Privacy Policy
Last Updated: February 12, 2026 Version: 2.0
MAX Loan Technologies, Inc. ("MAX Loan Technologies," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at maxloantechnologies.com and use our services.
1. Data Controller Information
Identity of Data Controller: MAX Loan Technologies, Inc.
Contact Information:
- Address: 123 Innovation Drive, Suite 400, Austin, TX 78701
- Email: privacy@maxloantechnologies.com
- Phone: (512) 555-0100
Data Protection Contact: For privacy-related inquiries or to exercise your data protection rights, contact our privacy team at privacy@maxloantechnologies.com. While we have not appointed a Data Protection Officer as not required under our current processing activities, our privacy team will address all data protection matters promptly.
2. Categories of Personal Data We Collect
We collect the following categories of personal data:
Information You Provide Directly
- Contact Information: Name, email address, phone number, company name, job title
- Account Information: Username, password, account preferences
- Communication Data: Messages, feedback, and inquiries submitted through contact forms
- Demo Request Information: Business needs, company size, timeline for implementation
- Financial Information: For customers using our lending services, this may include income, employment, and credit-related data (handled by our licensed lending partners)
Information Collected Automatically
- Technical Data: IP address, browser type and version, operating system, device identifiers
- Usage Data: Pages visited, time spent on pages, features used, clickstream data
- Location Data: General geographic location based on IP address
- Referral Data: Referring website, search terms used to find our site
Information from Third Parties
- Business Partners: Information from our technology and business partners
- Public Sources: Publicly available business information
- Marketing Partners: Information from marketing and advertising partners (with your consent)
3. Purposes and Legal Basis for Processing
We process your personal data for the following purposes and legal bases:
Contract Performance
- Providing access to our software products and services
- Processing demo requests and trial activations
- Managing your account and providing customer support
- Delivering requested information and communications
Legitimate Interests
- Improving our website, products, and services
- Analyzing usage patterns and optimizing user experience
- Detecting and preventing fraud, security incidents, and abuse
- Conducting business analytics and market research
- Sending service-related communications
Consent
- Sending marketing communications and newsletters
- Using non-essential cookies for analytics and advertising
- Processing data for purposes beyond those originally disclosed
Legal Obligations
- Complying with applicable laws and regulations
- Responding to legal process and government requests
- Maintaining records as required by law
- Fulfilling tax and accounting requirements
4. Recipients of Personal Data
We may share your personal data with the following categories of recipients:
Service Providers
- Cloud Hosting: Microsoft Azure (United States)
- Email Services: Providers assisting with transactional and marketing emails
- Analytics: Services that help us understand website usage
- Customer Support: Tools that enable us to respond to inquiries
Business Partners
- Licensed lending partners (for mortgage services, with your consent)
- Integration partners (when you connect third-party services)
- Professional advisors (legal, accounting, audit)
Legal and Regulatory
- Law enforcement agencies when required by law
- Regulatory authorities in response to lawful requests
- Courts and legal processes as necessary
Corporate Transactions
- In connection with mergers, acquisitions, or sale of assets
- Successors or affiliates as part of corporate restructuring
We require all recipients to maintain confidentiality and implement appropriate security measures.
5. International Data Transfers
Your personal data is primarily processed in the United States. If you are located outside the United States, please be aware that your data will be transferred to and processed in the United States.
Transfer Safeguards
- Standard Contractual Clauses: We use EU-approved Standard Contractual Clauses for transfers from the EEA
- Supplementary Measures: We implement technical and organizational measures to protect transferred data
- Adequacy Decisions: Where applicable, we rely on adequacy decisions by relevant authorities
For more information about our international transfer safeguards, contact privacy@maxloantechnologies.com.
6. Data Retention Periods
We retain personal data only for as long as necessary for the purposes described in this policy:
| Data Category | Retention Period | |---------------|-----------------| | Contact form submissions | 2 years from submission | | Demo request information | 2 years from request | | Customer account data | Duration of relationship + 7 years | | Marketing preferences | Until consent is withdrawn | | Technical/usage logs | 90 days | | Financial records | 7 years (legal requirement) | | Support communications | 3 years from resolution |
After the retention period expires, we securely delete or anonymize your data.
7. Your Rights Under GDPR
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights:
Right to Access
You have the right to request a copy of the personal data we hold about you.
Right to Rectification
You have the right to request correction of inaccurate or incomplete personal data.
Right to Erasure (Right to be Forgotten)
You have the right to request deletion of your personal data in certain circumstances, including when:
- The data is no longer necessary for the purposes collected
- You withdraw consent (where consent is the legal basis)
- You object to processing and there are no overriding legitimate grounds
Right to Restrict Processing
You have the right to request that we limit how we use your data while we address your concerns.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
Right to Object
You have the right to object to processing based on legitimate interests, including profiling. You may object to direct marketing at any time.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or place of alleged infringement.
How to Exercise Your Rights
To exercise any of these rights, contact us at:
- Email: privacy@maxloantechnologies.com
- Address: MAX Loan Technologies, Inc., Attn: Privacy Team, 123 Innovation Drive, Suite 400, Austin, TX 78701
We will respond to your request within 30 days, as required by law.
8. Automated Decision-Making
AI-Assisted Decisions
Our MAX Approvals product uses artificial intelligence to assist in mortgage pre-approval decisions. These AI-assisted decisions:
- Are preliminary assessments only, not final lending decisions
- Are always subject to human review by licensed lending professionals
- Do not solely determine whether you receive a loan
- Consider factors disclosed at the time of application
Your Rights Regarding Automated Decisions
You have the right to:
- Request human intervention in automated decisions
- Express your point of view
- Contest automated decisions that significantly affect you
Final lending decisions are made by licensed lending partners in compliance with fair lending laws.
9. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience on our website.
Categories of Cookies
Essential Cookies Required for the website to function. These enable core functionality such as security, network management, and accessibility. You cannot opt out of essential cookies.
Analytics Cookies Help us understand how visitors use our site. We use this data to improve our website and services. These cookies are optional.
Marketing Cookies Used to show relevant advertisements and measure campaign effectiveness. These cookies are optional and require your consent.
Managing Your Preferences
You can manage your cookie preferences at any time. When you first visit our website, you will see a cookie consent banner where you can accept, reject, or customize your preferences.
To change your preferences later, click the "Cookie Preferences" link in our website footer or clear your browser cookies to see the consent banner again.
For more information about the specific cookies we use, please contact us at privacy@maxloantechnologies.com.
10. GLBA Compliance (Gramm-Leach-Bliley Act)
As a provider of technology services to the mortgage industry, we comply with the Gramm-Leach-Bliley Act requirements for handling nonpublic personal information (NPI).
Financial Privacy
- We collect financial information only as necessary to provide our services
- We implement comprehensive information security programs
- We limit sharing of NPI to service providers with contractual protections
- Our licensed lending partners maintain separate GLBA privacy notices for mortgage transactions
Information Security
We maintain administrative, technical, and physical safeguards to protect nonpublic personal information, including:
- Encryption of data in transit and at rest
- Access controls and authentication requirements
- Regular security assessments and audits
- Employee training on data protection
Opt-Out Rights
You may opt out of certain information sharing by contacting us at privacy@maxloantechnologies.com.
11. California Privacy Rights (CCPA/CPRA)
This section applies to California residents and supplements the information in this Privacy Policy pursuant to the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).
Categories of Personal Information Collected (Last 12 Months)
| Category | Examples | Collected | |----------|----------|-----------| | Identifiers | Name, email, IP address, account name | Yes | | Commercial Information | Demo requests, service inquiries, products considered | Yes | | Internet Activity | Browsing history on our site, search history, interaction data | Yes | | Professional Information | Company name, job title, industry | Yes | | Inferences | Interests, preferences, characteristics derived from activity | Yes | | Geolocation | General location based on IP address | Yes | | Sensitive Personal Information | Account login credentials | Yes |
Sources of Personal Information
- Directly from you: Contact forms, account registration, demo requests
- Automatically: Cookies, analytics, server logs
- Third parties: Business partners, marketing partners, public sources
Business Purposes for Collection
- Provide and improve our services
- Respond to inquiries and requests
- Marketing and advertising (with consent)
- Security and fraud prevention
- Legal compliance and enforcement
Categories of Third Parties
We may disclose personal information to:
- Service providers (hosting, analytics, email, support)
- Business partners (with your consent)
- Affiliates within our corporate family
Sale and Sharing of Personal Information
We do not sell your personal information.
We may share personal information for cross-context behavioral advertising with your consent. You have the right to opt out of this sharing.
Do Not Sell or Share My Personal Information
To opt out of the sale or sharing of your personal information:
- Email us at privacy@maxloantechnologies.com
- Include "Do Not Sell or Share" in the subject line
We will process your request within 15 business days.
California Consumer Rights
As a California resident, you have the following rights:
Right to Know You may request information about the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties with whom we share it.
Right to Delete You may request deletion of personal information we have collected from you, subject to certain exceptions.
Right to Correct You may request correction of inaccurate personal information.
Right to Opt-Out You may opt out of the sale or sharing of your personal information.
Right to Limit Use of Sensitive Information You may limit our use of sensitive personal information to purposes necessary to provide our services.
Right to Non-Discrimination We will not discriminate against you for exercising your privacy rights.
How to Submit Requests
To exercise your California privacy rights:
- Email: privacy@maxloantechnologies.com
- Contact Form: Visit our Contact page
Response Timeline: We will respond to verifiable requests within 45 days. If we need more time (up to 90 days total), we will inform you of the reason.
Verification
We will verify your identity before processing your request. We may ask you to:
- Confirm your email address
- Provide information matching our records
- Submit a signed declaration under penalty of perjury (for deletion requests)
Authorized Agents
You may designate an authorized agent to make requests on your behalf. We may require:
- Written authorization signed by you
- Verification of your identity
- Verification of the agent's authority
12. Data Security
We implement comprehensive security measures to protect your personal data:
Technical Safeguards
- Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
- Secure access controls and multi-factor authentication
- Regular vulnerability assessments and penetration testing
- Intrusion detection and monitoring systems
Organizational Safeguards
- Employee training on data protection and security
- Background checks for employees with data access
- Incident response procedures
- Regular security policy reviews
Physical Safeguards
- Secure data center facilities with access controls
- Environmental controls and redundancy
- Secure disposal of physical media
While we implement industry-standard security measures, no system is completely secure. If you believe your account has been compromised, contact us immediately at privacy@maxloantechnologies.com.
13. Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@maxloantechnologies.com, and we will promptly delete the information.
14. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party sites you visit.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by:
- Posting the updated policy on this page with a new "Last Updated" date
- Sending you an email notification (if you have an account with us)
- Displaying a prominent notice on our website
We encourage you to review this Privacy Policy periodically.
16. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us:
MAX Loan Technologies, Inc.
- Address: 123 Innovation Drive, Suite 400, Austin, TX 78701
- Email: privacy@maxloantechnologies.com
- Phone: (512) 555-0100
For California Residents: California residents may also contact us at the above address with "California Privacy Request" in the subject line.
For European Residents: EU residents may contact our privacy team at the above address for GDPR-related inquiries.
This Privacy Policy is effective as of February 12, 2026.