Privacy Policy

This Privacy Policy describes how EloiseAI LLC ("EloiseAI," "we," "us," or "our") collects, uses, and protects information in connection with the TermVerify service ("Service"). By using the Service, you consent to the practices described in this Privacy Policy.

1. Information We Collect

Information You Provide

• Account Information: When you create an account, we collect your email address, name, and password.
• Documents: When you upload a Loan Estimate, fee worksheet, or similar mortgage document, we process its contents to provide our analysis service. These documents typically contain loan terms, fee amounts, property information, and may contain personal information printed by your lender.
• Profile Information: Optional information you provide such as phone number for loan officer contact.
• Payment Information: If you purchase premium features, payment processing is handled by Stripe. We never see or store your full card number.

Information Collected Automatically

• Usage Data: We collect information about how you use the Service, including pages visited, features used, and actions taken.
• Device Information: We collect device type, operating system, browser type, and IP address.
• Cookies: We use cookies and similar technologies for authentication and preferences.

2. How Your Document Is Processed

When you upload a document, the following happens:

1. Your document is transmitted over an encrypted HTTPS connection and stored in encrypted cloud storage (Amazon Web Services S3) in the United States.
2. Document contents are extracted and analyzed using automated services, which may include AWS Textract (optical text recognition) and third-party AI models (see Section 3). The extracted loan terms and fees are what power your analysis.
3. Your analysis results (grades, extracted fees, explanations) are saved to your account so you can return to them.
4. The original uploaded document file is automatically and permanently deleted from our storage 90 days after upload. This deletion is enforced by an automated storage lifecycle rule. Your analysis results remain available in your account after the original file is deleted.

We may retain de-identified, aggregated fee and pricing data derived from analyses (for example: state, loan type, bucketed loan amount, fee amounts, and month/year) to build market benchmarks that improve the Service and support our published research. This benchmark data cannot identify you, is never published at a granularity that could identify an individual loan, and is subject to minimum sample-size thresholds before any statistic is displayed publicly.

3. AI Processing Disclosure

TermVerify uses third-party artificial intelligence services to read documents and generate plain-English explanations. Depending on configuration, document content may be processed by AI providers such as OpenAI, Anthropic, Google, or AWS Bedrock, under their respective commercial API terms.

Under the commercial API terms of these providers, data submitted through their APIs is not used to train their models. We recommend redacting your name, address, and any account numbers before uploading if you prefer additional privacy — the analysis works the same either way.

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process and analyze your uploaded documents
• Build de-identified market benchmarks as described in Section 2
• Send you service-related communications
• Process payments and prevent fraud
• Respond to your inquiries and provide customer support
• Comply with legal obligations
• Protect the security and integrity of the Service

5. How We Share Your Information

We do not sell your personal information.

We may share your information in the following circumstances:

• With Your Consent: When you explicitly choose to accept an offer from a loan officer, we share your contact information with that specific loan officer only.
• Service Providers: We share information with the third-party service providers listed in Section 11 who assist us in operating the Service.
• Anonymized Data: We may share aggregated, de-identified data that cannot identify you for analytics and research purposes.
• Legal Requirements: We may disclose information if required by law, court order, or government request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred.

6. Marketplace Privacy

When you upload a loan estimate, we may create an anonymized "scenario" that licensed loan officers can view. This scenario contains only loan-related information (loan amount, rate, fees, property type) and does not include your personal information.

Your name, email, phone number, and other personal information are never shared with loan officers unless you explicitly accept an offer and consent to share your contact information.

7. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of sensitive data at rest and in transit (AES-256, TLS 1.2+)
• Secure authentication with JWT tokens
• Automated deletion of uploaded documents after 90 days
• Access controls limiting access to personal data

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your information.

8. Data Retention

• Uploaded document files: automatically deleted 90 days after upload.
• Analysis results: retained while your account is active, so you can revisit your reports. You may delete analyses or your account at any time.
• Account information: retained while your account is active or as required by law.
• De-identified benchmark data: retained indefinitely; it cannot be linked back to you.

9. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate information.
• Deletion: Request deletion of your personal information (subject to legal retention requirements).
• Portability: Request your data in a portable format.
• Opt-Out: Unsubscribe from marketing communications at any time.

To exercise these rights, contact us at support@eloiseai.net. We will respond within the timeframe required by applicable law.

10. State Privacy Rights

If you are a resident of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), or another state with a comprehensive privacy law, you may have additional rights, including the right to know what personal information we collect, the right to delete it, the right to correct it, and the right to opt out of the sale or sharing of personal information.

We do not sell or share personal information for cross-context behavioral advertising.

To exercise any state privacy right, contact us at support@eloiseai.net. We will not discriminate against you for exercising your rights.

11. Third-Party Services

We use the following third-party services to operate TermVerify:

• Amazon Web Services (AWS): Cloud hosting, encrypted document storage (S3), and document text extraction (Textract)
• OpenAI: AI-based document reading and analysis explanations (commercial API; not used for model training)
• Anthropic / Google / AWS Bedrock: Alternative AI providers that may process document content under their commercial API terms
• MongoDB Atlas: Database hosting for account and analysis data
• Stripe: Payment processing (we never see your full card details)
• SendGrid: Transactional email delivery
• Google: Optional OAuth sign-in

This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies.

12. Children's Privacy

The Service is intended for users who are at least 18 years old and is not directed at children under 13. We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will delete it promptly.

13. International Transfers

Your information is processed and stored in the United States. If you access the Service from outside the United States, you consent to the transfer and processing of your information in the United States, which may have different data protection laws than your country of residence.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a new "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: