Privacy Policy

Effective and last updated January 28, 2026

Introduction

New American Funding, LLC ("Company," "we," "our," or "us") respects the privacy of your information. This Privacy Policy is designed to assist you in understanding how we collect, use, share, and safeguard your information. This Privacy Policy applies to individuals who access this website and our mobile applications (collectively, "Sites") and any of our online and, where required, offline services (collectively, "Services").

From time to time, we may change this Privacy Policy. If we do, we will post an amended version on this webpage. Please review this Privacy Policy periodically.

If you have a consumer financial product or service with us, we will use and share any information that we collect from or about you in accordance with our U.S. Financial Privacy Notice, which offers you certain choices with respect to the use and sharing of your personal information.

For more information as to our use of cookies and other tracking technologies, please see our Cookie Policy.

This Privacy Policy covers the following topics:

1. Personal Data We Collect
2. How We Use Your Personal Data
3. How We Share Your Personal Data
4. Third-Party Services
5. Universal Opt-Out Mechanisms
6. Security
7. Data Retention
8. Third-Party Links
9. Children's Privacy
10. Your State Privacy Rights and Additional Disclosures
11. Notice to California Residents
12. Accessibility
13. Media Information
14. How to Contact Us

1. Personal Data We Collect

We collect personal data from you through your use of the Sites and Services. Personal data is information that is linked or reasonably linkable to an identified or identifiable individual. We collect the following types of personal data:

Personal Data You Provide

We collect the following personal data that you voluntarily provide to us in using our Sites and Services:

• Get a Quote, Inquire or Request Information. If you request to receive a quote, inquire on one of our Sites, or request information on our products and services, we will collect your first and last name, email address, telephone number, and other general information to customize the service offerings, such as your income range and estimated sale price of the home.
• Apply for a Loan. If you apply for a loan, we will collect your first and last name, email address, telephone number, postal address, Social Security number, professional or employment-related information, racial or ethnic background, citizenship or immigration status, commercial and financial information such as your loan details and payment history, and information about your preferences and needs to customize your service offerings and user experience. We may use a third party to collect some of this information on our behalf. See the section titled, "Third-Party Processors" below. Where relevant, you may also provide us with information that reveals your status as a victim of a crime (e.g., self-identifying as a participant in your state's SAFE at Home program).
• Contact Us or an Agent. If you request to speak with an agent through our online form, we will collect your first and last name, email address, and telephone number. We will also collect your email address and any information you choose to provide to us when you contact us by email.
• Register for an Account for Online or Mobile Applications. If you register for an online account through our online or mobile applications to track your loan application and/or manage your loan, we will collect information such as your last name, username and password, loan number, Social Security number, date of birth, email address, and security questions and answers. We also will collect a device identifier and precise geolocation to provide additional security to protect your account. If you use your online account to make a mortgage payment or sign up for automatic payments, we will also collect your bank account information and other information required to make a payment. We use Black Knight, Inc. to host our online and mobile applications that enable you to manage your loan online and process this information on our behalf. Please see Black Knight, Inc.'s privacy notice here. Additionally, if you use a third-party website, such as Google or Facebook, to register or log into our online or mobile applications, we will have access to information that is made available by those websites. When you utilize a Company application or website, you may be required to provide us with your biometric data (e.g., a fingerprint or face scan).
• Apply to Join Our Team. If you apply for a job opening or to become a loan officer, we will collect information such as your first and last name, email address, telephone number and home address.

To review or request changes to any of your personal data, please contact us as described in the "How to Contact Us" section below.

Personal Data as You Navigate Our Sites

We automatically collect certain personal data through your use of the Sites and our use of cookies and other tracking technologies, such as the following:

• Usage Information. For example, the pages on the Sites you access, the frequency of access, and what you click on while on the Sites.
• Device Information. For example, hardware model, operating system, application version number, and browser.
• Mobile Device Information. Aggregated information about whether the Sites are accessed via a mobile device or tablet, the device type, and the carrier.
• Location Information. Location information from visitors to the Sites on a city-regional basis.

To learn more about how we use cookies and to manage your cookie settings, please see our Cookie Policy.

Personal Data We Collect About You from Other Sources

In some cases, we may receive personal data about you from other sources, such as advertising networks, internet service providers, data analytics providers, government entities, operating systems and platforms, social networks, and data brokers.

