Privacy & Cookie Policy

ClosedCC is software for licensed mortgage professionals. It connects to the accounts you already use — your Bonzo CRM and your email — to help you price leads and send branded quotes. This policy explains what we collect, how we use it, and the choices you have. ClosedCC is not a lender or a mortgage broker and does not originate loans.

Information we collect

• Account details — your name and email, your password (stored only as a salted hash, never in plain text), and optional profile details like your NMLS number and quote-card branding.
• Your Bonzo connection — you provide your own Bonzo API token so ClosedCC can sync your book. The token is stored encrypted and used only to read and update your Bonzo data on your behalf.
• Leads & borrower data — contact and loan information synced from your Bonzo (names, phone, email, addresses, loan figures) so you can search, quote, and follow up. This is your data — we are a custodian, not the owner.
• Your email connection — if you connect your own Gmail, the app password is stored encrypted and used solely to send quotes and follow-ups from your address, never to read your mailbox.
• Operational logs — the minimal records needed to run, secure, and troubleshoot the service.

How we use your information

To sign you in, sync and display your book, generate and send your branded quotes, run the campaigns you set up, and keep the service secure and reliable. We do not sell your data and we do not use it for advertising.

Your Bonzo & email connections

ClosedCC acts on your behalf only through connections you control. Your Bonzo token and email credentials are used strictly to perform the actions you configure — syncing, quoting, and sending. You can disconnect either one at any time in Settings, which immediately stops all further access.

How we store and protect it

Each account’s data is isolated and encrypted with its own key (AES‑GCM, per‑tenant), and all traffic is encrypted in transit (TLS). Connection tokens and email credentials are stored encrypted and are never shown back to the browser. Internal access is limited to what’s needed to operate the service.

Data retention

We keep your data while your account is active. When you disconnect an integration or delete your account, the associated data — including tokens and synced records — is removed. Minimal security and operational logs may be retained briefly.

Data sharing

We don’t sell your data or share it for marketing. We rely on a small set of infrastructure providers (hosting, database, and delivery) that process data solely to run ClosedCC. We may disclose information only where required by law, or to prevent fraud or abuse.

Your rights and choices

You can access, correct, or delete your information, and disconnect your Bonzo or Gmail at any time in Settings. To request account deletion or a copy of your data, just contact us.

Changes to this policy

If we make material changes, we’ll update this page and, where appropriate, let you know in the app or by email.

Contact

Questions about privacy or this policy? Email support@closedcc.com.