State Privacy Notice

This notice applies to residents of states that give consumers rights over their personal information, including the right to opt out of the sale or sharing of that information. If your state is not currently covered by one of these laws, we still welcome your privacy questions or requests through the contact options below.

In the past 12 months, we have collected the following categories of personal information:

• Identifiers. Name, mailing address, email address, phone number, and similar identifiers you provide when you request information or submit an inquiry.
• Financial and loan-related information. Information relevant to a mortgage inquiry, such as property details, estimated home value, and loan purpose.
• Internet and network activity. Information about your interaction with our "Website," including pages viewed, referring pages, and cookie identifiers.
• Approximate geolocation. General location information inferred from your IP address or the state you provide to us.
• Inferences. Information we derive from the categories above, such as which of our loan products may be relevant to you.

We use this information for the business purposes described in our Privacy Policy, including responding to your inquiries, providing our services, improving our "Website," and measuring and improving our advertising.

We do not sell your personal information for money. We do share certain online identifiers and interaction data with our advertising and analytics partners to measure and improve our advertising — this is described further in our Interest-Based Advertising section. Under some state privacy laws, this activity may be considered "sharing" even though no money changes hands, and you have the right to opt out of it as described below.

Depending on where you live, you may have the right to:

• Know / Access. Request that we disclose the categories and specific pieces of personal information we have collected about you, and the categories of sources, purposes, and third parties involved.
• Delete. Request that we delete personal information we have collected from you, subject to certain exceptions (for example, completing a transaction you requested or complying with a legal obligation).
• Correct. Request that we correct inaccurate personal information we maintain about you.
• Opt out of sale or sharing. Request that we stop sharing your personal information for cross-context behavioral advertising, as described above.
• Opt out of targeted advertising. A more specific form of the right above, where recognized by your state's law.
• Appeal. Ask us to reconsider a decision we made in response to your request.

You can submit a request to exercise any of the rights above by:

• Using our Contact Us form and selecting "Privacy Request" as the category; or
• Turning on the "Do Not Sell or Share My Personal Information" option in our cookie preferences, available from the cookie banner on our "Website"; or
• If your browser or a browser extension sends a Global Privacy Control (GPC) signal, we will honor it as a valid opt-out request for that browser automatically — no separate submission is needed.

We may need to verify your identity before completing certain requests, using information you have already provided to us.

We will confirm receipt of your request and aim to respond within 45 days. If we need more time, we will let you know the reason and the extension period in writing.

You may designate an authorized agent to submit a request on your behalf. We may require proof of the agent's authorization and may still need to verify your identity directly.

We will not deny you services, charge you a different price, or provide a different level of service because you exercised any of the rights described in this notice.

We may update this notice from time to time. The date this notice was last updated appears at the top of this page.