Privacy Policy

Recourse ("we", "our", "us") provides a customer relationship management platform designed for mortgage brokers. This policy describes how we collect, use, and protect information when you use our software.

Account information: Name and email address of licensed users of the software.

Lead and contact data: Names, email addresses, phone numbers, addresses, loan inquiry details, and notes you enter about your clients and prospects. This data is stored locally on your device in an encrypted SQLite database.

Usage data: We do not collect telemetry, analytics, or behavioral data. The software runs locally and does not phone home.

Session data: A session token is stored in a secure, HTTP-only cookie to keep you logged in. It expires after 30 days.

We use the information you enter solely to provide the features of the Recourse platform, including:

• Displaying and organizing your leads and contacts
• Generating AI-assisted outreach messages and lead scores via Anthropic's Claude API
• Sending SMS and email communications through your GoHighLevel account
• Syncing contact data to your GoHighLevel CRM

The software integrates with the following third-party services. When you use these features, relevant data is transmitted to those services under their own privacy policies:

• Anthropic (Claude AI): Lead notes and contact data may be sent to Anthropic's API to generate scores, summaries, and outreach drafts. Anthropic's privacy policy applies: anthropic.com/privacy
• GoHighLevel (GHL): Contact data and communications are synced to your GHL account. GHL's privacy policy applies: gohighlevel.com/privacy

We do not sell your data or your clients' data to any third party.

All contact and lead data is stored locally in a SQLite database on your device or server. We do not have access to your database.

Security measures include:

• PIN authentication with SHA-256 hashing (salted with a per-application prefix)
• Session tokens are cryptographically random 32-byte values
• All authentication cookies are HTTP-only and SameSite=Lax
• Sessions expire after 30 days of inactivity
• No data is transmitted to Recourse's servers — your data stays with you

Mortgage brokers using this software are considered "financial institutions" under the GLBA and are responsible for compliance with the GLBA Privacy Rule and Safeguards Rule. Your obligations include:

• Providing a privacy notice to your clients explaining how you handle their non-public personal information (NPI)
• Implementing a written information security plan (WISP)
• Ensuring any service providers (including software vendors like Recourse) maintain appropriate safeguards
• Training employees on your privacy and security policies

Recourse is a tool to help you manage data — compliance with GLBA obligations remains your responsibility as the licensed mortgage broker.

Depending on your jurisdiction, you may have rights including:

• Access: Export all your contact data from Settings → Export Data
• Deletion: You can delete individual contacts or request full data deletion by contacting us
• Portability: Your data is stored in standard SQLite format and can be exported as CSV
• Correction: You can edit any contact record directly in the app

California residents have additional rights under the CCPA. To exercise any right, contact us at jcanavati08@gmail.com.

Contact and lead data is retained until you delete it. Session tokens are automatically purged after expiry. We recommend periodic review and deletion of contacts for clients you are no longer actively serving, consistent with your firm's record retention policy.

This software is intended solely for use by licensed mortgage professionals. We do not knowingly collect information from anyone under 18 years of age.

We may update this policy from time to time. When we do, we will update the effective date above and notify active users via the app. Continued use of the software after changes constitutes acceptance of the updated policy.

For privacy questions, data requests, or to report a security concern:

Email: jcanavati08@gmail.com