Privacy Policy

1. Information we collect

2. How information is used

• Automating and assembling the short sale submission package for the lender.
• Coordinating with the mortgage servicer, negotiator, listing agent, buyer's agent, and title/escrow.
• Generating transaction documents (SSSA, ALTA Settlement Statement, Buyer-Paid Amendment, HUD-1, cover sheet).
• Account management, authentication, notifications, and audit trail.
• Regulatory recordkeeping and broker supervision.

We do not use NPI for advertising, do not sell it, and do not share it with data brokers.

3. Data protection & security

• Encryption in transit via TLS on all connections to the Service.
• Encryption at rest for documents stored in our private cloud bucket and for the underlying database.
• Row-Level Security (RLS) enforced in the database so that each party sees only the files and documents they are authorized to view.
• Short-lived signed URLs for document downloads; direct public links are never issued.
• Audit logging of every document view, upload, download, and deletion, plus admin overrides.
• Re-authentication required before destructive actions and automatic sign-out on idle sessions.
• PII redaction before any content is sent to third-party AI providers for document reading or BPO generation.

4. Third-party sharing & RESPA / GLBA compliance

We do not sell personal information. Disclosures are strictly limited to parties that are authorized to receive it in the course of the transaction:

• The mortgage lender / servicer, after the homeowner signs the Authorization to Release Information.
• The assigned negotiator and administrators of National Shortsale Specialist.
• The listing agent on the property.
• The homeowner themselves.
• The buyer's agent — limited to offer, amendments, and closing documents. Buyer's agents never see homeowner financial NPI.
• Title / escrow and settlement service providers as needed to close the transaction.
• Infrastructure subprocessors (cloud hosting, email delivery, authentication) under written data-protection commitments and only to the extent necessary to run the Service.

Handling of homeowner NPI is designed to align with the safeguards required by GLBA and with RESPA restrictions on disclosure of settlement-related information. Marketing or resale of NPI is prohibited.

5. SMS & communications

If you provide a mobile phone number and check the SMS consent box on any Shortsale Genie™ form, you agree to receive text messages from us. We send two kinds of texts:

• Transactional — file activity, document requests, lender updates, closing reminders, and authentication codes, sent as needed to service your file.
• Marketing — launch news, tips, and product updates, capped at 4 messages per month, and only sent if you separately opted in.

Msg & data rates may apply. Reply STOP to any message to unsubscribe, or HELP for support. Consent is not a condition of purchase. Mobile opt-in data and consent records are never shared with third parties or affiliates for marketing purposes. Full program terms: SMS Terms & Conditions.

Email marketing is sent under a similar opt-in model. Every marketing email includes a one-click unsubscribe link, and unsubscribing removes you from future promotional mail while still permitting service messages about your active file.

6. User rights & data retention

Depending on your state (for example, California CCPA/CPRA), you may have the right to access, correct, receive a copy of, or request deletion of your personal information. You may also withdraw consent to share your information with the lender, though doing so may end the short sale negotiation.

Retention. Closed and archived files are retained for 7 years from the closing or archive date to satisfy real-estate, tax, and broker-supervision recordkeeping obligations. After that period, an administrator either keeps the file for continued retention or permanently deletes it. Homeowners may request earlier deletion of their own account and documents where not prohibited by law.

7. Data-subject rights & how to exercise them

Depending on where you live, you may have the right to access, correct, delete, receive a portable copy of, or restrict the processing of your personal information. California residents also have specific rights under CCPA/CPRA — see our Do Not Sell or Share page. To exercise any right, submit a request through /privacy-request or email shortsalehelptoday@gmail.com. We confirm receipt within 10 business days and respond substantively within 45 days (with one 45-day extension where reasonably necessary). We do not discriminate against users who exercise their privacy rights.

8. Retention by data type

• Closed / archived short-sale files: 7 years from close, then deleted (subject to admin extension)
• Active file documents: retained for the life of the file plus the 7-year window
• Account & profile: until you delete the account; then removed within 30 days except where retention is legally required
• Inquiries, contact-form submissions, waitlist entries: up to 24 months
• Billing & tax records: 7 years (IRS/state requirements)
• System & access logs: up to 12 months
• Encrypted backups: up to 90 days, then rotated out

9. Security & breach notification

We use administrative, technical, and physical safeguards described on our Security page. In the event of a confirmed personal-data breach affecting your account, we will notify affected users without undue delay and, where required by law, within 72 hours of confirming the incident.

10. Children

Shortsale Genie is not directed to children and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with information, contact us and we will delete it.

11. International users & transfers

Our service is operated from the United States. If you access it from outside the U.S., your information will be transferred to and processed in the U.S. Where personal information of EU/UK residents is transferred, we rely on Standard Contractual Clauses or an adequacy mechanism. A full sub-processor list is available at /subprocessors.

12. Marketing communications & consent

We only send marketing email or SMS when you have provided a separate, unbundled opt-in — checked on the specific form where you gave us your contact information. Consent to service messages (file updates, receipts, password resets) is not consent to marketing. You can withdraw marketing consent at any time using the unsubscribe link in any marketing email, replying STOP to any marketing text, or emailing shortsalehelptoday@gmail.com.

13. Contact us

Privacy questions: shortsalehelptoday@gmail.com. For financial-privacy specifics, see our GLBA Consumer Privacy Notice. For MARS/Regulation O disclosures, see MARS Disclosures.