Privacy Policy
This policy explains how Lomatico LLC ("Lomatico", "we", "us") handles personal information about people who visit lomatico.net and people who use the Lomatico software on behalf of a mortgage company that subscribes to it.
It is not the privacy policy for a mortgage company's own consumers. When a borrower, home buyer or partner agent uses a page published by a mortgage company through Lomatico, that company decides why and how their information is used, and that company's own privacy policy applies. Its policy is linked from its pages. We process that information on the company's behalf, as section 4 describes.
1. What we collect
When you visit lomatico.net. Our hosting providers receive the technical information every web request carries: your IP address, browser type, the page requested, the referring page and the time. We use it to deliver the site, keep it secure and fix faults. We do not run advertising or analytics trackers on lomatico.net, and the site sets no cookies of its own.
When you contact us. If you write to us, we receive your name, email address and whatever you tell us.
When your company buys Lomatico. Payments are processed by Stripe, through an invoice or, where it is offered, online checkout. Stripe collects your payment details. We never see or store your full card number or bank account number. Stripe gives us the billing name, email address, billing address, any tax identifier you enter, the plan and seats you bought, the payment status, the card brand and last four digits, and, when you buy online, the version of our terms you accepted.
When you use the software. For each user we keep a name, email address, role, and any NMLS number, phone number, licensed states, office address and profile text that you or your company enter. We keep a record of actions you take in the software where the product depends on it, such as who approved which message and when. Our hosting providers keep operational logs of requests, which carry request identifiers, routes and error codes.
In your browser. When you sign in, the software stores your session in your browser's local storage so that you stay signed in. If your browser supports it, the software also keeps copies of its own pages so that it opens quickly and shows a notice when you are offline. Neither is used to track you.
2. How we use it
We use personal information to provide, secure and support the Lomatico software; to set up and bill accounts, including checking a company's legal name, NMLS number and licensed states before an account is set up; to answer you; to tell you about changes to the service, its terms or this policy; and to meet our legal obligations.
We do not sell personal information. We do not share it for cross-context behavioural advertising, and we do not use it to train artificial intelligence models.
3. Who we share it with
We share personal information only with the service providers that operate the software for us, under contracts that limit their use of it, and where the law requires. Our providers are listed in section 5. If we are involved in a merger, acquisition or sale of assets, personal information may transfer to the successor, which will be bound by this policy.
4. Information we process for mortgage companies
Information about a company's consumers, borrowers, past clients and partner agents, and the consent, opt-out and delivery records that relate to them, belongs to that company. We process it only to provide the software to that company, as our agreement with it and our Data Protection and Security Addendum describe. We never sell it. If you are one of a company's consumers and want to see, correct or delete your information, contact the company. If you contact us, we will pass your request to the company.
5. Service providers
The Lomatico software uses the services below. The page at lomatico.net/trust/data describes, service by service, what each one receives, when, and what never goes to it.
| Provider | What it does for us |
|---|---|
| Supabase | Database and sign-in. Holds the records the software keeps. |
| Railway | Hosts the application server. |
| Vercel | Hosts the website and the application's pages. |
| Resend | Delivers email that a person has approved. |
| Twilio | Delivers text messages. Texting is off for every company, and nothing reaches Twilio while it is. |
| Anthropic | Drafts suggested wording for email, and summaries. A person reads a draft before an email is sent. |
| Stripe | Processes payments, and hosts online checkout and the billing portal where they are offered. |
| Mapbox | Draws a map on a property page, from the address on that page. |
A mortgage company may also connect its own accounts with Follow Up Boss, Arive or Facebook Lead Ads. Those connections are made by the company, governed by its agreements with those services, and described on lomatico.net/trust/data.
6. How long we keep it
We keep account information while the account is open. When a company's subscription ends, it has 30 days to export its data, and then we delete the company's records as our agreement with it describes. We keep billing records for as long as tax and accounting law requires. Messages you send us are kept while they are useful for answering you and for our records. Our providers keep operational logs and backups on their own schedules.
7. Security
We protect personal information with technical and organisational measures described in our Data Protection and Security Addendum, including encryption in transit, access limited by company, and append-only audit records. No system is perfectly secure, and we cannot guarantee that information will never be accessed without authorisation.
8. Your choices and rights
You may ask us to tell you what personal information we hold about you, to give you a copy, to correct it, or to delete it. Write to lomaticosupport@gmail.com. We will verify your request and answer within 45 days. We will not treat you differently for asking. Some information must be kept for legal or billing reasons, and we will tell you if that applies.
9. Children
Lomatico is a business service. It is not directed to children, and we do not knowingly collect information from anyone under 16.
10. Changes to this policy
When we change this policy we publish a new version with its version number, its effective date and a SHA-256 hash of its text, and earlier versions remain available to read. If a change is material, we will tell account holders by email before it takes effect.
11. Contact
Lomatico LLC, 18745 Avenida Cordillera, San Diego, CA 92128. Email: lomaticosupport@gmail.com.