California Privacy Notice

v1.2 | Effective September 28, 2026Updated: September 28, 2026Version history

Plain English Summary

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what information we collect, the right to delete your information, the right to correct inaccurate information, and the right to opt out of the sale or sharing of your personal information.

Scope of This Notice

This California Privacy Notice supplements our Privacy Policy and applies solely to California residents. It describes how RatesQ collects, uses, shares, and protects personal information as defined under the California Consumer Privacy Act of 2018 and the California Privacy Rights Act of 2020 (collectively, "CCPA/CPRA").

Categories of Personal Information Collected

In the past 12 months, RatesQ has collected the following categories of personal information:

CategoryExamplesCollected?
IdentifiersName, email address, IP address, account IDYes
Personal records informationAccount information, preferencesYes
Protected classificationsNone directly collectedNo
Commercial informationSubscription history, marketplace activityYes
Internet/network activityPages viewed, links clicked, session dataYes
Geolocation dataApproximate location from IP addressYes
Professional informationNMLS license info for partnersYes
Inferences/profilesInferences about mortgage preferencesYes
Sensitive personal informationFinancial account data (via payment processor only); we do not collect SSNs, full account numbers, or credit reports directlyNo

Sensitive Personal Information

We Do Not Collect Sensitive Financial Documents

RatesQ does not collect Social Security Numbers, tax returns, full bank account numbers, credit reports, W-2s, or complete loan application documents. Do not submit these through the Platform.

Purposes for Collection

  • Operating and improving the Platform
  • Facilitating connections between borrowers and mortgage professionals
  • Processing partner subscriptions and payments
  • Sending transactional and marketing communications (where consented)
  • Analytics and Platform performance measurement
  • Detecting and preventing fraud and abuse
  • Legal compliance and dispute resolution

Categories of Third Parties

  • Cloud hosting and infrastructure providers
  • Email and communication service providers
  • Payment processors (Stripe)
  • Analytics providers (e.g., Google Analytics)
  • Advertising and marketing service providers acting on our behalf
  • Customer support tools
  • Legal and compliance service providers

Your California Privacy Rights

Right to Know

You may request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months.

Right to Delete

You may request deletion of personal information we have collected from you, subject to certain exceptions.

Right to Correct

You may request correction of inaccurate personal information we maintain about you.

Right to Opt Out

We do not currently sell or share personal information. If this changes, you may opt out of sale or sharing for cross-context behavioral advertising. See our Do Not Sell page.

Right to Limit Sensitive PI

You may request that we limit our use of sensitive personal information to purposes necessary for providing our services.

Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA/CPRA rights.

How to Submit a Request

To exercise your California privacy rights, submit a request through one of the following methods:

We will verify your identity before fulfilling any request. We aim to respond within 45 days, with one possible 45-day extension for complex requests. We may deny requests that cannot be verified or that fall within permitted exceptions.

Authorized Agent

You may designate an authorized agent to submit a request on your behalf. The authorized agent must provide written authorization signed by you, and we may require you to verify your identity directly with us. To submit a request via authorized agent, contact [email protected].

Shine the Light

Under California Civil Code Section 1798.83 ("Shine the Light" law), California residents may request certain information about disclosure of personal information to third parties for direct marketing purposes. RatesQ does not sell personal information to third parties for their direct marketing purposes. To make a Shine the Light request, contact [email protected].

Do Not Sell or Share

California residents may opt out of the "sale" or "sharing" of their personal information as those terms are defined under CCPA/CPRA. RatesQ does not currently sell or share personal information, including through analytics. If that changes, we will update this notice before it takes effect and honor opt-out requests and GPC signals. See our Do Not Sell or Share My Personal Information page to exercise this right.

We honor Global Privacy Control signals. See 'Analytics and Cookies' in our Privacy Policy.

Legal Center | RatesQ LLC

Questions about this document? Contact us at [email protected] or submit a ticket through the RatesQ support center.