DSCR Navigator Privacy Policy

Effective Date: September 25, 2026

Mortgage Broker Navigator LLC, doing business as DSCR Navigator (“DSCR Navigator,” “Mortgage Broker Navigator,” “Company,” “we,” “us,” or “our”), respects your privacy and is committed to protecting the personal information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, store, and protect information when you access or use the DSCR Navigator website, software platform, applications, communications, and related services (collectively, the “Service”).

This Privacy Policy applies to users of DSCR Navigator, including mortgage brokers, loan officers, processors, lenders, Account Executives, subscribers, prospective customers, website visitors, and other individuals who interact with us.

By accessing or using the Service, you acknowledge the practices described in this Privacy Policy.

1. Company Information

DSCR Navigator is operated by:

Questions concerning this Privacy Policy, privacy rights, security, or personal information may be directed to the contact information above.

2. Information We Collect

The information we collect depends upon how you interact with DSCR Navigator.

We may collect the following categories of information.

A. Account and Registration Information

When you create or maintain an account, we may collect:

• first and last name;
• email address;
• telephone number;
• company or employer name;
• job title or professional role;
• mortgage company information;
• NMLS information, if provided;
• username or account identifier;
• account type;
• profile information;
• communication preferences; and
• subscription information.

Passwords are handled through our authentication systems and should be stored using appropriate security protections rather than in readable plain text.

B. Authentication and Security Information

To protect user accounts and the Service, we may collect and maintain:

• login activity;
• authentication events;
• multifactor authentication status;
• device information;
• IP addresses;
• browser information;
• approximate geographic information derived from an IP address;
• session identifiers;
• security logs;
• failed login attempts;
• password reset events; and
• information relating to suspicious or potentially unauthorized access.

We use this information to authenticate users, detect fraud, prevent account takeover, investigate security events, and protect DSCR Navigator and its users.

C. Loan Scenario Information

Users may enter information concerning potential mortgage transactions in order to search loan programs, compare lenders, determine potential eligibility, or generate presentations.

Depending upon the scenario, this may include:

• borrower or client name;
• borrower type;
• citizenship or residency status;
• credit score or credit-score range;
• property address;
• property type;
• property value;
• purchase price;
• loan amount;
• loan-to-value ratio;
• debt service coverage ratio;
• rental income;
• lease information;
• property taxes;
• insurance;
• homeowners association dues;
• loan purpose;
• occupancy or investment information;
• reserve information;
• entity or LLC information;
• ownership history;
• property seasoning;
• prepayment penalty preferences;
• loan term preferences; and
• other information relevant to determining potential loan program eligibility.

Users are responsible for ensuring that they have the authority to provide personal information concerning their borrowers or clients.

D. Highly Sensitive Information

DSCR Navigator is not intended to function as a document repository for unnecessary highly sensitive consumer information.

Unless DSCR Navigator expressly provides a secure feature specifically designed to collect such information, users should not upload, enter, transmit, or store:

• Social Security numbers;
• complete taxpayer identification numbers;
• bank account numbers;
• bank routing numbers;
• online banking credentials;
• passwords;
• authentication codes;
• unredacted driver’s licenses;
• passports;
• complete consumer credit reports;
• complete payment card information;
• tax returns;
• unredacted bank statements; or
• other highly sensitive financial or identity information that is unnecessary to perform a DSCR Navigator search.

If such information is inadvertently submitted, users should contact us promptly.

E. Payment and Subscription Information

Paid subscriptions may be processed through third-party payment processors such as Stripe.

We may receive information relating to your transaction, including:

• subscription plan;
• payment status;
• billing history;
• billing address;
• card type;
• expiration information;
• limited payment-method identifiers;
• transaction identifiers; and
• the last four digits of a payment card.

Complete payment card information may be collected and processed directly by our payment processor rather than stored by DSCR Navigator.

F. Communications

If you contact us, submit a support request, report an error, suggest a guideline correction, provide feedback, or otherwise communicate with us, we may collect:

• your name;
• contact information;
• the contents of your communication;
• screenshots;
• attachments;
• support history;
• error reports; and
• information necessary to respond to your request.

