Snap Mortgage Privacy Policy

This Privacy Policy explains how Think Whale LLC, the operator of Snap Mortgage (“we,” “us,” and “our”), handles personal information in connection with its account, workspace, borrower, and related software services. It applies to information we handle for our own service operations and describes the processing we perform to provide customer-directed features.

Mortgage companies, loan officers, and other organizations using Snap Mortgage may control the borrower and business records they place in the Services. Their own privacy notices, instructions, and legal obligations also apply. This Policy does not replace a lender’s financial privacy notice or authorize a credit inquiry, marketing communication, or disclosure that requires separate consent.

The information processed depends on the features you use, the records you provide, and your organization’s settings. It may include:

• Account and business information: names, email addresses, phone numbers, professional details, company and workspace information, membership roles, and account-security information.
• Borrower and transaction records: contact details, application answers, employment, income, assets, liabilities, property information, loan preferences, identity information, consumer-report information, and related documents when supplied through an authorized workflow.
• Content and communications: profile details and photos, notes, tasks, messages, uploaded files, invitations, support requests, and records of communications sent through enabled features.
• Subscription and payment information: billing contacts, subscription selections, invoices, payment status, and identifiers supplied by payment processors. Payment details entered in a payment provider’s interface are also governed by that provider’s privacy notice.
• Integration information: connection settings, protected credentials or authorization tokens, provider responses, and the information needed to perform authorized integration actions.
• Technical and activity information: session and device information, IP addresses, pseudonymous visitor identifiers, browser information, referring pages, approximate city, region and country, security events, access records, feature activity, and interaction events associated with forms, links, and communications. The specific information recorded varies by feature.

We receive information from you, your organization, authorized collaborators, people completing forms or accepting invitations, and providers connected through supported workflows. Do not submit another person’s information unless you have authority to do so.

We use information to create and secure accounts; authenticate users; apply workspace permissions; provide requested forms, records, collaboration, reporting, and communications; process billing; operate integrations; and respond to support requests.

We also use information to maintain service reliability, investigate errors or suspected misuse, reconcile transactions, preserve appropriate audit records, comply with legal obligations, and establish or defend legal claims. Enabled activity and attribution features help customers understand how their own forms, links, and communications are used.

The collection of information does not itself establish that a borrower is qualified, that a lender has approved an application, or that a contact has consented to marketing.

Information may be disclosed in the following circumstances:

• Within your authorized workspace or organization: users with the appropriate role or record access can view or act on information within that authority.
• At a user’s or customer’s direction: information may be shared with invited participants, selected recipients, connected providers, or other parties through the actions the user is authorized to request.
• To service providers: hosting, authentication, storage, payments, communications, security, support, and other providers process information needed to supply their functions.
• Through enabled automated features: document-processing and AI providers may receive the information submitted or selected for an enabled feature, subject to the feature’s access and processing controls.
• For legal and protective purposes: information may be disclosed when required by law or when reasonably necessary to respond to lawful process, investigate misuse, protect people or systems, or establish or defend legal rights, subject to applicable restrictions.
• In a business transaction: information may be involved in a merger, acquisition, financing, restructuring, or transfer of business assets, subject to applicable confidentiality, notice, and other legal requirements.

Public profiles and content intentionally published through public links can be viewed outside the customer’s organization. Authorized recipients and third-party providers may retain information under their own obligations. Revoking access or removing a link does not retrieve copies already lawfully received.

The Services use cookies and similar mechanisms for sign-in, session security, workspace routing, preferences, and supported workflow continuity. Enabled measurement features may associate interaction events with a form, link, message, or campaign.

You can manage cookies through your browser. Blocking necessary cookies may prevent sign-in or interrupt a workflow. A browser privacy setting does not replace an in-product access change, subscription cancellation, or communication opt-out. Where applicable law requires consent or recognition of a browser-based privacy choice, those requirements apply to the relevant processing.

