 days.
Data retention & deletion
Account data is retained while your account is active. Leads and CRM records are retained for the life of the account and exported on request. We delete personal data within 30 days of account closure unless legally required to retain it.
Security
All traffic is TLS-encrypted. Data at rest is encrypted. We restrict production access and log administrative actions.
Contact
Questions: privacy@mlostack.com. Data subject requests: same address with subject line "DSR".