G. Reviews and Account Executive Information

If you submit a review, lender update, Account Executive profile, guideline correction, or other contribution, we may collect and publish information associated with that submission as appropriate.

This may include:

• name;
• employer;
• professional contact information;
• lender affiliation;
• review content;
• responses;
• lender or program information; and
• date and time of submission.

H. Usage and Technical Information

When you interact with DSCR Navigator, we may automatically collect information such as:

• IP address;
• browser type;
• operating system;
• device type;
• referring pages;
• pages viewed;
• features used;
• buttons clicked;
• search activity;
• date and time of access;
• session duration;
• error events;
• performance information;
• application logs; and
• similar usage information.

We may use this information to operate, improve, secure, and analyze the Service.

3. How We Use Information

We may use information collected through DSCR Navigator to:

• create and administer user accounts;
• authenticate users;
• provide multifactor authentication;
• operate the DSCR Navigator platform;
• process loan scenario searches;
• compare potential lender programs;
• generate client presentations;
• save user scenarios;
• provide lender guideline information;
• personalize the user experience;
• process subscriptions and payments;
• communicate about accounts;
• provide requested customer support;
• send security and authentication notifications;
• send service-related communications;
• send SMS messages where the user has provided appropriate consent;
• send promotional communications where permitted;
• respond to questions and feedback;
• investigate guideline errors;
• maintain lender and Account Executive information;
• detect unauthorized access;
• detect scraping, automated extraction, or misuse;
• prevent fraud;
• identify compromised accounts;
• enforce our Terms of Use;
• protect our intellectual property;
• investigate cybersecurity incidents;
• monitor system performance;
• troubleshoot technical problems;
• develop and improve features;
• understand how users interact with the Service;
• maintain internal records;
• comply with legal obligations; and
• protect the rights, safety, property, and security of DSCR Navigator, our users, and others.

4. Automated Processing and Loan Search Results

DSCR Navigator uses software-based rules, calculations, search logic, and other automated processes to compare information entered by users against lender program information.

The Service may also use artificial intelligence or similar technology to assist with functions such as:

• information organization;
• guideline analysis;
• search;
• summarization;
• classification;
• support;
• document analysis; and
• maintaining or improving lender information.

Automated results generated by DSCR Navigator are informational tools for mortgage professionals.

DSCR Navigator does not itself make a consumer credit decision or approve or deny a mortgage loan.

Users remain responsible for verifying applicable lender requirements and making appropriate professional decisions concerning use of the information.

5. Artificial Intelligence and User Data

We may use artificial intelligence, machine-learning systems, or automated processing technologies in connection with operation of the Service.

Where third-party technology providers process information on our behalf, we seek to limit their use of information to providing contracted services to us, subject to applicable contractual and legal restrictions.

We do not sell borrower scenario information for use in training unrelated third-party artificial intelligence products.

We may use de-identified, aggregated, statistical, or non-personally identifiable information to understand usage patterns, improve search quality, evaluate product performance, improve lender guideline classification, develop new features, and operate the Service.

Where reasonably feasible, information used for these purposes may be aggregated or de-identified to reduce its connection to an identifiable individual.

6. How We Disclose Information

We do not sell personal information as that term is commonly understood.

We may disclose personal information in the circumstances described below.

A. Service Providers

We may provide information to vendors that perform services for us, such as:

• cloud hosting;
• database hosting;
• authentication;
• cybersecurity;
• payment processing;
• email delivery;
• SMS delivery;
• customer support;
• analytics;
• error monitoring;
• website hosting;
• data storage;
• backup services; and
• other technology infrastructure.

These providers may access information only as reasonably necessary to perform services for us and subject to applicable contractual or legal obligations.

B. Payment Processors

Payment information may be transmitted to payment processors such as Stripe to process subscriptions, refunds, recurring payments, and related transactions.

Payment processors maintain their own privacy and security practices.

C. Telecommunications and Messaging Providers

When you opt in to receive text messages, limited information may be provided to telecommunications and messaging providers, including providers such as Twilio and participating wireless carriers, as necessary to transmit and manage those communications.

Such disclosures are made solely for providing the requested communication service and not for the independent marketing of third parties.

D. Business Transfers

If Mortgage Broker Navigator LLC becomes involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or other business transaction, information may be transferred as part of that transaction subject to applicable law.

Any successor organization would remain subject to applicable obligations concerning personal information.

E. Legal and Security Purposes

We may disclose information when we reasonably believe disclosure is necessary to:

• comply with applicable law;
• comply with a subpoena, warrant, court order, or other lawful process;
• respond to a lawful government request;
• investigate fraud;
• investigate unauthorized access;
• investigate cyberattacks;
• investigate data theft or attempted data extraction;
• enforce our Terms of Use;
• protect our intellectual property;
• protect the rights or property of DSCR Navigator;
• protect users;
• prevent harm;
• investigate potential criminal activity; or
• defend against legal claims.

F. At Your Direction

We may disclose information when you direct or authorize us to do so.

For example, information included in a client presentation may be provided through a shareable presentation link at the direction of the user who creates the presentation.

Users are responsible for determining what information should be included in a presentation before sharing it.

7. SMS and Mobile Messaging Privacy

DSCR Navigator may allow users to opt in to receive SMS or MMS communications.

Messages may include:

• account verification;
• two-factor authentication;
• login or security alerts;
• customer support messages;
• account notifications;
• subscription or billing communications;
• requested reminders;
• product notifications; and
• promotional messages when the user has expressly consented to receive them.

SMS Consent

Providing a telephone number does not automatically enroll you in promotional SMS messages.

Where consent is required, we will request consent through the applicable signup, account, website, or other opt-in process.

SMS consent is voluntary unless a particular phone-based feature requires text messaging in order to function.

Mobile Information Is Not Sold or Shared for Marketing

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

In addition:

We do not share, sell, rent, or provide your mobile telephone number, SMS opt-in information, or messaging consent to third parties or affiliates for their own marketing or promotional purposes.

Text messaging originator opt-in data and consent will not be shared with any third party for marketing or promotional purposes.

We may provide mobile information to telecommunications providers, SMS platform providers, wireless carriers, and other service providers solely as necessary to deliver and support the messages you have authorized.

Message Frequency and Charges

Message frequency varies based upon your account activity, requested services, and the messaging programs in which you participate.

Message and data rates may apply.

Opting Out

You may opt out of SMS messages by replying STOP to a message.

We may send one final message confirming your opt-out.

For assistance, reply HELP or contact:

Opting out of promotional messages does not prevent us from communicating with you through other permitted channels concerning your account or transactions.

Mobile Number Changes

If you discontinue or transfer a mobile number associated with your DSCR Navigator account, you should update your account information or contact us so that messages are not inadvertently delivered to another person.

8. Email Communications

We may send transactional emails relating to:

• account creation;
• password resets;
• security;
• subscriptions;
• payments;
• account activity;
• platform updates;
• customer support;
• lender information; and
• other Service-related matters.

We may also send promotional or educational email communications where permitted by law.

You may unsubscribe from promotional emails using the unsubscribe mechanism provided in the message.

Unsubscribing from promotional communications does not necessarily prevent us from sending transactional or security-related messages necessary to administer your account.

9. Cookies and Similar Technologies

DSCR Navigator may use cookies, local storage, pixels, session technologies, and similar technologies to:

• keep users signed in;
• authenticate sessions;
• remember preferences;
• protect account security;
• prevent fraud;
• maintain application functionality;
• analyze website performance;
• measure usage; and
• improve the Service.

Some cookies may be essential to operation of the Service.

Third-party service providers may also use technologies necessary to provide services such as payment processing, security, authentication, communications, or analytics.

You may be able to control certain cookies through your browser settings. Disabling essential cookies may prevent portions of DSCR Navigator from functioning properly.

10. Analytics

We may use analytics tools to understand how users interact with DSCR Navigator.

Analytics information may include:

• pages viewed;
• features used;
• navigation patterns;
• device information;
• browser information;
• approximate location based on IP address;
• referral information; and
• performance data.

We use this information to improve the product, identify errors, evaluate feature usage, and improve the user experience.

11. Security

We take the security of DSCR Navigator and user information seriously.

