Privacy Policy

Last updated September 11, 2026 — Account Security Update

Our commitment to your privacy

We never sell your data. Not to advertisers, not to data brokers, not to anyone.

Stored locally and synced to your account. Account data supports cross-device continuity; documents and chats are processed to provide the requested result.

You’re always in control. Download your Lighthouse account data from Settings at any time.

1. Information We Collect

Lighthouse requires a verified account. We collect your name and email address and process the password you create; Lighthouse stores a one-way password hash rather than your readable password. We also collect account, session, device, browser, and IP metadata; Home Profiles; document summaries and extracted mortgage facts; borrower context; saved letters; feedback; settings; notification subscriptions; usage statistics; and messages or form values you submit for processing. Document analysis is designed to exclude Social Security numbers, dates of birth, demographic monitoring data, and full account, loan, routing, and payment-card numbers. A mortgage account number you deliberately enter into a saved letter may be stored in that letter.

2. Where Your Data Lives

Selected preferences, temporary conversation state, and document previews may remain in your browser. Signed-in account data—including your identity, Home Profiles, lean document summaries, borrower context, saved letters, settings, usage, notifications, and feature records—is stored in Lighthouse's hosted PostgreSQL database so it can sync across devices. Raw uploaded files and full chat transcripts are processed in real time and are not saved in account sync.

3. How We Use Your Data

We use submitted data to create and authenticate your account, verify your email address, provide password recovery and security notices, maintain sessions, provide document analysis, mortgage guidance, calculators, letters, Home Profiles, market research, notifications, support, and billing, prevent abuse, diagnose failures, and improve the product when account-linked usage analytics are enabled. We do not sell personal information or use mortgage data for advertising or lead sales.

4. Third-Party Processing (AI and Search)

Document content, chat messages, relevant saved context, letter form values, and lookup queries are sent to the configured AI provider for the feature you request. Lighthouse currently supports Google Gemini and, if configured, Anthropic. Some current-information features use Google Search grounding. Google states that paid Gemini API prompts and responses are not used to improve its products, while handling differs for unpaid services; Google stores grounded prompts, context, and output for 30 days. Do not submit information that is not needed for the requested feature.

5. Service Providers and Lighthouse Pro

Lighthouse uses hosting and database providers to operate the app, Resend to deliver account-verification, password-reset, security, and reminder email, browser push services when you enable notifications, and Stripe, Inc. to process Lighthouse Pro payments. Stripe receives payment and transaction information under its own privacy terms. Lighthouse does not receive or store your full card number; it stores customer, subscription, invoice, purchase-status, and entitlement references needed to provide Pro and support billing.

6. Data Retention

Browser data persists until you clear it or the browser removes it. Account-owned Home Profiles, summaries, context, letters, settings, feedback, notifications, and usage records remain until you clear them, delete your account, or request deletion. Raw uploads and full chat transcripts are not saved after real-time processing. Share links stop working after 30 days or when revoked. Authentication, email-delivery, security, error, billing, consent, and audit records are kept only as long as reasonably needed for those purposes or as required by law; external processors may retain their own records under their policies.

7. Your Rights and Choices

You can download your account data, clear mortgage working data, delete your account, revoke shared links, disable notifications, and turn off account-linked usage analytics in Settings. Turning off usage analytics deletes existing account-linked product analytics and stops new ones, but does not disable records required for authentication, security, delivery, support, consent, or billing. California residents may have additional rights to know, correct, delete, or limit certain uses of personal information. Lighthouse does not sell or share personal information for cross-context behavioral advertising. Contact us for help with a request; some Stripe or legally required records may need to be handled or retained separately.

8. Age Eligibility

Lighthouse accounts are only for people age 18 or older. We do not knowingly collect account data from anyone under 18.

9. Security

Lighthouse hashes account passwords with a memory-hard password-derivation function and does not store readable passwords. Lighthouse also uses encrypted transport, Secure and HttpOnly session cookies in production, hashed single-use email-verification and password-reset tokens, CSRF protection, access controls, sign-in rate limits, and data-minimization measures. Raw mortgage files are processed in memory rather than retained by Lighthouse. No method of transmission, processing, or storage is 100% secure.

10. No Affiliation with Lenders or Servicers

Lighthouse Companies, LLC is an independent, standalone entity. Lighthouse is not owned by, operated by, endorsed by, or affiliated with any mortgage lender, loan servicer, bank, credit union, or other financial institution referenced within the app or its output, including any servicer identified through the Servicer Lookup tool or named in a generated letter. Mentions of specific lenders or servicers are for informational and identification purposes only and do not imply any partnership, endorsement, or business relationship.

11. Contact

Lighthousecompanies2026@gmail.com