Privacy notice

The short version

We are a data business. We collect information about homeowners — contact details, property attributes, and modeled loan estimates — and we sell and share it with licensed mortgage lenders, brokers, and loan originators so they can contact you about refinancing or borrowing against your home. You did not ask them to. You did not ask us to. That is the point of this notice.

Under California, Colorado, Virginia, Connecticut, Texas, Oregon and other state privacy laws, what we do is a “sale” and a “share” of personal information. We are not going to describe it any other way. You can opt out at any time, for free, without an account, and without telling us why.

What we collect

We hold the following categories of personal information:

• Identifiers — name, postal address, telephone number, email address, IP address, an internal record identifier, and — only where a buyer purchases the optional credit add-on — date of birth.
• Property and real-property records — subject property address, property type, occupancy as stated at intake, and information derived from publicly recorded deeds, mortgages and deeds of trust, assessor rolls, and lien filings.
• Modeled commercial inferences — estimated property value, estimated loan balance, estimated available equity, estimated loan-to-value, estimated current interest rate, lien position, and — only where a buyer purchases the optional credit add-on — a modeled credit-score estimate. These are statistical estimates, not verified facts, and not sourced from a credit report or any consumer reporting agency.
• Recorded mortgage information — the loan type, recording date and original loan amount shown on the publicly recorded mortgage or deed of trust against the property.
• Provenance and suppression records — which sources built the record, when it was last refreshed, and when it was last checked against our opt-out and suppression lists.

What we do not collect

We do not collect or hold credit reports, credit-bureau scores, tradelines, credit inquiry history, Social Security numbers, financial account numbers, government identification numbers, precise geolocation, biometric data, or health data. We do not collect or infer race, color, national origin, religion, sex, sexual orientation, gender identity, marital or familial status, disability, or receipt of public assistance, and nothing we hold is used to segment or target on age. We do not knowingly collect information from anyone under 18.

Where it comes from

We did not get any of it from you directly. You never gave us your information and you never asked to hear from anyone, and we are not going to imply otherwise.

• Public records — county recorder filings including mortgages and deeds of trust, assessor rolls, and lien filings.
• Licensed data compilers, for contact-detail appends and telephone attributes matched to the owner of record.
• Our own modeling, which produces the estimated balance, equity, loan-to-value and interest-rate figures described above.

We do not obtain information from consumer reporting agencies, and we do not buy or sell mortgage credit trigger leads.

Why we use it, and who gets it

We use it to build and sell mortgage lead products, to run suppression and fraud checks, to service buyer accounts, and to meet our legal and recordkeeping obligations.

We sell and share it with licensed mortgage lenders, mortgage brokers, and mortgage loan originators whose licenses we verify through NMLS Consumer Access before their first delivery. We also disclose it to service providers who process it on our behalf under contract — hosting, payment processing, email delivery, and suppression-list providers — and to authorities where the law requires it.

We do not sell personal information to data brokers for onward resale, and our buyer agreement prohibits buyers from reselling or redistributing it.

How long we keep it

Suppression and deletion records are retained indefinitely, because keeping a record of your opt-out is the only way to keep honoring it when the same information reaches us again from a public-record refresh. Marketing records are retained no longer than 36 months from collection unless we are required to keep them longer.

Your rights, and how to use them

Wherever you live in the United States, you may ask us to:

• Tell you what personal information we hold about you and where we got it;
• Give you a copy of it in a portable format;
• Correct anything inaccurate;
• Delete it;
• Stop selling or sharing it — permanently;
• Appeal if we refuse any of the above.

We do not charge for this, we do not require you to create an account, and we will not ask why. We respond within 45 days and will tell you if we need a single 45-day extension. If we deny a request you may appeal by replying to our response, and if we deny the appeal we will tell you how to complain to your state attorney general.

Making a request

Use the opt-out and deletion form. It takes every request listed above, gives you a reference number, and starts the 45-day clock the moment you submit it.

If you would rather not use a form, email support@vonta.ai with the subject line Privacy Request. Either way, include the name, property address, and phone number the request relates to so we can find the records — we use that information only to process the request, and our records are keyed on property addresses and phone numbers, so those two match most reliably.

An authorized agent may submit a request on your behalf with written proof of authority.

Do Not Sell or Share My Personal Information

Use the opt-out form. It is free, needs no account, and asks for no explanation.

Your opt-out request stops us selling or sharing your information going forward, and we add you to a permanent suppression list so later data refreshes do not reintroduce you. We also notify buyers who already received your record and require them to suppress it within ten business days.

We detect and record Global Privacy Control and other recognized universal opt-out signals, and we honor them as an opt-out of sale and sharing for any personal information we collect through this website. But we want to be straight with you about what that signal cannot do here. Our homeowner records are built from public records and keyed to property addresses and telephone numbers, not to browsers. There is no link between the browser sending the signal and any record we hold, so a universal opt-out signal on its own cannot find and suppress your property record. If you want your homeowner record suppressed, you have to tell us which record — use the form. We would rather say that plainly than let you believe a browser setting had done something it has not.

Opting out here is separate from the FCRA prescreen opt-out at optoutprescreen.com. That one stops credit-based prescreened offers; it does not reach our data, and ours does not reach theirs. It is also separate from the National Do Not Call Registry, which you should register with directly at donotcall.gov.

Stopping calls

Opting out of the sale of your data stops future sales, but a company that already received your record will still have it. To stop calls, tell the company calling you to stop — under FCC rules effective April 2025, a revocation made by any reasonable means must be honored within ten business days. You can also tell us to stop contact and we will pass the revocation downstream to every buyer who received your record, who have ten business days to act on it. See our DNC and calling policy.

State-specific disclosures

California

Vonta meets California’s definition of a data broker. Our registration with the California Privacy Protection Agency and our enrollment in the DELETE Act’s Delete Request and Opt-Out Platform (DROP) are not yet in place — the annual registration window is 1–31 January. We will publish our registration number here as soon as it is issued: [registration number pending]. From the day we are enrolled we will check DROP at least every 45 days and process every request it carries within the statutory deadline. Until then, use the opt-out and deletion form or email support@vonta.ai — those reach us today, and we honor a request from either one exactly as we would a request arriving through DROP. You have the rights listed above, plus the right to limit the use of sensitive personal information — we do not collect any, so there is nothing to limit. We do not use or disclose personal information for purposes incompatible with those described here, and we will not discriminate against you for exercising any right.

Texas

Vonta is a data broker under Chapter 509 of the Texas Business and Commerce Code. We collect and sell personal data of Texas residents as described in this notice.

Other states

Residents of Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Utah, Virginia and other states with comprehensive privacy laws have the rights described above, including the right to opt out of targeted advertising, sale, and profiling in furtherance of decisions producing legal or similarly significant effects. We do not conduct such profiling.

Security

We maintain an information security program with encryption in transit and at rest, access controls, multi-factor authentication on administrative systems, vendor oversight, and an incident response plan. No system is perfectly secure, and we will not claim otherwise.

Changes

We will update this notice at least every twelve months and post the revised date at the top. Material changes will be announced on this page before they take effect.

Contact

Vonta Data Services LLC · support@vonta.ai