2. How We Use Your Personal Data

We use the personal data we collect to provide the Services to you, to improve our Sites and Services, and to protect our legal rights. In addition, depending on how you interact with our Sites and Services, we may use the personal data we collect to:

• Process your account registration;
• Process your loan application;
• Review your job application;
• Provide member account disclosures and notifications for certain loan activity;
• Respond to your requests, feedback, and inquiries;
• Contact you regarding our products and services that we feel may be of interest to you – to unsubscribe from our marketing emails, please click the unsubscribe link included in the footer of our emails;
• Communicate with you about our Sites or Services or to inform you of any changes to our Sites or Services;
• Provide support;
• Maintain and improve our Sites and Services;
• Protect the security and integrity of our Sites and Services;
• Investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or violations of our Terms of Use, and to otherwise fulfill our legal obligations;
• Monitor compliance with and enforce this Privacy Policy and any other applicable agreements and policies;
• Defend our legal rights and the rights of others;
• Fulfill any other purposes for which you provide it, or any other purpose we deem necessary or appropriate;
• Efficiently maintain our business; and
• Comply with applicable law.

3. How We Share Your Personal Data

We may share the personal data that we collect about you in the following ways:

• With vendors who perform data or site-related services on our behalf (e.g., email, hosting, maintenance, backup, analysis, etc.);
• With vendors to prepare, deploy and analyze advertising content;
• To the extent that we are required to do so by law;
• In connection with any legal proceedings or prospective legal proceedings;
• To establish, exercise, or defend our or a third party's legal rights, including providing information to others for the purposes of fraud prevention;
• With any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal data where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal data;
• With any other person or entity as part of any business or asset sale, equity transaction, merger, acquisition, bankruptcy, liquidation, or similar proceeding or in preparation for any of these events;
• With partners to provide you with information about a mortgage loan, real estate and/or home-related products or services that may be of interest to you;
• With third parties involved in your transaction, such as real estate agents;
• With any other person or entity where you consent to the disclosure; and
• For any other purpose disclosed by us when you provide the personal data or for any other purpose we deem necessary, including to protect the health or safety of others.

The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.

4. Third-Party Services

Third-Party Processors

We use financial information to process your transaction, to improve and expand our service, and to determine your financial health. If you register as a borrower, we will use financial information about you to facilitate your loan request and service your loan. We use this information to process your loan application or transaction and enable payments and fund transfers with financial institutions. If you consent to have Company request your financial information directly from your financial institution, we may work with a third party to access and collect such information on our behalf.

Software

Our Sites may use the Google Maps API, Google Places API Google Geocoding API, Google Geolocation API, Google Street View Static API, Google Maps Elevation API, and/or other Google offerings. Google's Privacy Policy and Policies for Geocoding API are incorporated herein by reference.

5. Universal Opt-Out Mechanisms

The Sites recognize the Global Privacy Control ("GPC") signal. If you are using a browser setting or plug-in that sends an opt-out preference signal to each website you visit, we will treat that as a valid request to opt out. To download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use.

Some internet browsers incorporate a "Do Not Track" feature that signals to websites you visit that you do not want to have your online activity tracked. Given that there is not a uniform way that browsers communicate the "Do Not Track" signal, the Sites do not currently interpret, respond to, or alter their practices when they receive "Do Not Track" signals.

6. Security

We maintain commercially reasonable security measures to protect the personal data we collect and store from loss, misuse, destruction, or unauthorized access. However, no security measure or modality of data transmission over the Internet is 100% secure. Although we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which we collect it, such as to provide you with the service you have requested, and for the purpose of satisfying any legal, accounting, contractual, or reporting requirements that apply to us.

8. Third-Party Links

The Sites may contain links that will let you leave the Sites and access another website. Linked websites are not under our control. We accept no responsibility or liability for these other websites.

9. Children's Privacy

The Sites and Services are not intended for children under 13 years of age. We do not knowingly collect, use, or disclose personal data from children under 13.

