Privacy Policy

This Privacy Policy explains how National Foreclosure Prevention Group (“NFPGRP,” “we,” “us”) collects, uses, stores, and shares personal information across our public website, our member app, and any service we deliver by phone, SMS, or email.

We do not sell your personal information. We do not share it with unrelated third parties for their own marketing. We do not use identifiable case content to train third-party AI models.

1. What we collect

Public website (before you sign in)

• Contact details you submit through the consultation modal, waitlist form, final gateway, or SMS conversation: name, phone number, email address
• Situation details: your quiz answers, and anything you share on a free 15-minute call, an emergency consultation, or by text
• Device and analytics data: IP address, browser type, referrer, pages viewed, timestamps, and events collected via Google Analytics and Google Tag Manager (see our Cookies & Analytics Policy)

Member app (when you sign in or subscribe)

• Account credentials: your email address, a bcrypt-hashed version of your password, and (if you sign in with Google) the identifiers Google sends us. We do not store your Google password.
• Subscription state: which plan you are on, when it renews, whether it is active, and Stripe customer identifiers. We do not store full card numbers on our systems; Stripe handles payment data end to end.
• Case data you enter: case number, index ID, county, property address, key dates, and any notes you add.
• Documents you upload: court filings, servicer letters, and any other files you attach to your case. We store the file in encrypted object storage and reference it from your case record.
• AI extraction output: when you upload a document, an AI model (currently Anthropic's Claude Haiku) reads it to pull structured fields like case number and index ID. We store those extracted fields with your case record so our team can use them to look up your case directly with the county, or file a public-records (FOIL) request.
• Chat transcripts: for Standard and Premium members, your conversations with the in-app AI Case Companion are logged so you can see them later and so our team can review for quality and safety.
• Public-record activity: filings, hearing dates, and notices that our team locates for your case, directly with the county or through a public-records (FOIL) request, and attaches to your case record.
• App usage: pages you visit inside the app, documents you open, features you use, so we can improve them.

2. How we use it

• To deliver the service you asked for: look up your public filings with the county or via a public-records (FOIL) request, respond to your questions, schedule your calls, and give you the resources you can act on
• To let you sign in, keep you signed in, and protect your account
• To send transactional messages (call confirmations, appointment reminders, filing alerts, billing receipts) via SendGrid (email) and our SMS provider, when you have consented
• To let our team review a case you have opened with us, so we can upload the documents you request and give you accurate responses
• To improve the platform, in aggregated or de-identified form
• To meet legal or regulatory obligations (record-keeping, fraud prevention, responding to lawful requests)

We do not use your case data, documents, chat transcripts, or SMS threads to train third-party AI models on identifiable content. See our AI Policy for exactly how AI models process your data.

3. Who has access

• You. Everything in your account is visible to you when you sign in.
• Our team. Members of the NFPGRP team can view your case data, documents, and chat transcripts to respond to your requests, upload documents on your behalf, and support your subscription. Access is logged.
• Our processors. Vendors we contractually restrict to processing data on our behalf: hosting, database, storage, email, SMS, payments, AI providers, analytics. See our Subprocessors list for the current roster.
• Authorities. When required by law, subpoena, or court order, or when we reasonably believe disclosure is necessary to protect rights, property, or safety.

4. How long we keep it

We keep personal information only as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements.

• Marketing-form contact details (waitlist, gateway, consultation requests, without an account): up to 24 months from your last interaction unless you ask us to delete them sooner.
• Active account data: kept while your subscription is active. If you cancel, your case data, documents, and chat transcripts remain in the account for 90 days so you can re-subscribe and pick up where you left off. After 90 days, we delete the account's case data and documents. Billing records (invoices, receipts) are kept longer where tax or accounting rules require it.
• Backups containing your data are retained for up to 30 days after deletion, then rotated out.

You can ask us to delete your account and its data at any time. Some limited information (billing records, records of a legal dispute) may need to be retained past that request.

5. Your choices and rights

• Access, correct, or delete the personal information you have given us. Members can do most of this from the account page inside the app; anything else, email us at the address in Section 10
• Export your data. You can request a copy of your case data and uploaded documents at any time
• Unsubscribe from email using the link at the bottom of any marketing email
• Stop SMS by replying STOP to any of our text messages. See our SMS Policy
• Opt out of analytics by declining cookies or using browser-level Do Not Track / Global Privacy Control. See our Cookies & Analytics Policy
• Cancel your subscription from your Stripe customer portal at any time. See Terms & Conditions for the full cancellation policy

If you live in a state with a data-rights statute (for example, California, Colorado, Connecticut, Virginia, Utah, and others), you may have additional rights under that state's law, including the right to know, correct, delete, port, and opt out of certain uses. Contact us using the details in Section 10 to exercise those rights.

6. Security

We take reasonable technical and organizational measures to protect the information we hold. Passwords are hashed with bcrypt (we cannot see them). Uploaded documents are stored in encrypted object storage and served through short-lived signed URLs. Sessions use secure, http-only cookies. Access to your case data by our team is logged.

No online service is 100% secure. We cannot guarantee absolute security, and you are responsible for keeping your account credentials safe.

7. Children

Our services are for adults 18 and older. We do not knowingly collect information from children.

8. International transfers

We operate from the United States. If you access our services from outside the U.S., your information is transferred to and processed in the U.S.

9. Third-party subprocessors

We rely on a small set of vendors to run the site and the app, each contractually limited to processing data on our behalf. The current list is maintained at /legal/subprocessors and includes payment (Stripe), authentication (Google), email (SendGrid), analytics (Google), database and hosting (Neon, Netlify), object storage (Cloudflare R2), and AI providers (Anthropic).

10. Contact

Privacy questions and requests to exercise your rights can be sent to the contact address NFPGRP designates for privacy matters (see the site footer or your onboarding email).

11. Changes

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date. Material changes will be surfaced on the site or by email.