1. About This Policy
AllApprovedHere, LLC is a licensed mortgage broker operating in Arizona, California, Washington, Nevada, and Colorado. Because we collect, use, and share Non-Public Personal Information (NPI) in connection with mortgage loan origination, we are subject to the Gramm-Leach-Bliley Act (GLBA), the FTC Safeguards Rule, the Fair Credit Reporting Act (FCRA), and applicable state privacy laws.
This Policy describes what information we collect, how we use and share it, how we protect it, and what rights you have. For a quick summary of your rights, visit our Privacy Center.
2. GLBA Privacy Notice (Annual Notice to Customers)
FACTS: What Does AllApprovedHere Do With Your Personal Information?
| Why? | Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do. |
| What? | The types of personal information we collect and share depend on the product or service you have with us. This information can include: Social Security number and income; account balances and payment history; credit history and credit scores; employment information; and property information. |
| How? | All financial companies need to share customers' personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers' personal information; the reasons AllApprovedHere chooses to share; and whether you can limit this sharing. |
| Reasons we can share your personal information | Does AAH share? | Can you limit this sharing? |
|---|---|---|
| For our everyday business purposes — such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus | Yes | No |
| For our marketing purposes — to offer our products and services to you | Yes | No |
| For joint marketing with other financial companies | No | We don't share |
| For our affiliates' everyday business purposes — information about your transactions and experiences | No | We don't share |
| For our affiliates' everyday business purposes — information about your creditworthiness | No | We don't share |
| For nonaffiliates to market to you | No | We don't share |
Who we are
AllApprovedHere, LLC is a licensed mortgage broker (NMLS #1502253) operating in AZ, CA, WA, NV, and CO.
How to opt out
To limit our sharing, contact us at [email protected] or submit a Data Rights Request.
How we protect your information
We use TLS 1.3 encryption in transit, AES-256 encryption at rest, multi-factor authentication for all staff, and role-based access controls. We maintain a written Information Security Program per FTC Safeguards Rule §314.4.
How we collect your information
We collect your personal information when you apply for a loan, give us your contact information, or allow us to access your credit report. We also collect from credit bureaus, affiliates, or other companies.
3. Information We Collect
3.1 Information You Provide Directly
When you use our website, complete a pre-qualification form, or apply for a loan, we may collect:
- Full name, date of birth, Social Security Number (SSN)
- Contact information: email address, phone number, mailing address
- Employment information: employer name, income, employment history
- Financial information: bank account details, assets, liabilities, monthly obligations
- Property information: address, purchase price, estimated value
- Loan preferences: loan type, amount, purpose, desired terms
- Government-issued identification documents
- Tax returns, pay stubs, W-2s, bank statements, and other financial documents
3.2 Information Collected Automatically
When you visit our website, we automatically collect IP address, browser type, operating system, device type, pages visited, time spent, referring URL, and cookie identifiers (subject to your cookie consent preferences).
3.3 Information from Third Parties
We may receive information from credit reporting agencies (with your authorization), real estate agents and referring partners, appraisers and title companies, government databases for identity verification, and lenders and wholesale partners for loan matching.
4. How We Use Your Information
We use your personal information for: loan origination and processing; pre-qualification; communications and required disclosures; marketing (you may opt out at any time); legal compliance under GLBA, FCRA, RESPA, TRID, ECOA, and other applicable laws; fraud prevention and security; and business operations including analytics and quality assurance.
6. Fair Credit Reporting Act (FCRA) Rights
When you apply for a mortgage loan, we may obtain a consumer report from one or more consumer reporting agencies. Under the Fair Credit Reporting Act (15 U.S.C. §1681), you have the right to know if a consumer report was used against you, to access a free copy of your credit report, to dispute inaccurate information, and to limit prescreened offers by calling 1-888-567-8688 or visiting optoutprescreen.com.
Credit reports obtained in connection with your loan application are retained for 25 months as required by FCRA regulations.
7. TCPA Consent & Communications
By submitting a pre-qualification form or loan inquiry on our website, you expressly consent under the Telephone Consumer Protection Act (TCPA, 47 U.S.C. §227) to receive autodialed or pre-recorded calls and text messages (SMS) at the phone number you provide. This consent is not a condition of purchasing any goods or services. You may revoke consent at any time by replying STOP to any SMS, calling (602) 628-1231, or emailing [email protected].
All marketing emails comply with the CAN-SPAM Act (15 U.S.C. §7701). Every marketing email includes an unsubscribe link. We honor opt-out requests within 10 business days.