10. Your State Privacy Rights and Additional Disclosures

Depending on the state in which you reside, you may have certain privacy rights regarding your personal data. For example, California, Minnesota, Oregon, Texas, and other states have passed privacy laws. If you are a California resident, please see our "Notice to California Residents" section below. For other state residents, your privacy rights may include (if applicable):

• The right to confirm whether or not we are processing your personal data and to access such personal data and the categories of personal data we are processing or have processed;
• The right to obtain a copy of your personal data that we collected from and/or about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another controller without hindrance, where the processing is carried out by automated means;
• The right to obtain a list of specific third parties to which we have disclosed personal data;
• The right to delete personal data that we collected from and/or about you, subject to certain exceptions;
• The right to correct inaccurate personal data that we maintain about you, subject to certain exceptions;
• The right, if applicable, to opt out of the processing of your personal data for purposes of (1) targeted advertising; (2) the "sale" of your personal data (as that term is defined by applicable law); and (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you;
• If your personal data is profiled in furtherance of decisions that produce legal or similarly significant effects concerning you, you have the right to question the result of the profiling, to be informed of the reason that the profiling resulted in the decision, and, if feasible, to be informed of what actions you might have taken to secure a different decision (and the actions that you might take to secure a different decision in the future). If applicable, you also have the right to review the personal data used in the profiling and, if the decision is determined to have been based upon inaccurate personal data, the right to have the data corrected and the profiling decision reevaluated based upon the corrected data;
• If we are required by applicable law to obtain your consent to process sensitive personal data, the right to withdraw your consent; and
• The right not to receive discriminatory treatment by us for the exercise of your privacy rights.

We use cookies and other online tracking technologies to display advertisements about our products to you on nonaffiliated websites, applications, and online services. This is "targeted advertising" under applicable privacy laws. When we engage in those activities, we sell personal data (i.e., information from cookies) to third-party advertisers and analytics companies.

Texas Residents:

NOTICE: We may sell your sensitive personal data.

To exercise your rights, please submit a request through our interactive webform available here or by calling us at (800) 450-2010 Ext. 7100. If legally required, we will comply with your request upon verification of your identity and, to the extent applicable, the identity of the individual on whose behalf you are making such request. To do so, we will ask you to verify data points based on information we have in our records. If you are submitting an opt-out request on behalf of another individual, please use the same contact methods described above. We will process authorized agent requests in accordance with applicable law. If we refuse to take action regarding your request, you may appeal our decision through our interactive webform available here or by replying to the email you received from us in response to your request. If you would like to opt out of targeted advertising, you may alter your cookie preferences here.

Oregon Residents: Please see our NMLS Consumer Access page for a list of our business names registered with the Oregon Secretary of State, as well as any assumed business names that we use in Oregon.

11. Notice to California Residents

The California Consumer Privacy Act, as amended by the California Privacy Rights Act of 2020 ("CCPA"), requires that we provide California residents with a privacy policy that contains a comprehensive description of our online and offline practices regarding the collection, use, disclosure, sale, sharing, and retention of personal information and of the rights of California residents regarding their personal information. This section of the Privacy Policy is intended solely for, and is applicable only as to, California residents. If you are not a California resident, this section does not apply to you and you should not rely on it.

The CCPA defines "personal information" to mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. Personal information does not include publicly available, deidentified or aggregated information or lawfully obtained, truthful information that is a matter of public concern. For purposes of this "Notice to California Residents" section, we will refer to this information as "Personal Information."

The CCPA's privacy rights described below do not apply to Personal Information that we collect, process, sell, or disclose subject to the federal Gramm-Leach-Bliley Act and its implementing regulations or the California Financial Information Privacy Act. Because we are subject to those laws and regulations, much of the Personal Information that we collect is exempt from the CCPA. Your choices and rights with respect to our use and sharing of that information are subject to our U.S. Financial Privacy Notice.

The CCPA's privacy rights also do not apply to certain types of Personal Information subject to the federal Fair Credit Reporting Act ("FCRA"). Some of our services are subject to the FCRA and, therefore, exempt from the CCPA on that basis.

If you are a California resident and a current or former employee, job applicant, or independent contractor of ours, please see our California Privacy Policy for Applicants and Employees for more information on our collection and use of your Personal Information in that capacity.

