II. The Kinds of Information We Collect
A. Information You Provide
We collect content, images, and information you provide to us when you access our Services, including when you complete webforms on www.hellotomo.com; create an account with us; submit a loan application; mail or upload documents to us; communicate with us about our Services via comments, direct message, e-mail, SMS message, or telephone; or respond to one of our surveys.
Categories of information you may choose to provide to us include:
- Your name, address, telephone number, and e-mail address;
- Your account log-in details;
- Financial information, including bank account and real estate financing information;
- Details about your home and neighborhood;
- Circumstances related to your purchase or sale of a home that might help us tailor our Services to you;
- Reviews or comments you leave on our website, mobile application, or on other public websites;
- Your driver’s license or state ID information;
- Real estate offer letters;
- Citizenship status (for tax calculation purposes);
- Marital status (for tax calculation purposes); and
- Your Social Security number, income, employment history, and other sensitive information necessary to perform a background or credit check (with your express consent).
B. Information We Collect From Your Device(s)
We may collect the following information from the device that you use to access our Services:
- Device attributes such as the operating system, hardware and software versions, battery level, signal strength, bandwidth, available storage space, browser type, app and file names and types, and plugins;
- Information about operations and behaviors performed on the device, such as mouse movements (which can help distinguish humans from bots) or whether a window is in the foreground or background;
- Identifiers unique to you, your device, or your account(s), such as device IDs, advertising IDs, and other similar static ID numbers such as those from apps or accounts you use;
- Information you allow us to receive through device settings you turn on, such as access to your GPS location;
- Network and connection information such as the name of your mobile operator or ISP, language, time zone, mobile phone number, and IP address;
- Data from cookies, tags, pixels, web beacons, and log files stored on your device, including cookie IDs, page views, how often you visit our website or mobile application, and links you click on. Please note our Services do not support Do Not Track signals from your browser. We generally use this information for your convenience and to improve our Services. For instance, we may use it to: (i) remember your information so that you do not have to re-enter it; (ii) provide you with customized content and information, including advertising; (iii) monitor the effectiveness of our Services; (iv) monitor aggregate metrics such as traffic and usage patterns; and (v) diagnose or fix technology problems.
C. Information We Collect When You Call Us
We may record telephone calls between you and our customer service team. We do this to make sure we provide you with the best possible service. Our customer service team members also enter certain information you provide into our customer service databases to ensure continuity and consistency throughout your experience with Tomo Mortgage.
D. Information We Collect from Partners, Service Providers, and Affiliated Businesses
We may collect information about you from our partners, service providers, and affiliated businesses in order to provide the services, along with certain related products and services such as homeowners insurance, title insurance, escrow services, and, in cases where Tomo Mortgage is not able to finance your home, access to other lenders who may be able to offer financing. Information we gather about you from our partners, service providers, and affiliated businesses may include information about how you engaged with an Tomo Mortgage advertisement or social media post.
III. How We Use This Information
A. To Provide Our Services to You
We use the information that we collect about you to deliver our Services, including to personalize features and content to you. As discussed in more detail below, you have choices about how and whether we process some of your information.
B. To Advertise Our Services
We may use information collected about you to provide you with relevant information about additional services that Tomo Mortgage or our affiliated companies offer, such as homeowners and title insurance services. Specifically, we use information about how you interact with our website and mobile application, combined with information you provide us and information we collect from other sources, to serve you relevant advertising.
C. To Do Market Research
We are constantly striving to improve our customer experience. We conduct research into all aspects of the home financing process to try to identify ways to make it better. Sometimes we use partner companies to conduct surveys of willing participants who offer suggestions as to how we might improve our Services. We also aggregate and analyze consumer information that we collect on our website and from conversations with our customer service representatives to identify trends which inform how we change and grow.
D. To Support Information Security and Debugging
We may use information about you and your use of the Services to detect security incidents, protect against malicious, fraudulent, or illegal activity, and improve the security of our systems. We may also use this information to debug our Services to identify and repair errors that impair existing intended functionality.
E. In Connection with a Dispute
We may use personal information to prosecute or defend against claims in court and other dispute resolution forums.
IV. Why and How We Share Your Information
A. With Your Consent
We may share your information when you specifically direct us to do so. Examples of situations where we share your information with your consent include:
- Other financing providers. Sometimes Tomo Mortgage is not able to finance a home. In these circumstances, with your consent, we may share your information with one of our partner lenders.
- Escrow and title. With your consent, we may share your information with home escrow and title insurance providers.
- Other related partners with whom you ask us to share your information. Tomo Mortgage will share your personal information with other parties at your direction.
- Your real estate agent for your home purchase. Our general practice is to share regular loan application status updates with a borrower’s real estate agent. The updates help ensure coordination between the home buying and financing processes. If you do not want us to share those updates with your real estate agent, you can opt-out by talking to your mortgage consultant.
B. With Our Affiliated Companies
We may share your information between our affiliated companies to the extent allowed by law.
C. With Service Providers Who Facilitate Our Ability To Provide You With The Services
We may share your information with service providers, including payment processors, technology and infrastructure providers, digital communications services, commercial data and market research analysts, consumer report providers, auditors and accountants, physical site security providers, IT security and bug-fix partners, and other providers, who perform services for and on behalf of Tomo Mortgage for the sole benefit of us and our customers.
