Privacy Policy

Effective October 19, 2026

This Privacy Policy describes how Anthony Rega, also doing business as loanfactory.io (together with the affiliated companies listed below, "we," "us," or "our") collects, uses, discloses, and protects information when you visit our websites (including anthonyrega.cloud and loanfactory.io), use our forms, applications, borrower portal, or calculators, or communicate with us by phone, text, email, or chat (the "Services").

Mobile information and SMS consent

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except for aggregators and providers of the text message services (such as Twilio and wireless carriers) as needed to deliver messages. We do not sell, rent, or trade your phone number or SMS consent.

Information we collect

• Identifiers and contact data: name, phone, email, mailing and property address, IP address, device identifiers.
• Financial and loan information: income, employment, assets, liabilities, credit information, Social Security number, date of birth, property and transaction details, and documents you upload (e.g., pay stubs, bank statements, tax returns, IDs).
• Communications: content of texts, emails, chats, voicemails, and calls, including recordings and transcripts.
• Usage and device data: pages viewed, clicks, referring URLs, browser type, approximate location, and form interactions.
• Consent records: the date, time, IP address, page, and exact consent language you agreed to.
• Information from others: credit bureaus, lenders, real estate agents, lead providers, public records, and review platforms.

Cookies, tracking, analytics and pixels

We and our service providers use cookies, local storage, pixels, tags, and similar technologies to operate the site, remember preferences, measure performance, prevent fraud, and deliver and measure advertising (for example Google Analytics, Google Ads, and Meta Pixel). You can control cookies through your browser settings; blocking some cookies may affect site functionality. Where required by law we honor Global Privacy Control (GPC) signals as an opt-out of sale/sharing for the browser sending them.

Artificial intelligence and voice AI

We use artificial intelligence tools, including AI-powered chat, AI-generated or artificial voice agents, automated text and email drafting, call transcription and summarization, and document data extraction, to respond to inquiries, schedule appointments, qualify and process loan requests, and improve our Services. AI tools may process your communications and information through providers such as OpenAI or Google. AI output may be inaccurate and is not a loan decision; licensed humans make all credit decisions. You may ask to speak with a human at any time.

Call recording and transcription

Calls with us, including calls handled by AI voice agents, may be monitored, recorded, and transcribed for quality, training, compliance, and record-keeping. Where required, we will provide notice at the start of a call; by continuing the call you consent to recording.

How we use information

• To respond to you, provide quotes, estimates, pre-qualifications, and process loan applications;
• To send transactional, informational, and (with consent) marketing communications by phone, text, and email;
• To operate, secure, analyze, and improve our Services, including with AI;
• To comply with legal, regulatory, and investor requirements; and to prevent fraud.

How we share information

We share information with service providers who process it on our behalf under contract, including: Twilio (calls/SMS), Google (Gmail, Calendar, Workspace, analytics), SendGrid / Mailgun (email delivery), Stripe (payments), OpenAI and other AI providers, Meta (advertising and lead forms), and hosting, CRM, and storage providers. We also share loan information with lenders, investors, credit bureaus, appraisers, title and settlement agents, and others as needed to process your loan, with the affiliated companies listed below, and as required by law. We do not share mobile numbers or SMS opt-in data for third-party marketing.

Financial privacy (GLBA)

Nonpublic personal information you provide in connection with a mortgage loan is also governed by the Gramm-Leach-Bliley Act and the applicable privacy notice of the lender or broker handling your loan, which explains your rights to limit certain sharing. If that notice conflicts with this policy for loan information, that notice controls.

Your state privacy rights

Depending on where you live (including California under the CCPA/CPRA, and Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and other states), you may have rights to know, access, correct, delete, and obtain a copy of your personal information; to opt out of the sale or sharing of personal information and targeted advertising; to limit use of sensitive personal information; and to appeal a decision. Information covered by GLBA may be exempt. We do not sell personal information for money. To exercise rights, email our contact form. We will verify your request and will not discriminate against you for exercising your rights. You may use an authorized agent. California residents may also request information under the "Shine the Light" law.

Notice at collection (summary)

We collect the categories listed above (identifiers, contact data, financial and loan data, sensitive personal information such as SSN and government ID, communications and recordings, device and usage data, approximate location, and inferences about product interest) for the purposes listed in "How we use information." We do not sell personal information and we do not use sensitive personal information to infer characteristics about you.

Sensitive personal information

We use SSN, date of birth, government ID, account numbers, and similar data only to process loans, verify identity, prevent fraud, and meet legal requirements. These fields are encrypted at rest and access is restricted.

Location information

We may infer your approximate location from your IP address or the property address you provide. We do not collect precise GPS location without your permission.

Do Not Track

Browsers' "Do Not Track" signals have no common standard, so we do not respond to them. We do honor Global Privacy Control as described above.

Business transfers

If we are involved in a merger, acquisition, change of brokerage or lender, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this policy.

Google user data (Limited Use)

When you connect a Google account to our tools (for example Gmail or Google Calendar), our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We request only the access needed for the feature you turn on, we do not sell Google user data, we do not use it for advertising, and we do not use it to develop, improve, or train generalized AI or machine-learning models.

Retention periods

We keep information only as long as needed for the purposes above or as the law requires, then delete or de-identify it. Typical periods:

• Loan applications, disclosures, and loan files: generally at least 3 years after closing or denial, longer (up to 7+ years) where federal, state, or investor rules require.
• Credit reports and adverse-action records: at least 25 months after action is taken, or longer as required.
• Call recordings and transcripts: about 2 years, unless needed longer for a dispute or legal hold.
• Marketing leads with no application: up to 3 years after last contact.
• Consent, opt-out, and Do Not Call records: at least 5 years after the last communication, to prove compliance.
• Website logs and analytics: generally 26 months or less.

Your choices and access

You can update your information or ask for a copy by emailing us; unsubscribe from emails using the link in any email; opt out of texts by replying STOP; and ask us to stop calling by telling us on a call or emailing us.

Security

We use administrative, technical, and physical safeguards, including encryption in transit (HTTPS), encryption of sensitive fields such as SSN and date of birth, and access controls. No system is completely secure; please do not send sensitive information by unencrypted email or text—use the secure borrower portal.

Children

Our Services are not directed to children under 18, and we do not knowingly collect their information.

Text message disclosure

See our SMS Terms. Mobile numbers and SMS consent are never shared with third parties or affiliates for their marketing.

Affiliated companies

This policy and any consent you give apply to Anthony Rega, also doing business as loanfactory.io and the following affiliated companies:

• Loan Factory, Inc. — Mortgage broker with which Anthony Rega is a licensed loan officer

Changes and contact

We may update this policy and will post the new effective date here. Questions: our contact form · Loan Factory, Inc., 2195 Tully Road, San Jose, CA 95122.