Notice at Collection of Personal Information

We currently collect and, in the 12 months prior to the Last Updated Date of this Privacy Policy, have collected the following categories of Personal Information:

• Identifiers (name, alias, postal address, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number)
• Unique personal identifiers (device identifier; cookies, beacons, pixel tags, mobile ad identifiers, or other similar technology; customer number, unique pseudonym, or user alias; other forms of persistent or probabilistic identifiers that can be used to identify a particular consumer or device)
• Personal information described in California's Customer Records statute (California Civil Code § 1798.80(e)) (signature, physical characteristics or description, telephone number, bank account number, credit card number, debit card number, or any other financial information (such as bank statements and information about your income and financial obligations), medical information (such as medical debts and disability income), as well as the categories listed in the "Identifiers" category above)
• Characteristics of protected classifications under California or federal law (race, color, sex/gender (including pregnancy, childbirth, and/or related medical conditions), age (40 and older), national origin, disability, citizenship status, marital status, military or veteran status, status as a victim of domestic violence, request for family care leave, request for leave for an employee's own serious health condition, request for pregnancy disability leave)
• Commercial information (records of personal property, products or services purchased, obtained, or considered; other purchasing or consuming histories or tendencies)
• Biometric information (fingerprint, imagery of face, voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, keystroke patterns or rhythms)
• Internet or other electronic network activity information (browsing history; search history; and information regarding consumer's interaction with website, application, or advertisement)
• Geolocation data
• Audio, electronic, visual, or similar information
• Professional or employment-related information (including employment history)
• Education information
• Inferences drawn from above information to create a profile about a consumer reflecting the consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes
• Sensitive Personal Information (Personal Information that reveals a consumer's Social Security, driver's license, state identification card, or passport number; account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation (1,850 ft.); racial or ethnic origin; the processing of biometric information for the purpose of uniquely identifying a consumer)

We collect Personal Information directly from California residents and from advertising networks, internet service providers, data analytics providers, government entities, operating systems and platforms, social networks, and data brokers. We do not collect all categories of Personal Information from each source.

In addition to the purposes stated in the "How We Use Your Personal Data" section above, we currently collect and have collected the above categories of Personal Information for the following business or commercial purposes:

• Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
• Helping to ensure security and integrity to the extent the use of your Personal Information is reasonably necessary and proportionate for these purposes
• Debugging to identify and repair errors that impair existing intended functionality
• Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of your current interaction with us, provided that your Personal Information is not disclosed to another third party and is not used to build a profile about you or otherwise alter your experience outside the current interaction with us
• Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, or providing similar services
• Providing advertising and marketing services to you provided that, for the purpose of advertising and marketing, our service providers and/or contractors shall not combine the Personal Information of opted-out consumers that the service provider or contractor receives from us or on our behalf with Personal Information that the service provider or contractor receives from, or on behalf of, another person or persons or collects from its own interaction with you
• Undertaking internal research for technological development and demonstration
• Undertaking activities to verify or maintain the quality or safety of a service and to improve, upgrade, or enhance the service
• Advancing our commercial or economic interests, such as by enabling or effecting, directly or indirectly, a commercial transaction

Sale, Sharing, and Disclosure of Personal Information

The following table identifies the categories of Personal Information that we sold or shared to third parties in the 12 months preceding the Last Updated Date of this Privacy Policy and, for each category, the categories of third parties to whom we sold or shared Personal Information:

Category of Personal Information	Categories of Third Parties
Identifiers (name, alias, postal address, online identifier, Internet Protocol address, email address, account name) Unique personal identifiers (device identifier; cookies, beacons, pixel tags, mobile ad identifiers, or other similar technology; customer number, unique pseudonym, or user alias; other forms of persistent or probabilistic identifiers that can be used to identify a particular consumer or device) Personal information described in California's Customer Records statute (California Civil Code § 1798.80(e)) (physical characteristics or description, telephone number)	Marketing providers Advertising networks Data analytics providers Business partners
Characteristics of protected classifications under California or federal law (age (40 and older))	Marketing providers Advertising networks Data analytics providers Business partners
Internet or other electronic network activity information (browsing history; search history; and information regarding consumer's interaction with website, application, or advertisement)	Marketing providers Advertising networks Data analytics providers Business partners
Geolocation data Audio, electronic, visual, or similar information Inferences drawn from above information to create a profile about a consumer reflecting the consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes	Marketing providers Advertising networks Data analytics providers Business partners

We sold or shared Personal Information to third parties for the following business or commercial purposes:

• Auditing related to counting ad impressions
• Providing advertising and marketing services
• Advancing our commercial or economic interests

We disclosed all of the categories of Personal Information identified in the "Notice at Collection of Personal Information" section above to service providers or contractors for a business purpose in the 12 months preceding the Last Updated Date of this Privacy Policy.

