Privacy Policy

Who we are

LoanMachine (operated by Elevenx2 LLC) is a marketing and borrower follow-up tool for mortgage loan officers and brokers. Contact: support@loanmachine.ai.

What we collect

From business owners and staff: your email address (to sign you in), business details you provide (name, offers, local facts), your mobile number if you sign in or verify by text, and photos you send to your LoanMachine number or upload. Card payments are handled by Square; we never see or store your full card number.

From borrowers: only what a borrower submits on a business's sign-up page or at a check-in call — typically an email address, first name, and sometimes a phone number — together with their consent to receive marketing email from that business.

Automatically: basic usage events (for example, that a sign-up page was visited) so businesses can see how their marketing performs. We measure visits to our public pages with our own analytics (see Cookies and visit measurement). We do not run third-party ad trackers.

Link tracking and one cookie: links in a business's posts, emails and newsletter end in a short code (for example ?h=ab12cd34). When a borrower opens one, we record the visit on our own servers and set a single first-party cookie, hb_v, a random ID, in that borrower's browser for 30 days. If the same borrower then asks about a loan or books a call within 30 days, the business sees which post or email led to it, so it can tell which marketing pays. The cookie holds no name or contact details, is only set when a borrower arrives through a tracked link, is not shared with anyone else, and is not used for ads or to follow borrowers to other sites. Clearing your browser's cookies removes it.

How we use it

To draft and send marketing on a business's behalf (social posts for their approval, and emails to borrowers who agreed to receive them), to analyze photos so drafts match them, and to show businesses their results. Borrower lists belong to the business that collected them. The account owner confirms they have a relationship with, and permission to email, the borrowers they upload or add; we keep that confirmation with its date as the record of permission. We never sell personal information, and we never email borrowers who have unsubscribed, reported spam or whose address does not work.

Social account connections

If a business connects a social account (such as a Facebook Page, Instagram professional account, Google Business Profile, or YouTube channel), we store the access credentials those platforms issue and use them for one purpose: publishing content the business has explicitly approved, to the accounts they chose. We do not read private messages, friends lists, or anything beyond what publishing requires. Disconnecting an account in LoanMachine revokes our access.

Your Gmail, Outlook and calendar

If you connect your Gmail or Google Calendar, LoanMachine uses your Google email address to show which account is connected and to put it in the From line of emails you choose to send from it, uses Gmail's send permission only to send the emails you write and choose to send from it, and uses Calendar's event permission only to add events you ask for. We do not read your email or calendar. Your Google tokens are stored encrypted and used only for these actions. We do not share Google user data with anyone else, use it for advertising, or use it to train AI models. LoanMachine's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. Outlook and Microsoft calendars are handled the same way. You can disconnect at any time in Connect other apps, which also asks Google to remove the permission, or at myaccount.google.com/permissions.

Text messages

We text a person only if they texted a LoanMachine number first, or ticked an unticked text box themselves, or asked for an account sign-in or verification code.Consent is never a condition of buying anything. Reply STOP to any text to stop, or HELP for help; we keep a record of each opt-in (the time, the wording shown and the page version). Message and data rates may apply. Phone numbers and opt-in records are not sold or shared for anyone's marketing. Full terms: text messaging terms.

AI

The drafts, pictures, videos and voices in LoanMachine are made with AI, and a business approves what goes out. Text, photos and audio are sent to our AI providers only to do the task asked for. We do not sell this data.

Cookies and visit measurement

We use a sign-in cookie that keeps you signed in (needed for the app to work), and the one link-tracking cookie described above. To count visits and see which pages work, our public pages run our own analytics on our own servers. It reads basic details of the browser and device (such as screen size and language) to tell visits apart without a cookie, and it stores a random visit ID in your browser's local storage. On a sample of visits to public pages it may record anonymous screen activity, with everything typed into a form hidden; it does not record the signed-in app. It is not used for ads and is not shared with any ad network.

Checking email addresses

The email addresses of borrowers that you upload or add are checked by a third-party email verification service before we send anything to them. The check only confirms that an address can receive mail. We do not sell your contacts, and we do not use them for anything else.

Who processes data for us

We use trusted service providers to run LoanMachine: Vercel (hosting), Supabase (database and sign-in), Square (payments), Amazon SES and Resend (email delivery), Telnyx (text messaging and phone calls), Bouncer and ZeroBounce (email address verification), and AI providers that draft text, describe photos, make voices and render video (Anthropic, OpenAI, Google, ElevenLabs, HeyGen and RunPod). Each receives only what it needs to do its job.

Your choices

Borrowers: every marketing email includes a one-tap unsubscribe that works immediately.

Everyone: you can ask us what we hold about you, ask us to correct it, or ask us to delete it (see below). California residents have these rights under the CCPA; we honor them for everyone.

Delete your data

Email support@loanmachine.aiwith the subject “Delete my data” from the address you want removed, and we will delete your personal information, including any call recordings and transcripts tied to you, within 30 days and confirm by reply. If you connected a social account, you can also remove LoanMachinefrom that platform's app settings at any time, which revokes our access immediately.

Security & retention

Data is encrypted in transit, access is restricted to the business it belongs to, and we keep personal information only as long as an account or borrower relationship is active (or as the law requires). Questions? Email us — a person reads it.