When an enabled feature uses AI or automated document processing, it may process submitted content and authorized record context to produce a summary, extraction, or suggested response. Feature permissions and organizational settings determine availability and permitted context.

Automated outputs can be inaccurate. Users must review the underlying information before relying on an output. AI assistance is not an autonomous approval or underwriting service. Do not enter information into an AI feature unless you are authorized to have it processed for that purpose.

Retention depends on the type of record, the purpose of processing, customer instructions, applicable configuration, contractual obligations, and legal requirements. Information may need to remain available for transaction history, security, dispute resolution, regulatory recordkeeping, or legal holds after a user stops using the Services.

Raw marketing-link visit and attribution records currently have no fixed retention period and are retained indefinitely unless removed through an applicable request or another authorized process. Access to these raw records is restricted; product users receive aggregate metrics.

Closing an account, canceling a subscription, or leaving a workspace does not necessarily delete organization-controlled records or information another party must retain. Deleted information may also remain temporarily in backups or recovery systems subject to their normal handling and applicable restrictions. We do not promise a single deletion period for every category of information.

You may update available account and profile information, manage permitted sharing and visibility settings, and use the communication preferences provided in the relevant feature. Marketing opt-outs do not prevent necessary account, security, or transaction notices.

Depending on your location and the applicable law, you may have rights to request access, correction, deletion, or a copy of personal information, and to object to or limit certain processing. Rights may be subject to exceptions, verification, and the rights of other people. We will handle requests as required by applicable law.

For information a lender or another customer controls, contact that organization first. We may refer the request to that customer or assist it according to our obligations. For information Think Whale LLC controls, email support@thinkwhale.com or write to the mailing address below. Identify the account or relationship involved and the nature of your request. Do not include passwords, full Social Security numbers, or full payment-card details in ordinary email. We may need additional information to verify your identity or authority before acting.

We use access controls and other technical and organizational measures designed to protect information processed through the Services. No online service, storage system, or transmission method can guarantee absolute security. Protect your credentials and devices, use available account-security features, and promptly report suspected unauthorized activity through the Services’ support channel.

Account creation is intended for adults. Do not create an account if you are under 18. Adult users may provide information about household members or dependents only when authorized and relevant to a legitimate workflow. Contact us if you believe a child has submitted information without appropriate authority.

Information may be processed where Snap Mortgage, its customers, or their service providers operate. Privacy laws may differ between locations. Any legal requirements governing an international transfer continue to apply; use of the Services does not waive those requirements.

Third-party websites, lenders, and connected providers have their own privacy practices. Review their notices before providing information directly to them. A link or integration does not make their independent processing subject only to this Policy.

We may update this Policy as the Services and our practices change. We will provide notice of material changes and obtain consent where required before applying a new use that requires it. For questions about this Policy or our handling of information, contact Think Whale LLC at support@thinkwhale.com or by mail at:

When you opt in to an enabled SMS/MMS program, we process your phone number, messages and attachments, delivery information, and consent and opt-out records to provide that program. Think Whale LLC operates Snap Mortgage. Mortgage businesses using Snap Mortgage must identify themselves as senders and obtain permission for their own messages. Accepting this Policy does not enroll you in texting. Message frequency varies with your mortgage inquiry, application, loan, and requests. Message and data rates may apply. Reply STOP to opt out or HELP for help.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be sold or shared with third parties for their own use. These restrictions apply despite other disclosure categories in this Policy. Messaging and support service providers may process this information solely as necessary to operate the program on our behalf, subject to restrictions on independent use.

Group SMS/MMS shares your phone number, messages, and attachments with the other participants. Participate only if you agree to that disclosure. Recipients may retain or forward what they receive. Opting out does not retrieve prior messages or prevent other participants from contacting you independently.

Reply STOP to the sending number to withdraw permission for that messaging program. Contact the identified sender about its records, or support@thinkwhale.com for Snap Mortgage assistance. Consent and opt-out records may be retained to honor your choices, resolve disputes, and meet legal obligations.