Privacy Policy
Last updated October 31, 2026. The short version: what we record, in plain words.
Who we are
MOZE ("MOZE", "we", "us") is software that mortgage brokerages use to run their business. It is provided by [LEGAL ENTITY NAME], [STATE] [LLC/corporation], [ADDRESS]. Questions: [email protected].
Two kinds of information
Brokerage data. When a mortgage brokerage uses MOZE, the information it puts in about its borrowers and loans (for example names, contact details, loan details and documents) belongs to that brokerage. We process it only on the brokerage's instructions, as its service provider, under our agreement with it and the Gramm-Leach-Bliley Act. If you are a borrower, the brokerage you work with decides how your information is used; please contact them first.
Our own data. Information about people who visit our website, try the public demo, ask for a demo or sign up as customers. This policy mainly covers this second kind.
What we collect
- Details you give us: your name, email, phone number, company, and anything you write in a form.
- Account details: usernames, roles, and a scrambled (hashed) version of your password; we never store passwords in readable form.
- Device and usage details: IP address, approximate location (country, and city when available), browser and device type, screen size, time zone, pages viewed, buttons clicked, time on each page, how far you scroll, errors and page speed inside MOZE (not what you type into fields), and the date and time.
- Billing details: handled by our payment processor (Stripe). We receive the plan, status and the last four digits of a card; we never receive full card numbers.
How we use it
- To provide, secure and support MOZE, including detecting misuse and unauthorized access.
- To answer your requests, set up demos and accounts, and send service messages.
- To improve MOZE, using aggregated or de-identified information where we can.
- To bill customers and keep business records, and to comply with law.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
Artificial intelligence
Some MOZE features use an AI model (Anthropic's Claude) to explain data and draft text. The AI receives only what the feature needs; it never receives Social Security numbers, dates of birth, phone numbers or email addresses, and it never sends messages or makes decisions about anyone. Our AI provider does not use this information to train its models under its commercial terms.
Who we share it with
Only service providers that help us run MOZE, under contracts that limit their use of the information:
- Hosting and network security (for example [HOSTING PROVIDER] and Cloudflare).
- AI processing (Anthropic), payments (Stripe), and, when a brokerage turns them on, texting (Twilio) and Microsoft 365 (calendar and email).
- Encrypted backup storage ([BACKUP STORAGE PROVIDER]); backups are encrypted before they leave our servers.
- Internal alerts to the MOZE team (Discord): short notices such as a visitor's name and city when someone tries the demo, joins the launch waitlist or signs in, and security warnings. No Social Security numbers, birth dates or loan details are sent.
- Uptime monitoring (for example UptimeRobot), which only checks that our site answers and receives no personal information.
We may also disclose information when the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the business (with this policy continuing to apply).
How long we keep it
- Demo visitors' IP address, device and location details: removed after 12 months. The record that someone accepted our Terms is kept.
- Page and click activity: about 13 months.
- Brokerage data: for as long as the brokerage is a customer, then returned or deleted as our agreement with it says (normally within 60 days), apart from encrypted backups that expire on their normal schedule.
How we protect it
Encrypted connections (HTTPS); Social Security numbers encrypted at rest; encrypted backups; two-step sign-in; sign-out after inactivity; role-based access; a full audit trail of changes, sign-ins and exports; a separate database for each brokerage; and a written information security program and incident response plan. No system is perfectly secure, but we work to keep the risk low and will tell affected customers promptly if something goes wrong.
Your choices and rights
You can ask us to access, correct or delete personal information we hold about you as our own data, or to stop contacting you, by emailing us. Depending on where you live (for example California and other states with privacy laws), you may have additional rights; we will not treat you differently for using them. For information a brokerage put into MOZE, please contact that brokerage; we will help them respond.
Children
MOZE is for businesses and is not directed to children under 16. We do not knowingly collect their information.
Changes
We will post changes here and update the date above. If a change is significant, we will tell customers in advance.
Contact
[email protected] · [LEGAL ENTITY NAME], [ADDRESS]