EquityBoost LLC is an Iowa-licensed residential mortgage lender. As a financial institution, we are subject to the Gramm-Leach-Bliley Act (GLBA), which imposes specific obligations regarding the collection, use, and protection of your nonpublic personal financial information.
We collect personal and financial information when you apply for a mortgage loan, create an account, or interact with our services. This includes:
Information You Provide Directly
- Full legal name, date of birth, Social Security number
- Current and prior addresses, phone number, email address
- Employment history, employer name, income information
- Bank account information, asset statements, tax returns
- Credit authorization and consent forms
- Property information and purchase agreements
- Government-issued identification documents
Information We Collect Automatically
- Credit report and credit score (obtained with your written authorization via Experian)
- Income verification data (obtained with your authorization via Plaid)
- Identity verification data (obtained with your authorization via Socure)
- IP address, browser type, and device information when you use our portal
Information from Third Parties
- Appraisal reports from licensed Iowa appraisers
- Title reports from title companies
- Employment verification from your employer
2. How We Use Your Information
We use your information solely for legitimate mortgage lending purposes, including:
- Evaluating your mortgage loan application
- Verifying your identity, income, employment, and assets
- Processing your loan and servicing your account
- Communicating with you about your application and loan
- Complying with federal and state mortgage lending laws
- Detecting and preventing fraud
- Maintaining records as required by law (25-month minimum per Regulation B)
We use AI-assisted document processing (Claude API by Anthropic) to help extract and organize financial data from your uploaded documents. This tool assists our licensed MLO — it does not make credit decisions and does not store your information beyond the processing session.
3. How We Share Your Information
We do not sell your personal information. We share your information only as follows:
- Service providers: Experian (credit reporting), Plaid (income verification), Socure (identity verification), Supabase (secure data storage), Anthropic Claude API (document processing). All are bound by confidentiality agreements.
- Investors: Private accredited investors who fund your loan receive loan performance data (balance, payment status) but never receive your name, address, or personally identifiable information.
- Iowa Finance Authority: If you use IFA down payment assistance, required information is shared with IFA per program requirements.
- Legal and regulatory: As required by Iowa Division of Banking, CFPB, or other lawful authority.
- Closing: Title company, closing attorney, and other parties necessary to complete your loan closing.
4. Gramm-Leach-Bliley Act (GLBA) Notice
As a financial institution, EquityBoost LLC is subject to the GLBA Privacy Rule (16 C.F.R. Part 313). We provide this notice to explain our privacy practices regarding your nonpublic personal information (NPI).
Categories of NPI We Collect
Information from applications and documents you provide; information from consumer reporting agencies; information from your transactions with us; information from third parties to verify your identity and financial status.
Our Opt-Out Policy
We do not share your NPI with nonaffiliated third parties for marketing purposes. Therefore, no opt-out is required or available for marketing sharing — we simply do not do it.
Former Customers
We continue to protect your NPI after your loan relationship ends, in accordance with our data retention schedule and applicable law.
5. Data Security
We implement the following security measures to protect your information:
- All data stored in Supabase with AES-256 encryption at rest
- All data transmitted using TLS 1.2 or higher encryption in transit
- Row-level security on all database tables — each user sees only their own data
- No full account numbers stored — only last 4 digits of routing and account numbers
- Access restricted to licensed EquityBoost personnel only
- Annual cybersecurity review
No method of transmission over the internet is 100% secure. If you believe your information has been compromised, contact us immediately at the address below.
6. Data Retention
We retain loan files, applications, and supporting documents for a minimum of 25 months from the date of action, as required by Regulation B (Equal Credit Opportunity Act). Certain records may be retained longer as required by other applicable law.
7. Your Rights
You have the following rights regarding your personal information:
- Access: You may request a copy of information in your loan file.
- Correction: You may dispute inaccurate information in your file.
- Credit report disputes: If we used a credit report in our decision, you have the right to obtain a free copy of that report and dispute inaccuracies directly with the credit reporting agency.
- Adverse action explanation: If your application was denied, you have the right to a written statement of the specific reasons, which we provide in our Adverse Action Notice.
8. Cookies and Tracking
Our portal uses session cookies necessary for login and security. We do not currently use third-party advertising cookies or analytics tracking. If this changes, we will update this policy and provide notice.
9. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new effective date. For material changes, we will provide direct notice to existing customers.