We disclosed Personal Information for the following business or commercial purposes:

• Auditing related to counting ad impressions
• Helping to ensure security and integrity
• Debugging to identify and repair errors
• Short-term, transient use
• Performing services
• Providing advertising and marketing services
• Advancing our commercial or economic interests

We do not knowingly collect, sell, or share the Personal Information of consumers under 16 years of age. We do not use Sensitive Personal Information for purposes other than those allowed by the CCPA and its regulations.

Retention of Personal Information

For an explanation of how long we retain Personal Information, please see the "Data Retention" section above.

Your Rights

If you are a California resident, you have the following rights with respect to your Personal Information:

• The right to know what Personal Information we have collected about you, including the categories of Personal Information, the categories of sources from which we collected Personal Information, the business or commercial purpose for collecting, selling, or sharing Personal Information (if applicable), the categories of third parties to whom we disclose Personal Information (if applicable), and the specific pieces of Personal Information we collected about you;
• The right to delete Personal Information that we collected from you, subject to certain exceptions;
• The right to correct inaccurate Personal Information that we maintain about you;
• If we sell or share Personal Information, the right to opt out of the sale or sharing;
• If we use or disclose sensitive Personal Information for purposes other than those allowed by the CCPA and its regulations, the right to limit our use or disclosure; and
• The right not to be retaliated against for exercising privacy rights the CCPA confers.

How to Submit a Request to Know, Delete, and/or Correct

You may submit a request to know, delete, and/or correct through our interactive webform available here or by calling us toll free at (800) 450-2010 Ext. 7100.

As mentioned above, if you are a California resident who has a financial product or service with us, much of the Personal Information that we collect is exempt from the CCPA and, therefore, is not subject to the rights discussed in this "Notice to California Residents" section. Your choices and rights with respect to our use and sharing of that information are subject to our U.S. Financial Privacy Notice.

If you are submitting a request on behalf of a California resident, please submit the request through one of the designated methods discussed above. After submitting the request, and if the request is not subject to an exemption or exception, we will require additional information to verify your authority to act on behalf of the California resident.

Our Process for Verifying a Request to Know, Delete, and/or Correct

If we determine that your request is subject to an exemption or exception, we will notify you of our determination. If we determine that your request is not subject to an exemption or exception, we will comply with your request upon verification of your identity and, to the extent applicable, the identity of the California resident on whose behalf you are making such request.

If you maintain a password-protected account, we may verify your identity through existing authentication practices available through your account. Prior to disclosing or deleting the Personal Information, we may ask you to re-authenticate yourself with respect to that account.

If you do not maintain a password-protected account, or if you are an account-holder but we suspect fraudulent or malicious activity with your account, we will verify your identity either to a "reasonable degree of certainty" or a "reasonably high degree of certainty" depending on the sensitivity of the Personal Information and the risk of harm to you by unauthorized disclosure, deletion, or correction as applicable. To do so, we will ask you to verify data points based on information we have in our records concerning you.

Right to Opt Out of Sale or Sharing of Personal Information

If you are a California resident, you have the right to direct us to stop selling or sharing your Personal Information.

You may submit a request to opt out of sales or sharing through our interactive webform available here. If you have enabled privacy controls on your browser (such as a plugin), we will also treat that as a valid request to opt out. Please see the "Universal Opt-Out Mechanisms" section above for more information.

Right to Limit Use of Sensitive Personal Information

California residents also have the right to limit our use or disclosure of Sensitive Personal Information if we use it for purposes other than those specified in the CCPA and its regulations. As stated above, we do not currently use or disclose Sensitive Personal Information for purposes other than those allowed by the CCPA and its regulations. However, if you are a California resident, you still may submit a request to limit, and we will record your instructions and incorporate them in the future if our policy changes. You may submit requests to limit through our interactive webform here or by calling us toll free at (800) 450-2010 Ext. 7100.

12. Accessibility

We are committed to ensuring this Privacy Policy is accessible to individuals with disabilities. If you are using a screen reader or other auxiliary aid and are having problems viewing this Privacy Policy, please call (800) 450-2010 Ext. 7100 for assistance.

13. Media Information

We obtain contact details and other personal information regarding media contacts and influencers from a variety of sources, including Cision. If you wish to know about how such information is collected and used, please refer to Cision's privacy policy notice at: www.cision.com/us/legal/privacy-policy/.

14. How to Contact Us

To contact us for questions or concerns about our privacy policies or practices, please contact us via email at PrivacyRequests@nafinc.com or via telephone at (800) 450-2010 Ext. 7100.