Polygon Research Polygon Research MortgageData AI
Home News Knowledge Pricing Academy Sign in Start free Go to App →

Legal

Privacy Policy

Last updated: July 7, 2026 (draft)

DRAFT — pending legal review

This document is a placeholder draft. It has not been reviewed by counsel and is not yet in effect. Please check back for the final version.

This policy describes what Polygon Research, Inc. (“Polygon Research,” “we,” “us”) collects from visitors and users of mortgagedata.ai, app.mortgagedata.ai, and api.mortgagedata.ai (the “Service”), why we collect it, and how we handle it. Our starting commitments:

  • We do not sell your personal information, and we do not run third-party advertising trackers.
  • We collect the minimum we need to operate, secure, and improve the Service.
  • When we rely on another company to process your data, we name the category of provider here.

1. What we collect and why

Waitlist signups

If you join the waitlist we collect your email address and, optionally, your name, so we can contact you about early access. We will not use the waitlist for unrelated marketing.

Account and identity

Accounts are created and authenticated through our identity provider (Auth0). We receive your name, email address, and authentication identifiers. We use these to sign you in, associate your work and usage with your account, and communicate with you about the Service.

Billing

Paid subscriptions are processed by our payment processor (Stripe). Card details go directly to the processor; we receive billing contact details and transaction status, which we keep for accounting and tax purposes.

Questions you ask the Service

When you use AI-assisted features, the questions you submit are processed by our infrastructure and by the AI model providers we use to generate answers. We log questions and answers to operate the feature, enforce usage limits, investigate abuse, and improve answer quality. Please do not include sensitive personal information in your questions.

Product usage and error data

We record product events (for example: page views of key flows, questions asked, signups) and application errors, tied to a coarse identifier (such as your account or an anonymous session), to understand product health and usage. We do not use third-party analytics trackers.

Anti-abuse measures

Public forms are protected by an anti-bot challenge (Cloudflare Turnstile), and our infrastructure provider (Cloudflare) processes request metadata such as IP addresses to serve and protect the sites.

Cookies

We use a small number of first-party cookies that are strictly necessary to operate the Service — for example, a login-state cookie shared across our mortgagedata.ai subdomains so the public site knows whether to show you “Sign in” or “Go to app.” We do not set advertising or cross-site tracking cookies.

2. When we disclose your information

We disclose personal information only:

  • To service providers that process it on our behalf — identity (Auth0), payments (Stripe), hosting and security (Cloudflare), and AI model providers that generate answers to your questions.
  • To comply with a valid legal request, or to protect the rights, safety, or property of us or others.
  • As part of a corporate transaction (such as a merger or acquisition), with notice to you.

We do not sell or share personal information for advertising purposes.

3. Your rights

You may request access to, correction of, or deletion of your personal information, and you may opt out of waitlist or marketing email at any time, by contacting us at info@polygonresearch.com. Depending on where you live, you may have additional rights under state privacy laws; we honor applicable rights regardless of state.

4. How we secure your data

Data is encrypted in transit (TLS). Access to production systems and secrets is restricted and credentialed. Server-side credentials are never exposed to browsers. [Expand with counsel: formal security-measures summary.]

5. Data retention

  • Account information: for as long as you have an account with us.
  • Waitlist entries: until we onboard or notify you, or you ask to be removed.
  • Usage, question, and error logs: for a bounded operational period. [CONFIRM retention windows.]
  • Billing records: as required for accounting and tax law.

6. Where your data lives

The Service is operated from the United States and is directed to users in the United States. If you use the Service from elsewhere, you understand that your information is processed in the U.S.

7. Children

The Service is not directed to children and may not be used by anyone under 18.

8. Changes and questions

We may update this policy from time to time. We will post updates at this page with a new “Last updated” date and, for material changes, provide reasonable additional notice. Questions? Contact info@polygonresearch.com — Polygon Research, Inc., 4916 45th St NW, Washington, DC 20016.

Document structure adapted from the 37signals/Basecamp open-source policies (github.com/basecamp/policies), used under CC BY 4.0, with modifications.

Terms of Service · Privacy Policy

© 2026 Polygon Research. All rights reserved.