D. With Law Enforcement, Courts, or Government Agencies
We may share your information as necessary to respond to legal process or to regulatory authorities (such as pursuant to a subpoena, warrant, investigative demand from law enforcement, regulators, or others; national or international security letters; etc.); to investigate, prevent, or take action regarding suspected or actual illegal activities (including fraud) and security or technical issues; to respond to or participate in commercial disputes (e.g., lawsuits or investigations); or to protect against fraud, claims, or other liability or harm to you, us, or others.
V. When Third Parties Benefit from Tomo Mortgage Sharing Your Information with Them
A. "Selling" Your Data
Tomo Mortgage is not a data broker. However, in some circumstances we share your information with third parties not owned by or co-branded with Tomo Mortgage that benefit directly from our sharing your information with them. We want you to be aware of these sharing arrangements so that you can exercise your rights to opt-out of such sharing, as described in Section VII, below. Social media. If you finance your home with us, we may provide information about you to social media networks who will use it to better target our advertising to you and other social media users similar to you (e.g., same age, geographic area, etc.) who may benefit from our Services.
- Third-party lenders. If Tomo Mortgage cannot finance your home, we may share your personal information with one of our partner lenders.
- Home insurance agencies. If your real estate transaction is such that you may need homeowners insurance, we may share your information with homeowners insurance agencies and those agencies may reach out to you directly to offer you a quote.
- Vendor due diligence. If you are an individual or business wishing to provide services to Tomo Mortgage, we may share your information with a due diligence service as part of our obligation to perform vendor due diligence. The due diligence provider may use this information to inform and further refine its risk analysis tools.
VI. How We Protect Your Information
We use commercially reasonable physical, electronic, administrative, and procedural safeguards to preserve the integrity, confidentiality, and security of all personal information collected through the Services. However, no security measure, system, or control is infallible. Therefore, like all businesses, we cannot guarantee that our systems are invulnerable to attack or misuse.
B. Your Role
You have a major role in the security and privacy of your own information. For example, you should not provide us with personal information that we do not request. Additionally, you are responsible for controlling access to any personal computing device through which your information may be stored or accessed. You are also responsible for safeguarding any passwords or other log-in credentials that may be used to access your information, including in the Tomo Mortgage environment. We recommend that you log out of any account when you are done using it.
C. Third Parties
Please remember to review the privacy settings and security policies of third-party sites and services that you use, such as social networks. We are not responsible for the privacy or security measures of any third party.
D. Incident Response
In the event that the security of any personal information under our control is compromised, we will take reasonable steps to investigate and mitigate the situation, including, when appropriate, notifying those individuals whose information may have been compromised and taking other steps in accordance with applicable laws and regulations.
VII. Your Rights and How To Exercise Them
A. Right to Opt-Out of Sales of Your Personal Information
You have a right to opt-out of sales of your personal information. You may request to opt-out by contacting firstname.lastname@example.org. We will respond to a request to opt-out of future sales within thirty days after we receive it.
B. Right to Know About the Personal Information We Collect and Share
You have the right to request that we tell you about our collection, use, and sharing of your personal information over the past twelve months. Once we receive and validate your request, we may disclose to you:
- The categories of personal information we collected about you;
- The categories of sources for the personal information we collected about you;
- Our business or commercial purposes for collecting or selling that personal information;
- The categories of third parties with whom we share that personal information;
- The specific pieces of personal information we collected about you (also called a data portability request);
- The categories of personal information about you that we disclosed to third parties for a business purpose and the categories of recipients of that information; and
- The categories of personal information about you that we sold and the categories of recipients of that information.
C. Right to Delete the Personal Information We Collect and Share
You have the right to request that we delete your personal information, subject to certain exceptions. Depending on the nature of the data, deletion may consist of erasing, aggregating, or anonymizing your information. After we receive and validate your request, we will delete and direct our service providers to delete your personal information, unless an exception applies. We may deny your deletion request, in whole or in part, if retaining the information is necessary for us or our service providers to:
- Complete the transaction for which we collected the personal information, provide a service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you;
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities;
- Debug to identify and repair errors that impair existing intended functionality;
- Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us; or
- Comply with a legal obligation or make other internal and lawful uses of that information that are compatible with the context in which you provided it. Please be aware that, once deleted, your data, including your account and activities, cannot be restored.
D. How to Make a Request to Know or Delete
You may, without charge, request to know or delete your personal information by contacting email@example.com. Only you or an authorized agent may make a request to access your personal information. You have the right to make a free request twice during any twelve-month period. The request must:
- Provide sufficient information for us to reasonably verify that you are the person, or an authorized representative of the person, about whom we collected the personal information; and
- Describe your request with sufficient detail for us to properly understand, evaluate, and respond to it. For your safety and the safety of your information, we cannot fulfill a request to provide or delete personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you or an individual for whom you are a lawful agent. We may require additional verification before deleting or disclosing particularly sensitive information. We will only use the verification information you provide for the purpose of verifying your identity or authority to make the request. Submitting a request does not require you to create an account with us. We do not charge you a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.