Privacy Policy

Who we are

BrokerCloser is a marketing CRM for mortgage brokers. It is available at brokercloser.com and app.brokercloser.com.

This Privacy Policy explains how BrokerCloser collects, uses, and stores personal information. Questions go to hi@brokercloser.com.

Who this policy covers

It covers people who visit brokercloser.com, people who create a BrokerCloser workspace, people invited into a workspace, and people whose details a workspace stores as leads.

If you are a lead of a broker who uses BrokerCloser, that broker decides why your details were collected and how they use them. We store and process those details so their workspace can run. Ask that broker first if you want a copy, a correction, or a deletion of your lead record.

Information we collect

When you create or use a workspace we collect your name, email address, password (stored as a hash), company name, phone number if you add one, and billing details needed to charge you. Stripe handles card numbers. We do not store full card numbers on our servers.

Workspaces can store lead records. Those records may include name, phone, email, business name, loan details, source, notes, assignment, call history, and anything else the workspace adds.

If a workspace turns on SMS or email automations, we store the provider keys that workspace pastes in, message templates, and a log of messages sent. If someone replies STOP or uses an unsubscribe link, we store that opt-out so we do not send that channel again.

If a workspace publishes a site, quiz, or content, we store the pages, files, and form answers they create. Custom domain details are stored so we can serve the site on the hostname they attach.

We also collect technical logs: IP address, browser type, pages viewed, and sign-in times. These exist so we can keep the service running and investigate abuse.

Lead information your workspace stores

The broker who owns the workspace is responsible for having a lawful reason to collect lead information, for telling those people how their details will be used, and for handling their access and deletion requests.

We use lead information only to provide the workspace: to show the pipeline, assign leads, run automations the workspace has switched on, publish forms the workspace has published, and keep backups.

We do not sell lead lists. We do not use lead information to market BrokerCloser to those people.

How we use account information

We use account information to create and sign you in, bill you, send security and billing mail, provide support, improve reliability, and meet the law.

If a payment fails we may email or text the workspace owner using the details on the account, and we may email our admin team so we can help. If Stripe later marks the subscription unpaid or cancelled after retries, we freeze the workspace until billing is restored. We keep the stored data. We do not delete a workspace because a card failed.

Who we share information with

We use other companies to run BrokerCloser. They only get what they need to do that job.

Stripe processes payments. Supabase stores the database and login records. Cloudflare hosts the app, marketing site, published sites, and uploaded files. Telnyx sends SMS when a workspace has added Telnyx keys. Postmark sends email when a workspace has added Postmark keys, and we also use Postmark for account mail such as invites, password reset, and billing notices. Google may receive an address when a workspace uses address lookup or a map on a published page. OpenAI may receive text or files a workspace asks us to generate from, such as page copy, text cleanup or import mapping.

A workspace owner can invite team members and can be viewed by a BrokerCloser admin who is helping that account. Team members see the lead and site data in that workspace. They do not get billing or workspace settings.

We disclose information if the law requires it, or if we must protect people from serious harm or fraud.

Cookies and sign-in

We use cookies and similar storage so you can stay signed in and so we can tell the sales site from the app. These are needed for the service to work. We do not use advertising cookies, and we do not sell browsing data.

SMS and email

A workspace that sends lead SMS or email is responsible for having consent to contact those people. Default lead auto-replies include a way to opt out. Reply STOP on SMS, or use the unsubscribe link in an automation email, and we stop that channel for that number or address on that workspace.

Account mail (sign-in, invites, password reset, billing) is part of running the account. You can ask us to close the account if you no longer want those messages.

Storage, security, and overseas disclosure

We host on Cloudflare and store data with Supabase and other providers named above. Some of those providers are in Australia. Some are in other countries, including the United States. When information leaves Australia we take steps that are reasonable in the circumstances so it is still handled with care, including contracts with those providers.

We use access controls, encryption in transit, and least-privilege admin access. No method of storage is perfect. If a breach is likely to cause serious harm we will notify affected people and the Office of the Australian Information Commissioner as the Privacy Act requires.

How long we keep information

We keep workspace and lead data for as long as the account is open. If the owner deletes the workspace, we delete the account, team logins, and the stored workspace data, except records we must keep for billing, tax, or a legal claim.

Message logs, security logs, and invoices may be kept after an account closes where we need them to prove a send, fix abuse, or meet accounting rules.

Opt-out records may be kept so we do not contact that number or email again if the same workspace later imports the same person.

Access, correction, and deletion

Workspace owners can change their name, email, and password in the app, and can delete the workspace. Team members can change their own name, email, and password.

If you cannot do that in the app, email hi@brokercloser.com. We will confirm who you are before we change or delete account data.

If you are a lead, contact the broker who collected your details. If you cannot reach them, email us and we will pass the request to the workspace owner or help where we can.

Complaints

If you think we have mishandled personal information, email hi@brokercloser.com and we will look into it.

If you are not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

We may update this policy. The date at the top is the current version. If a change is material we will email the workspace owner at the address on the account. The latest version always lives at brokercloser.com/privacy.

How to contact us

Email hi@brokercloser.com. We read that inbox for privacy, billing, and support.