Privacy Policy

CloneALO is software licensed to mortgage brokerages. When a brokerage uses CloneALO to work a loan, the brokerage decides what borrower information is collected and why; CloneALO processes that information on the brokerage's instructions as its service provider. For our own website visitors and the brokerage staff who hold CloneALO logins, we act on our own behalf.

Borrowers with questions about a specific loan file should contact their loan officer or brokerage first, since the brokerage controls that record.

• Identity: name, date of birth, and Social Security number.
• Contact: email address, phone number, and mailing address.
• Financial: income, assets, liabilities, employment, and credit information supplied by the borrower or an authorized source.
• Loan and property: loan number, purpose, program, property address, and status.
• Documents: pay stubs, statements, tax forms, disclosures, and similar files uploaded to the loan file.
• Communications: messages, call notes, consent records, and message-delivery outcomes.

• Account details for brokerage staff: name, work email, title, role, and company.
• Security and audit logs: sign-in events, actions taken on records, and unmasking of protected fields.
• Technical data needed to serve and secure the application, such as IP address and browser type.

• We do not sell personal information, and we do not share it for cross-context behavioral advertising.
• We do not use borrower information to train general-purpose AI models.
• We do not use production borrower data in development or demonstration environments.

Encryption in transit and at rest, field-level encryption for Social Security numbers, row-level access control scoped to a single brokerage, reason-tagged and audited unmasking of protected fields, least-privilege roles, and redacted logging. The security overview describes these controls in detail.

Loan records are retained for the period the brokerage's own retention schedule and applicable mortgage-lending recordkeeping rules require, then deleted or de-identified. Security and audit logs are retained for a fixed period to support investigations. On termination, a brokerage may request export and deletion of its data.

Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information, to limit use of sensitive information, and to appeal a refusal. We do not discriminate against anyone for exercising these rights.

Because CloneALO usually holds borrower information for a brokerage, send loan-related requests to the brokerage; we will assist them in responding. We verify requests before acting and will explain any request we cannot fulfill, including where lending recordkeeping rules require retention.

Mortgage transactions are also covered by federal financial privacy rules. Your brokerage provides its own privacy notice describing its information-sharing practices and any opt-out choices available to you; that notice governs the loan file.

We use cookies and similar storage that are strictly necessary to sign you in, keep your session, and secure the application. We do not use advertising or cross-site tracking cookies.

CloneALO is a business tool and is not directed to children under 16.

We will post any material change here and update the effective date above. CloneALO is licensed under NMLS #2494525 — you can verify our license in the NMLS Consumer Access registry.

Privacy questions reach us at cmadmin@clonalosupport.com or (949) 213-0795 (Mon–Fri, 8am–8pm PT).