We maintain administrative, technical, and organizational measures intended to protect information against unauthorized:

• access;
• acquisition;
• disclosure;
• alteration;
• destruction;
• theft;
• misuse; and
• loss.

Depending upon the system and information involved, security measures may include:

• encrypted network communications;
• encryption of sensitive stored information where appropriate;
• multifactor authentication;
• password hashing;
• role-based access controls;
• least-privilege access;
• secure authentication;
• firewalls;
• web application security controls;
• monitoring;
• logging;
• rate limiting;
• suspicious-activity detection;
• vulnerability management;
• backups;
• access restrictions;
• security alerts;
• software updates; and
• other safeguards.

We may monitor account and platform activity to identify suspected:

• credential theft;
• account takeover;
• unauthorized data extraction;
• scraping;
• automated attacks;
• abnormal querying;
• malicious access;
• unauthorized database activity; and
• other cybersecurity threats.

No internet service or electronic storage system can guarantee absolute security.

Accordingly, although we work to protect personal information, we cannot guarantee that unauthorized parties will never defeat security measures.

12. Data Theft, Scraping, and Unauthorized Access

We may collect and analyze technical information for the purpose of preventing theft or misuse of DSCR Navigator information.

This may include:

• IP addresses;
• session identifiers;
• account activity;
• device characteristics;
• search frequency;
• search patterns;
• login activity;
• downloads;
• presentation creation;
• access patterns;
• API or network requests;
• authentication events; and
• security alerts.

We may use this information to detect activity such as:

• systematic extraction of lender data;
• automated scraping;
• credential sharing;
• account takeover;
• attempts to bypass rate limits;
• unauthorized automated access;
• copying of the DSCR Navigator database;
• attempted reverse engineering;
• attacks against the Service; and
• other violations of our Terms of Use.

Suspected violations may result in account restrictions, suspension, termination, investigation, preservation of evidence, or legal action.

13. Access to Personal Information by Employees and Contractors

Access to personal information is intended to be limited to personnel, contractors, and service providers who reasonably require access to perform their responsibilities.

We may use technical and organizational controls to restrict administrative access based upon job responsibilities and business need.

14. Data Retention

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to:

• maintain an active account;
• provide the Service;
• maintain saved scenarios;
• process subscriptions;
• provide customer support;
• maintain security records;
• prevent fraud and abuse;
• resolve disputes;
• enforce agreements;
• maintain legally required records; and
• comply with legal obligations.

Different categories of information may be retained for different periods.

For example, certain security, billing, consent, transaction, or legal records may need to be retained after an account is closed.

When information is no longer reasonably necessary, we may delete, anonymize, or aggregate it, subject to applicable legal and operational requirements.

Backup copies may remain for a limited period after information is deleted from active systems.

15. De-Identified and Aggregated Information

We may create aggregated or de-identified information that does not reasonably identify a particular person.

For example, we may analyze:

• how frequently particular lender programs are searched;
• which guideline topics generate the most searches;
• platform usage trends;
• error rates;
• aggregate loan characteristics;
• system performance; and
• other statistical information.

We may use and disclose properly de-identified or aggregated information for legitimate business purposes, including product development, analytics, research, lender reporting, and improving the Service.

We will not intentionally attempt to re-identify information that we maintain as de-identified except where reasonably necessary to verify that de-identification methods are effective or as permitted by law.

16. Information Submitted About Other Individuals

Mortgage professionals using DSCR Navigator may enter information concerning borrowers, clients, employees, business partners, or other individuals.

If you submit information concerning another person, you represent that you have authority to provide the information and that your collection and disclosure of that information complies with applicable law.

You should enter only information reasonably necessary to use the Service.

17. Client Presentations and Shareable Links

DSCR Navigator may permit users to generate presentations or reports that can be shared with borrowers, clients, or others.

Users control whether and with whom these presentations are shared.

A person who possesses a valid shareable link may be able to view the associated presentation depending upon the settings available for that presentation.

Users should therefore:

• review presentations before sharing them;
• avoid including unnecessary personal information;
• share links only with intended recipients; and
• discontinue or revoke sharing where the Service provides that functionality and access is no longer appropriate.

