Privacy Policy

1. Information We Collect

When you submit a consultation request on this site, we collect the information you provide: your name, phone number, email address, mailing address, loan purpose, timeline, and language preference. We do not require you to create an account.

2. How We Use Your Information

We use this information to follow up on your consultation request, connect you with a licensed mortgage professional or partner, and — where you've consented — contact you by phone, text, or email about mortgage products and services. We do not sell your information to unrelated third parties.

3. Who We Share It With

We may share your information with mortgage professionals, lenders, or service providers we work with in order to fulfill your consultation request, and with vendors who help us operate this site (such as hosting and communications providers) under confidentiality obligations. We do not share your information with unrelated third parties for their own marketing purposes.

4. Social Media

If you interact with KeysToApproval on TikTok, Instagram, Facebook, or YouTube (for example, by commenting or messaging us), that platform's own privacy policy governs how it handles your information. We only receive what the platform makes available to us as the account operator.

4a. Google API Services / YouTube Data

KeysToApproval's internal publishing system connects to a single Google/YouTube account — the KeysToApproval brand channel — that we own and operate, using Google Sign-In (OAuth 2.0) and the YouTube Data API v3. No end user of this site authorizes or connects their own Google/YouTube account through KeysToApproval; only the brand's own operator does, for the sole purpose described below.

What Google data we access

We request only the youtube.upload scope. This grants our system permission to upload video files to that one connected channel. It does not grant access to the channel owner's Google profile, email, contacts, Drive files, or any other Google product or personal data, and we do not request any broader or additional scope.

How we use it

This access is used exclusively for one visible, user-facing feature: automatically publishing the mortgage-education videos our system generates to the connected YouTube channel on a schedule. We do not use it for any other purpose.

Sharing and transfer

We do not share, sell, or transfer any data obtained through this Google API access to any third party. It is never used for advertising or advertising-related purposes, and it is never read, reviewed, or accessed by any human reviewer except as strictly necessary for security, legal compliance, or at your explicit request (for example, to help diagnose a failed upload you've reported to us).

Storage and security

The OAuth access token and any associated refresh token are stored only on our own server — never with a third-party processor — encrypted at rest where supported by our infrastructure, transmitted only over encrypted (HTTPS/TLS) connections, and accessible only to the automated publishing system itself, not to individual staff members directly.

Retention and deletion

We retain this token only for as long as the YouTube channel remains connected for publishing. If you (as the channel owner) want us to delete it, or want to disconnect the channel, email us at the address in Section 12 and we will delete the stored token from our systems within 30 days. You can also revoke our access yourself at any time, immediately and independently of any request to us, from your Google Account permissions page.

KeysToApproval's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Automatically Collected Information

Like most websites, our servers and hosting/analytics providers automatically log certain technical information when you visit this site, including your IP address, browser type and version, device type, operating system, referring page, pages viewed, and the date and time of your visit. We use this information in aggregate to keep the site secure, diagnose technical issues, and understand general usage patterns — not to identify you personally.

6. Cookies and Similar Technologies

This site may use cookies or similar local-storage technologies that are strictly necessary for the site to function (for example, to keep you signed in to the internal dashboard, or to remember basic form state). We do not currently use third-party advertising or cross-site tracking cookies. Most browsers let you block or delete cookies through their settings; doing so may affect parts of the site that rely on them.

7. Data Retention and Security

We retain consultation request information for as long as needed to fulfill your request and for our legitimate business records, and in most cases no longer than 24 months after your last interaction with us, unless a longer period is required by law or needed to resolve a dispute. We use reasonable technical and organizational measures — including access controls, encrypted connections (HTTPS/TLS), and restricting who on our team can access stored data — to protect the information we hold. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Choices and Rights

You may ask us to access, correct, export, or delete your information, or opt out of further contact, at any time by emailing us at the address below. Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA) or the EU/UK General Data Protection Regulation (GDPR), including the right to know what personal information we hold about you, the right to request its deletion, and the right to non-discrimination for exercising these rights. We will verify your identity before fulfilling a request and will respond within the time required by applicable law.

9. International Users

This site and our servers are operated from the United States. If you access the site from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

10. Children's Privacy

This site is not directed to children under 18, and we do not knowingly collect information from them. If we learn that we have inadvertently collected information from a child under 18, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The "Last updated" date above reflects the most recent revision, and material changes will be reflected on this page.

12. Contact Us

Questions about this policy, or requests about your information? Email us at mleadtest@gmail.com.