GLBA Privacy Notice — ReadinessIQ.ai

This Privacy Policy explains how ReadinessIQ.ai ("ReadinessIQ", "we", "us") collects, uses, shares, and protects information when you use our website and services. We are committed to handling your information responsibly and in compliance with applicable laws including the Gramm-Leach-Bliley Act (GLBA), the California Consumer Privacy Act (CCPA/CPRA), and other state privacy laws.

1. Information We Collect

Account information — name, email, phone, ZIP, and password when you sign up.
Readiness inputs — income, debts, credit-score range, assets, employment, and housing goals that you provide.
Uploaded documents — W-2s, paystubs, tax returns, bank statements, and credit reports you choose to upload. We use AI to extract structured fields (e.g., wages, balances, tradelines) for the purpose of estimating your mortgage readiness.
Usage data — pages viewed, actions taken, device, and browser information.

2. How We Use Information

To calculate and refine your Readiness Scorecard.
To match qualified users with a Licensed Mortgage Loan Officer (with your consent).
To improve our product, fix bugs, and prevent abuse.
To send transactional emails about your account and progress.

We do not sell your personal information, and we do not use uploaded financial documents to train AI models.

3. How We Share Information

Service providers (sub-processors): our hosting and database provider (Supabase), and AI processing through the Lovable AI Gateway (Google and OpenAI under configurations that do not train on customer data).
Licensed Mortgage Loan Officers: only when you opt in to a hand-off.
Legal & safety: when required by law, subpoena, or to protect the rights, property, or safety of users and the public.

4. Security

Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Uploaded documents live in a private storage bucket and are scoped to your account via row-level security. Access is logged and limited to authorized personnel and our automated parsing pipeline.

5. Retention & Deletion

Uploaded documents are automatically deleted 180 days after upload unless they have been converted to an active loan file. You may delete any document or your entire account at any time from your portal, which removes the stored objects and associated extracted data.

6. Your Rights

Depending on your state, you may have the right to access, correct, delete, or port your personal information, and to opt out of certain processing. To exercise these rights, email privacy@readinessiq.ai.

7. Children

The service is not directed to anyone under 18, and we do not knowingly collect data from them.

8. Changes

We will post material changes to this policy on this page and update the "Last updated" date. Significant changes affecting how we use your data will be communicated by email.

9. Contact

ReadinessIQ.ai · privacy@readinessiq.ai