RateUpdate Privacy Policy

Last updated: October 15, 2026

This Privacy Policy explains how Marketing Supply Co, LLC, doing business as RateUpdate ("RateUpdate," "we," "us," or "our"), collects, uses, shares, and protects personal information when you visit https://www.rateupdate.io, use our web application at https://app.rateupdate.io, or otherwise interact with us (together, the "Services").

If you have questions, email us at admin@rateupdate.io.

Quick summary

• We collect account, billing, and usage information from the loan officers who use RateUpdate, plus information about website visitors.
• Our customers upload contact lists of past clients and referral partners so we can send rate digests for them. For that information, we work on behalf of the customer. See Section 2.
• We use PostHog for analytics and session recordings on our website and in our app, Bubble to run our app, Stripe for payments, and Google Tag Manager, Google Analytics, and the Meta Pixel on our website.
• We do not sell personal information for money. Our website uses advertising and measurement tools (Meta Pixel now, Google Ads coming soon) that some state laws treat as "sharing" for advertising. You can opt out (Sections 5 and 11).
• You may have rights to access, correct, export, or delete your information. Email admin@rateupdate.io.

1. Who this policy covers

• Customers and users: loan officers and other mortgage professionals who sign up for or use RateUpdate;
• Website visitors: people who visit our marketing website or blog; and
• Other contacts: people who email, text, or call us.

Section 2 explains how we handle information about recipients, the past clients and referral partners our customers send digests to.

2. Recipient information: we act on behalf of our customers

Customers upload or connect contact lists so RateUpdate can send branded rate digests to them by email, by SMS through the customer's HighLevel account, or by iMessage through LightSend. This information ("Customer Data") can include recipients' names, email addresses, phone numbers, and related details the customer provides, plus message history and delivery or engagement status.

For Customer Data, we act as the customer's service provider (or "processor"):

• We process recipient information only to provide the Services to the customer and according to the customer's instructions.
• We do not sell recipient information, use it for our own marketing, or use it for advertising.
• The customer is responsible for having any consent the law requires to message its recipients and for honoring opt-outs.

If you received a rate digest, it was sent on behalf of the loan officer named in it. To stop receiving them, use the unsubscribe link in the email or reply STOP to a text. For other questions, contact that loan officer. If you contact us, we will forward your request to the customer or help them respond.

The rest of this policy covers information we handle for our own purposes.

3. Information we collect

Information you give us

• Account information: name, email address, phone number, company, and login credentials.
• Branding and compliance details: your photo, logo, title, contact details, NMLS and licensing information, and digest settings.
• Billing information: billing name and address. Card data is collected and stored by Stripe, not by us; we receive limited details such as card type, last four digits, expiration date, and billing status. See https://stripe.com/privacy.
• Connected accounts: information needed to connect HighLevel or LightSend, such as account identifiers and authorization details.
• Communications: what you send us when you contact support or otherwise communicate with us.

Information collected automatically

• Device and log data: IP address, browser and device type, operating system, referring URLs, pages viewed, and visit times.
• Usage and analytics data: how you use the website and app, such as clicks and navigation, collected through PostHog, Google Analytics, and Google Tag Manager.
• Session recordings: PostHog session recordings capture how you interact with pages, such as mouse movements, clicks, scrolling, and what appears on screen, on our website and inside the RateUpdate app. Because recordings run in the app, they may capture information displayed or entered on screen, including Customer Data such as recipient names and contact details. We use recordings to provide support, fix bugs, and improve the product, not for advertising.
• Advertising and pixel data: information collected by the Meta Pixel and, once enabled, Google Ads tags, such as pages visited, ad clicks, and actions like signing up (see Section 5).
• Message data: delivery and engagement information for digests, such as whether an email was delivered or opened or a link was clicked.

Information from other sources

• Advertising partners: if you click one of our ads, we may receive information about that click and whether you later took an action on our website.
• Connected services: information from HighLevel or LightSend needed to send messages and show delivery status.

4. How we use information

We use information to provide and support the Services; send digests at our customers' direction; process payments; send service, billing, and security messages; send marketing by email or text (you can opt out anytime); advertise RateUpdate online and measure our ads; understand usage, fix bugs, and improve the Services; keep the Services secure and prevent fraud; and comply with law and enforce our agreements.

We do not use recipient information in Customer Data for our own marketing or advertising.

5. Cookies, analytics, session recordings, and advertising

We and our providers use cookies, local storage, pixels, and similar technologies to keep you signed in, remember preferences, secure the Services, understand usage, and measure advertising.

PostHog. We use PostHog for analytics and session recordings on our website and app. PostHog data is sent through our own domain (t.rateupdate.io) and processed by PostHog in the United States. See https://posthog.com/privacy.

Google Tag Manager and Google Analytics. Our website uses Google Tag Manager to load tags and Google Analytics to measure traffic. See https://policies.google.com/privacy. You can install the Google Analytics opt-out browser add-on at https://tools.google.com/dlpage/gaoptout.

Meta Pixel. Our website uses the Meta (Facebook) Pixel to measure visits and actions and to show RateUpdate ads on Meta platforms, including to people who visited our website. See https://www.facebook.com/privacy/policy. You can manage ad preferences in your Meta account settings.

Google Ads (coming soon). We plan to use Google Ads advertising and conversion-tracking cookies or tags on our marketing website to show RateUpdate ads to people who may be interested, including past visitors, and to measure whether ads lead to sign-ups. Google may collect your IP address, device identifiers, and pages visited. You can opt out of personalized Google ads at https://adssettings.google.com.

Other providers. Our website is hosted on Webflow and loads fonts from Google Fonts, and our demo video is hosted by Loom. These providers may receive your IP address and device information.

Advertising tools run only on our marketing website. We never use recipient information or other Customer Data for advertising.

Your choices. You can block or delete cookies in your browser, though some features may stop working. You can learn about industry opt-outs at https://optout.aboutads.info, and opt out of advertising "sharing" by emailing us (Section 11).

6. How we share information

We do not sell personal information for money. We share it only as follows:

• Service providers that act on our instructions:

• Channels you connect. When you send SMS digests through HighLevel or iMessage digests through LightSend, we send the message content and recipient details to that service to deliver them. These services are governed by their own terms and policies.
• Recipients you direct. We deliver digests to the recipients you choose.
• Business transfers in a merger, acquisition, financing, or sale of assets, subject to this policy.
• Legal and safety when required by law or needed to protect rights, property, or safety.
• With your consent or at your direction.

Text messages. RateUpdate texts its customers. If you opt in to texts from us, we will not share your mobile number or text-messaging opt-in data or consent with third parties or affiliates for their marketing or promotional purposes. We may share it with providers that help us deliver messages. Reply STOP to opt out or HELP for help. Message and data rates may apply.

7. How long we keep information

We keep account information and Customer Data for as long as the account exists and, after cancellation, until the customer asks us to delete it. This means we may keep it indefinitely unless a deletion request is made. We may keep some information longer where required by law.

Deletion and export requests. Email admin@rateupdate.io to ask us to delete or export your account information and Customer Data. After deletion, information may remain in backups for a limited time, during which it is kept secure and out of use. We may keep limited records to comply with law, prevent fraud, resolve disputes, and enforce our agreements.

8. How we protect information

We use reasonable administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee security. Keep your login credentials safe. If we learn of a security incident affecting your information, we will notify you as required by law.

9. Your choices

• Account information: update it in your account settings.
• Marketing emails: click "unsubscribe" or contact us. We will still send account messages.
• Text messages: reply STOP to opt out or HELP for help. Message and data rates may apply.
• Advertising: use the opt-outs in Section 5, block cookies, or email admin@rateupdate.io with "Do Not Share" in the subject line.
• Closing your account: cancel in the app. Cancelling does not delete your data; email admin@rateupdate.io to have it deleted or exported.

10. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or get a portable copy of your personal information; to opt out of sale, sharing for targeted advertising, or certain profiling; to withdraw consent; and not to be discriminated against for exercising your rights. Residents of states with comprehensive privacy laws, including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, may have these rights. Some laws apply only to businesses meeting certain thresholds.

How to make a request. Email admin@rateupdate.io with "Privacy Request" in the subject line. We will verify your identity by matching information we already have. You may use an authorized agent. We will respond within the time required by law.

Appeals. If we decline your request, email admin@rateupdate.io with "Privacy Appeal" in the subject line. If your appeal is denied, you may contact your state attorney general.

Recipient requests about Customer Data should go to the loan officer who sent the digest (Section 2).

11. Additional information for California residents

This section supplements this policy under the California Consumer Privacy Act, as amended (CCPA).

We disclose these categories to the service providers in Section 6 for business purposes. We do not sell personal information for money. However, our marketing website uses the Meta Pixel and (soon) Google Ads, which may count as "sharing" identifiers and internet activity for cross-context behavioral advertising. To opt out of sharing, email admin@rateupdate.io with "Do Not Share" in the subject line, use the opt-outs in Section 5, or block cookies in your browser. Recipient information and other Customer Data are never sold or shared for advertising. We do not knowingly sell or share personal information of consumers under 16. We do not use sensitive personal information for purposes that give a right to limit it, and we do not offer financial incentives for personal information.

Shine the Light. We do not disclose personal information to third parties for their direct marketing purposes.

12. Children's privacy

The Services are for business use by adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, contact admin@rateupdate.io and we will delete it.

13. International users

The Services are operated in and intended for the United States. If you use them from elsewhere, your information will be processed in the United States.

14. Changes to this policy

We may update this policy. We will change the "Last updated" date and, for material changes, notify customers by email or in the Services.

15. Contact us

Marketing Supply Co, LLC (dba RateUpdate)
Email: admin@rateupdate.io
Mail: 320 E 600 S, Saint George, UT 84790, United States