PRIVACY POLICY

Mortgage Proposal by beaconAI

mortgageproposal.app

Effective Date: April 15, 2026

1. Introduction

This Privacy Policy describes how Myska Family Office LLC, doing business as beaconAI (“Company,” “we,” “us,” or “our”), collects, uses, stores, and protects information in connection with the Mortgage Proposal application (the “Service”) available at mortgageproposal.app.

Mortgage Proposal is a business-to-business (“B2B”) tool designed exclusively for licensed mortgage brokers and loan officers (“Users” or “you”). The Service does not have a consumer-facing interface. Borrowers and other consumers do not create accounts, log in, or interact with the Service directly.

By creating an account or using the Service, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.

2. Information We Collect

2.1 Account Information

When you register for an account, we collect the following information:

2.2 Proposal Data

When you create loan comparison proposals, the Service stores the following data:

• Client name or identifier (free-text label entered by you)
• Loan scenario parameters (property value, loan amounts, rates, points, fees, taxes, insurance)
• Computed results (monthly payments, APR, amortization schedules, cash to close)
• Fee templates (pre-saved cost configurations for reuse)

2.3 Information We Do NOT Collect

The Service does not collect, store, or process the following information from any party:

• Borrower or consumer Social Security numbers
• Credit reports or credit scores
• Bank account or financial account numbers
• Income, employment, or asset data
• Government-issued identification numbers (other than the broker’s own NMLS number)

The “client name” field is a free-text label. You may use a first name, initials, property address, or any identifier of your choosing.

2.4 Automatically Collected Information

When you access the Service, we may automatically collect limited technical information, including:

• IP address
• Browser type and version
• Device type and operating system
• Usage data (pages visited, features used, timestamps)

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing and operating the Service, including generating loan comparison proposals
• Authenticating your identity and maintaining account security
• Processing subscription payments and managing billing through Stripe
• Sending transactional communications (account confirmation, password resets, billing notifications)
• Improving, maintaining, and troubleshooting the Service
• Enforcing our Terms of Service and protecting against fraud or abuse
• Complying with legal obligations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. How Data Is Processed

All loan calculations (monthly payments, APR, amortization, cash to close, break-even analysis) are performed entirely within your web browser using client-side JavaScript. No loan scenario data is transmitted to external calculation engines, AI models, or third-party APIs for processing.

When you save a proposal, the scenario data and computed results are stored in our database for your future reference. When you copy a proposal to your clipboard, the formatted HTML is generated in your browser and placed on your device’s clipboard. The Company does not send proposals to borrowers or any third party. You control delivery through your own email client.

5. Third-Party Service Providers

We use the following third-party service providers to operate the Service:

We do not store credit card numbers or payment credentials. All payment processing is handled exclusively by Stripe in accordance with PCI DSS requirements.

Each third-party provider processes data in accordance with their own privacy policies. We encourage you to review those policies directly.

6. Data Security

We implement commercially reasonable technical and organizational measures to protect your information, including:

• Row-level security (RLS) enforced on all database tables, ensuring users can only access their own data
• All connections encrypted via HTTPS/TLS
• Passwords hashed using bcrypt (never stored in plaintext)
• Image storage secured with access policies restricting access to the uploading user
• System administrator access gated by server-side environment variables, not database roles

For organization (team) accounts, organization members can view but not edit other members’ proposals. Organization administrators can read but not edit team members’ proposals.

No security measure is absolute. While we take reasonable steps to protect your information, we cannot guarantee that unauthorized access, disclosure, or destruction will never occur.

7. Cookies and Tracking Technologies

The Service uses cookies solely for authentication and session management. We do not use advertising cookies, tracking pixels, or third-party analytics cookies that track you across other websites.

You may configure your browser to refuse cookies, but doing so may prevent you from logging in or using the Service.

8. Data Retention

We retain your account information and proposal data for as long as your account remains active. If you delete your account, we will delete your personal information and proposal data within thirty (30) days, except where retention is required by law or necessary to resolve disputes or enforce our agreements.

Backup copies may persist in our infrastructure provider’s backup systems for a limited period in accordance with their standard data retention practices.

9. Organization and Team Accounts

If you are a member of a team account, your organization administrator can:

• View proposals you create within the team workspace
• Apply organization-level branding to your proposal output
• Manage your membership in the team account

Organization administrators cannot edit your proposals or access your personal account credentials.

10. Your Rights

You have the following rights regarding your information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may update or correct your account information at any time through the Service.
• Deletion: You may request deletion of your account and associated data by contacting us.
• Portability: You may request an export of your proposal data in a machine-readable format.
• Opt-out of marketing: You may opt out of promotional communications at any time. Transactional communications related to your account are not subject to opt-out.

To exercise any of these rights, contact us at dale@beaconai.ai. We will respond to verified requests within thirty (30) days.

11. Colorado Privacy Act Compliance

The Company is domiciled in Colorado. To the extent the Colorado Privacy Act (CPA) applies to our processing activities, we comply with its requirements, including providing Colorado residents with the rights described in Section 10 above.

If you are a Colorado resident and believe we have not adequately addressed your privacy concern, you may contact the Colorado Attorney General’s office.

12. Children’s Privacy

The Service is designed for licensed mortgage professionals and is not intended for use by individuals under the age of eighteen (18). We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take prompt steps to delete that information.

13. Artificial Intelligence

The current version of the Service does not use artificial intelligence or machine learning models for any calculations, content generation, or decision-making. All computations are performed using deterministic mortgage formulas.

If we introduce AI-powered features in the future (such as narrative proposal summaries), we will update this Privacy Policy to describe how those features process data, and we will provide notice of any material changes as described in Section 15 below.

14. International Users

The Service is intended for use by mortgage professionals in the United States. All data is stored and processed within the United States. If you access the Service from outside the United States, you acknowledge that your information will be transferred to and processed in the United States.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting a prominent notice within the Service or by sending you an email at the address associated with your account at least thirty (30) days before the changes take effect.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

16. Contact Information

If you have questions about this Privacy Policy or our data practices, contact us at:

Myska Family Office LLC dba beaconAI
Email: dale@beaconai.ai
Denver, Colorado