8. Data Retention
We retain your personal information for the following periods:
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| Closed loan files | 7 years | RESPA, TILA, state law |
| Declined / withdrawn applications | 25 months | ECOA, FCRA |
| Credit reports | 25 months | FCRA §1681b |
| Pre-qualification inquiries (no application) | 3 years | Business records |
| Pre-underwriting NPI documents (partner portal) | 90 days | GLBA data minimization |
| Audit logs (NPI access records) | 3 years | FTC Safeguards Rule §314.4(c)(8) |
| GLBA notice delivery records | 3 years | GLBA / Regulation P |
| Marketing consent records | 5 years | TCPA, CAN-SPAM |
| Website analytics / cookies | 13 months | Business operations |
Pre-underwriting NPI documents uploaded through our Partner Portal are automatically purged from our servers after 90 days via our weekly automated retention cleanup job.
9. Security Practices
We maintain a written Information Security Program as required by the FTC Safeguards Rule (16 CFR Part 314). Our security measures include: TLS 1.3 encryption in transit; AES-256 encryption at rest; role-based access controls; multi-factor authentication for all staff; comprehensive audit logging of all NPI access (actor, timestamp, IP address); vendor security assessments and data processing agreements; a written incident response plan with 30-day breach notification; annual security risk assessments per §314.4(b); and annual employee privacy and security training.
10. Your Privacy Rights
Depending on your state of residence, you may have the following rights:
| Right | Description | Available |
|---|---|---|
| Right to Know / Access | Request a copy of the personal information we hold about you | CA · CO · WA |
| Right to Delete | Request deletion of your personal information (subject to legal retention requirements) | CA · CO · WA |
| Right to Correct | Request correction of inaccurate personal information | CA · CO · WA |
| Right to Opt-Out of Sale/Sharing | Opt out of the sale or sharing of your personal information | CA · CO · WA |
| Right to Data Portability | Receive your personal information in a portable, machine-readable format | CA · CO · WA |
| Right to Non-Discrimination | We will not discriminate against you for exercising your privacy rights | All states |
| GLBA Opt-Out | Limit sharing of your NPI with non-affiliated third parties for marketing purposes | All states |
To exercise any of these rights, submit a Data Rights Request. We will respond within 45 days (extendable by an additional 45 days with notice).
11. California Residents — CCPA / CPRA
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) (Cal. Civ. Code §1798.100 et seq.), including the right to know, delete, correct, opt-out of sale/sharing, limit use of sensitive personal information, and non-discrimination.
In the preceding 12 months, we have collected: identifiers (name, SSN, email, phone, IP address); financial information; commercial information (loan applications); internet/electronic network activity; geolocation data; professional/employment information; and inferences drawn to create a profile (loan program eligibility).
To exercise your CCPA/CPRA rights, submit a Data Rights Request or email [email protected]. We will verify your identity before processing your request.
Note: Certain personal information collected in connection with mortgage loan origination is exempt from CCPA under the GLBA exemption (Cal. Civ. Code §1798.145(e)). However, we extend CCPA rights to all personal information to the extent permitted by law.
12. Colorado Residents — Colorado Privacy Act (CPA)
If you are a Colorado resident, you have rights under the Colorado Privacy Act (C.R.S. §6-1-1301 et seq.), effective July 1, 2023, including the right to access, correct, delete, and port your personal data, and the right to opt out of targeted advertising, sale of personal data, and profiling. To exercise these rights or appeal a denial, submit a Data Rights Request.
13. Washington Residents — Washington Privacy Act (WPA)
If you are a Washington resident, you have rights under the Washington Privacy Act (RCW 19.375), effective July 31, 2023, including the right to access, correct, delete, and port your personal data, and the right to opt out of targeted advertising, sale of personal data, and profiling. To exercise these rights, submit a Data Rights Request.
14. Do Not Sell or Share My Personal Information
We do not sell your personal information to third parties for monetary consideration. We do not share your personal information for cross-context behavioral advertising purposes.
To opt out of any sharing of your NPI with non-affiliated third parties for marketing purposes (as permitted under GLBA), you may submit a Data Rights Request selecting "Opt-Out of Sharing," email [email protected] with subject line "Do Not Sell or Share My Information," or call (602) 628-1231. We will process your opt-out request within 15 business days.
15. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected information from a child, please contact us immediately at [email protected] and we will delete it promptly.
16. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or regulatory guidance. We will post the updated Policy on this page with a revised "Last Updated" date. For material changes, we will provide additional notice as required by GLBA / Regulation P.
17. Contact Us
For privacy-related questions, requests, or concerns, contact our Privacy Officer:
AllApprovedHere, LLC — Privacy Officer
Email: [email protected]
Phone: (602) 628-1231
NMLS Consumer Access: NMLS #1502253
This is not a commitment to lend. All loans subject to underwriting approval. Equal Housing Lender. AllApprovedHere, LLC NMLS #1502253. Licensed in AZ, CA, NV, WA, CO.