Scope
Who and what this policy applies to.
This Privacy Policy applies to information collected through the ReversePilot website, sales and marketing activities, customer support, and the ReversePilot software platform. It also applies to information we receive from integration partners, analytics providers, and customers using our services.
In some situations, ReversePilot acts as a service provider or processor on behalf of our business customers. In those cases, the customer controls the data submitted into the platform, and requests relating to that customer-controlled data should generally be directed to the relevant lender, servicer, or employer account administrator first.
Important: We do not use borrower or customer data from the production platform to train public or shared machine learning models.
Collection
Information we collect.
We collect information directly from you, automatically when you use our website or platform, and from third parties acting on your organization's behalf.
Information you provide
- Name, email address, phone number, company, and job title
- Demo, contact, support, and event registration submissions
- Files, attachments, and other materials shared with support
- Billing and contract contacts for customer accounts
Information we collect automatically
- Device, browser, IP address, and approximate location derived from IP
- Log, diagnostic, and audit trail records tied to account activity
- Cookie, session, and analytics data from website visits
- Performance, uptime, and feature usage telemetry
Customer platform data
Our customers may submit loan files, borrower records, documents, communications, and workflow history into ReversePilot. That information is processed under our agreements with the customer and according to the customer's instructions.
Use
How we use information.
- Provide, operate, secure, and improve the website and platform
- Authenticate users, enforce permissions, and maintain audit records
- Respond to inquiries, support requests, and other communications
- Send service messages, product updates, and relevant marketing where permitted by law
- Monitor reliability, investigate abuse, and prevent fraud or security incidents
- Comply with legal obligations, contractual commitments, and regulator requests
Where required by law, we rely on one or more of the following legal bases: performance of a contract, legitimate interests, compliance with legal obligations, and consent.
Disclosure
How we share information.
We do not sell personal information. We disclose information only as needed to operate our business and provide our services.
Service providers
We share information with vendors that provide hosting, identity, analytics, support, communications, billing, and security services.
Customer-authorized integrations
Information may flow to third-party systems a customer chooses to connect, such as LOS, CRM, document, reporting, and compliance tools.
Legal and safety
We may disclose information to comply with law, protect rights and safety, enforce agreements, or respond to lawful requests from courts or regulators.
Corporate transactions
Information may be disclosed in connection with a financing, merger, acquisition, or sale of assets, subject to customary confidentiality protections.
Our current subprocessor list is available in the Trust Center.
Retention & security
How long we keep information and how we protect it.
We retain personal information for as long as necessary to provide services, fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary based on the nature of the data, the customer relationship, and regulatory requirements.
We maintain administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, or alteration. These safeguards include access controls, encryption, logging, monitoring, and vendor risk management. No system is completely secure, and we cannot guarantee absolute security.
Rights
Your privacy choices and rights.
Depending on where you live, you may have the right to request access to, correction of, deletion of, or portability of your personal information, and to object to or limit certain processing activities. You may also have the right to opt out of certain marketing communications at any time.
If we process your information on behalf of a ReversePilot customer, we may need to direct your request to that customer so they can review and respond under applicable law.
Cookies and marketing
You can control cookies through your browser settings. If you unsubscribe from marketing emails, we may still send service-related or transactional messages when necessary.
Additional details
Children, international transfers, and policy changes.
Our services are intended for business use and are not directed to children under 13. We do not knowingly collect personal information directly from children.
ReversePilot is based in the United States and may process information in the United States or other jurisdictions where our service providers operate, subject to appropriate safeguards where required.
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date above and, when legally required, provide additional notice.