18. Third-Party Websites and Services

DSCR Navigator may contain links to or integrations with third-party websites, lenders, payment processors, communications providers, and other services.

This Privacy Policy does not govern the independent privacy practices of third parties.

We encourage users to review the privacy policies of third-party services they use.

19. Business Customers and Service Provider Relationships

Mortgage Broker Navigator LLC may process information on behalf of mortgage brokers, lenders, or other business customers.

In those circumstances, the applicable business customer may determine the purposes for which certain borrower or client information is collected and used, while Mortgage Broker Navigator LLC processes the information in connection with providing DSCR Navigator.

Individuals with questions concerning information originally collected by their mortgage professional may need to contact that mortgage professional directly.

We will cooperate with reasonable privacy requests from business customers as appropriate and required by applicable law.

20. Privacy Rights

Depending upon where you reside and which privacy laws apply, you may have rights concerning your personal information.

These may include the right to:

• request access to personal information we maintain about you;
• request correction of inaccurate information;
• request deletion of certain information;
• obtain a copy of certain information;
• request information concerning categories of personal information collected;
• request information concerning how information is used or disclosed;
• withdraw certain previously provided consent;
• opt out of certain communications; and
• exercise other rights provided by applicable law.

Certain exceptions may apply.

For example, we may retain information when necessary to:

• complete a transaction;
• maintain security;
• prevent fraud;
• comply with law;
• maintain records;
• establish or defend legal claims;
• enforce contracts; or
• exercise other rights permitted by law.

To submit a privacy request, contact:

or:

We may need to verify your identity before fulfilling certain requests.

Authorized agents may submit requests where applicable law permits, subject to appropriate verification.

We will not unlawfully discriminate against an individual for exercising applicable privacy rights.

21. Sale of Personal Information

Mortgage Broker Navigator LLC does not sell personal information for monetary compensation.

We also do not sell or share mobile numbers, text-message opt-in information, or SMS consent information for third-party marketing or promotional purposes.

If our practices materially change, we will update this Privacy Policy and provide any choices required by applicable law before applying those practices to personal information.

22. Children’s Privacy

DSCR Navigator is a professional business service and is not intended for children under 13 years of age.

We do not knowingly collect personal information directly from children under 13.

If we become aware that a child under 13 has provided personal information directly to us without appropriate authorization, we will take reasonable steps to delete the information.

23. United States Operations

DSCR Navigator is operated from the United States.

If you access the Service from outside the United States, information may be transferred to, stored in, or processed in the United States or other locations where our service providers operate.

Applicable data protection rules may differ between jurisdictions.

24. Data Breach and Security Incident Response

If we discover a security incident involving personal information, we may investigate the incident, take steps to contain and remediate it, and provide notifications where required by applicable law.

Our investigation may include preserving and reviewing system logs, account records, IP address information, device information, database activity, and other relevant evidence.

We may also coordinate with cybersecurity professionals, hosting providers, telecommunications providers, law enforcement, regulators, legal counsel, insurers, and affected service providers as appropriate.

25. Changes to This Privacy Policy

We may update this Privacy Policy from time to time as DSCR Navigator develops, our business practices change, or legal requirements evolve.

When we make changes, we will update the effective date displayed at the top of this Privacy Policy.

If changes are material, we may provide additional notice through:

• the DSCR Navigator website;
• the Service;
• email;
• account notifications; or
• another reasonable method.

Your continued use of the Service after an updated Privacy Policy becomes effective is subject to the updated policy, except where applicable law requires additional consent.

26. Relationship to Terms of Use

Your use of DSCR Navigator is also governed by our Terms of Use.

The Terms of Use contain additional provisions concerning:

• acceptable use;
• account security;
• prohibited scraping;
• unauthorized data extraction;
• credential sharing;
• reverse engineering;
• intellectual property;
• subscription terms;
• SMS messaging;
• disclaimers;
• limitations of liability;
• dispute resolution; and
• other conditions applicable to use of the Service.

27. Contact Us

For privacy questions, requests, complaints, security concerns, or questions regarding this Privacy Policy, contact: