Privacy Policy

QuickConnex LLC - Renovation Loan Management Platform

Effective Date: February 1, 2026 | Version: 1.0 | Last Updated: January 25, 2026

1. Information We Collect

1.1 Personal Information You Provide

Account Information:

• Name, email address, phone number, and mailing address
• Job title, company information, and professional role
• Professional license numbers and certifications (optional but recommended)
• Government-issued identification numbers (where required for compliance)
• Payment information (credit card or bank account details)

Renovation Loan Information:

• Loan application details and financial information
• Property addresses and renovation project descriptions
• Contractor information and vendor details
• Inspection reports and property assessments
• Project timelines, budgets, and progress updates

Communications:

• Messages sent through the Platform
• Customer support inquiries and responses
• Feedback, suggestions, and survey responses
• Email correspondence and phone call records

1.2 Information Collected Automatically

Usage Data:

• IP address and device identifiers
• Browser type, operating system, and device information
• Platform usage patterns and feature interactions
• Login times, page views, and session duration
• Search queries and navigation paths

Technical Information:

• Cookies and similar tracking technologies
• Log files and error reports
• Performance metrics and analytics data
• Security event logs and access records

Location Information:

• IP-based geographic location
• Property addresses for renovation projects
• Service area information for contractors and inspectors

1.3 Information from Third Parties

With Your Authorization:

• Credit reports and financial verification data
• Property valuation and appraisal information
• Background check results (for certain user types)
• Bank account and payment verification
• Professional license verification data

From Integrated Services:

• Data from third-party tools you connect to the Platform
• Information from business partners and referral sources
• Public records and property databases
• Industry databases and verification services

1.4 Role-Specific Data Collection

• Lenders: NMLS registration and licensing information, financial institution details, loan portfolio and underwriting information, compliance monitoring and audit records
• Borrowers: Personal and financial information for loan applications, employment and income verification data, asset information and debt obligations, renovation project details
• Contractors: Business registration and licensing information, insurance certificates and bonding information, work history, references, and portfolio samples
• Inspectors: Professional certifications and licensing data, inspection reports and photographic evidence, technical findings and recommendations
• Underwriters: Professional credentials and authorization levels, risk assessment data and decision records, regulatory compliance documentation

2. How We Use Your Information

2.1 Platform Services

Core Functionality:

• Providing access to the renovation loan management platform
• Processing loan applications and managing project workflows
• Facilitating communication between platform users
• Storing and organizing project documentation and photos
• Generating reports and analytics for project tracking

User Management:

• Creating and maintaining user accounts
• Authenticating users and managing access permissions
• Providing role-based functionality for different user types
• Managing subscription billing and payment processing

2.2 GLBA Compliance and Financial Services

As a Service Provider under GLBA:

• Processing non-public personal information for loan management
• Implementing appropriate safeguards for financial data
• Supporting customer compliance with financial privacy regulations
• Maintaining confidentiality of consumer financial information
• Providing secure transmission and storage of financial data

Regulatory Support:

• Assisting with RESPA, TILA, and FCRA compliance requirements
• Supporting audit and examination procedures
• Maintaining records for regulatory reporting
• Providing data for compliance monitoring and reporting

2.3 Business Operations

• Responding to inquiries and providing technical assistance
• Analyzing usage patterns to enhance functionality
• Processing payments and managing subscriptions
• Conducting business analytics and performance monitoring
• Compliance with legal and regulatory requirements

3. How We Share Your Information

3.1 Authorized Platform Users

• Sharing information with authorized users under your account
• Providing role-based access to relevant project information
• Facilitating collaboration between team members
• Sharing relevant information between lenders, borrowers, contractors, inspectors, and underwriters

3.2 Service Providers and Business Partners

Technical Service Providers:

• Cloud hosting and data storage providers (US-based only)
• Payment processing and billing service providers
• Security monitoring and cybersecurity service providers
• Analytics and performance monitoring tools

Business Partners:

• Integration partners for third-party tools and services
• Professional service providers for legal and compliance support
• Verification services for license and background checks
• Industry associations and certification bodies

3.3 Legal and Regulatory Requirements

• Disclosures required by federal and state laws
• Regulatory examinations and audit requests
• Court orders, subpoenas, and legal process
• Law enforcement investigations and inquiries
• FinCEN reporting requirements (if applicable)
• State regulatory agencies for professional licensing

3.4 Business Transactions

• Mergers, acquisitions, or sale of business assets
• Corporate restructuring or reorganization
• Due diligence processes for business transactions
• Successor entities in business transfers

3.5 What We Do NOT Share

We do not:

• Sell your personal information to third parties
• Share information for third-party marketing purposes
• Disclose information to unauthorized parties
• Use your information for purposes incompatible with this policy

4. Data Security and Protection

4.1 Security Measures

Technical Safeguards:

• 256-bit SSL encryption for data transmission
• AES-256 encryption for data at rest
• Multi-factor authentication capabilities
• Regular security audits and penetration testing
• Intrusion detection and monitoring systems
• Secure backup and disaster recovery procedures

Administrative Safeguards:

• Employee background checks and security training
• Role-based access controls and permissions
• Regular security policy reviews and updates
• Incident response and breach notification procedures
• Vendor security assessments and management
• SOC 2 Type II compliance certification

Physical Safeguards:

• Secure data centers with restricted access
• Environmental controls and monitoring
• Redundant power and network connectivity
• Secure disposal of storage media

4.2 GLBA Security Program

• Implementation of GLBA Safeguards Rule requirements
• Regular risk assessments for financial information
• Employee training on financial privacy requirements
• Vendor management for financial data handling
• Continuous monitoring for security threats
• Annual security program reviews and updates

4.3 Data Location and Sovereignty

United States Only:

• All data stored exclusively in US-based data centers
• No transfer of personal information outside the United States
• Compliance with US data sovereignty requirements
• Backup and disaster recovery systems located in the US

4.4 Breach Notification

In the Event of a Security Incident:

• Immediate investigation and containment of breaches
• Notification to affected customers within 72 hours
• Detailed information about the nature and scope of the breach
• Steps taken to mitigate harm and prevent future incidents
• Cooperation with regulatory investigations and requirements
• Assistance with customer notification obligations

5. Your Privacy Rights and Choices

5.1 Access and Correction Rights

You Have the Right To:

• Access personal information we maintain about you
• Correct inaccurate or incomplete information
• Update your account information and preferences
• Request information about how your data is used
• Review data sharing and processing activities

How to Exercise These Rights:

• Log into your account and update information directly
• Contact [email protected] with requests
• Submit written requests to our mailing address
• Call our customer support line during business hours

5.2 Communication Preferences

• Account notifications and security alerts (cannot opt out)
• Platform updates and feature announcements
• Educational content and best practices
• Marketing and promotional communications (opt-out available)

5.3 Data Retention and Deletion

Active Account Data:

• Personal information retained during active subscription
• Loan and project data maintained for business purposes
• Communication records kept for customer support
• Usage data retained for platform improvement

Post-Termination:

• Data export available for 30 days after termination
• Most personal information deleted after 90 days
• Some information retained for legal compliance
• Financial records retained per regulatory requirements

Deletion Requests:

• Submit requests to [email protected]
• Verification required for security purposes
• Some information cannot be deleted due to legal requirements
• Confirmation provided when deletion is complete

6. Cookies and Tracking Technologies

6.1 Types of Cookies We Use

Essential Cookies:

• Authentication and session management
• Security features and fraud prevention
• Platform functionality and performance
• Load balancing and system operation

Analytics Cookies:

• Usage patterns and feature adoption
• Performance monitoring and optimization
• Error tracking and system diagnostics
• User experience improvement

Preference Cookies:

• User interface customization
• Language and region settings
• Dashboard layout and preferences
• Notification and communication settings

6.2 Third-Party Cookies

• Payment processing providers
• Analytics and monitoring tools
• Customer support platforms
• Security and fraud prevention services

6.3 Do Not Track Signals

Currently, we do not respond to "Do Not Track" browser signals, but we provide granular privacy controls through account settings and communication preferences.

7. Children's Privacy

• The Platform is intended for users 18 years and older
• We do not knowingly collect information from children under 18
• Account registration requires age verification
• If we learn of child information collection, we will immediately delete it

8. International Data Transfers

• All data processing occurs within the United States
• No routine transfers to other countries
• US law governs all data handling practices
• Remote access by authorized employees traveling abroad uses secure VPN connections

9. California Privacy Rights (CCPA)

9.1 California Consumer Privacy Act

If You Are a California Resident:

• Right to know what personal information we collect
• Right to delete personal information (subject to exceptions)
• Right to opt out of sale (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

9.2 Exercising CCPA Rights

How to Submit Requests:

• Email: [email protected]
• Phone: (720) 340-2126
• Mail: QuickConnex LLC, DPO, 55 Public Square, Suite 2100, Cleveland, OH 44113

Verification Requirements:

• Account information verification
• Identity confirmation for deletion requests
• Response within 45 days (extendable to 90 days)
• No charge for requests (up to twice per year)

9.3 California Shine the Light

Under California Civil Code Section 1798.83, California residents may request information about our disclosure of personal information for direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

10. Changes to This Privacy Policy

10.1 Policy Updates

We may update this policy to reflect changes in our business practices, comply with new legal requirements, enhance privacy protections, or improve clarity and transparency.

10.2 Notice of Changes

• Material Changes: 60 days advance notice via email and prominent notice on the Platform
• Minor Changes: 30 days advance notice with updated policy posted on website
• Continued use constitutes acceptance
• Previous versions archived for reference

11. Contact Information

11.1 Privacy Officer

For Privacy Questions and Requests:

• Email: [email protected]
• Phone: (720) 340-2126
• Hours: Monday-Friday, 9 AM - 6 PM EST

11.2 Mailing Address

QuickConnex LLC
DPO
55 Public Square, Suite 2100
Cleveland, OH 44113
United States

11.3 Response Times

• General questions: 48 hours
• Access requests: 30 days
• Deletion requests: 45 days
• CCPA requests: 45 days (extendable to 90)

11.4 Data Protection Officer

For GLBA and Financial Privacy Matters:

• Email: [email protected]
• Phone: (720) 340-2126