This Privacy Policy explains how SunShineson Finance LLC (“Company,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects information when you use the Note Deal Analyzer website and web application (together, the “Service”).
Note Deal Analyzer is a web-based tool for analyzing mortgage-note deals. Deal files, documents, and calculation results are processed and stored on our servers for the account that uploaded them. The Service is not a marketplace, broker, lender, servicer, or investment adviser.
1.Account registration and authentication
To create an account, we ask for:
- Email address
- First name and last name
- A one-time verification code sent to that email
Login uses the same email and a one-time code. We store a hash of each code, not the code itself. After you verify a code, we create a session. Session tokens are stored as hashes. A session record may include a limited device note supplied by the application, such as the fact that the session came from the web app, and the time the session was last used.
We also keep an account identifier, account status, and timestamps. Security and audit records may include the IP address associated with an action such as registration, login, or account deletion.
2.Deal data, documents, calculations, and imports
When you use the Service, we store the work you save to your account, including:
- Deal records and the note, loan, payment, collateral, and related fields you enter
- Documents you upload, and the files themselves in our object storage
- Calculation requests, calculation packs, and saved results
- Import batches and imported listing data, including Paperstac and JKP files you choose to import
- Court or portfolio information you save in the Service
This information is processed on our servers so the Service can calculate, save, compare, and export results for your account. It is not processed only on your device.
You are responsible for having the right to upload and analyze that information, and for complying with any privacy, confidentiality, borrower, consumer-finance, or contractual duties that apply to it. Do not upload Social Security numbers, full payment-card numbers, bank account numbers, or other sensitive identifiers unless they are actually required for the analysis and you have the right to provide them.
3.Payments and starter card verification
Credit purchases and starter card verification are processed by Stripe. We do not receive or store your full payment-card number or card security code.
For a purchase, we keep a billing record tied to your account, including the provider, transaction reference, product, credits granted, status, and time of purchase.
Starter verification uses Stripe to confirm a card. We store the Stripe customer identifier, the verification status, and limited card attributes returned for that check: brand, funding type, country, and wallet type if Stripe provides them. We do not store the raw card fingerprint. We store a keyed hash of the fingerprint so the same card cannot be used to claim another free starter analysis, including after the account is deleted or a new account is created.
Stripe keeps its own customer, payment-method, and transaction records under Stripe’s privacy policy and retention practices. Deleting a Note Deal Analyzer account does not delete the Stripe customer. A later account registered with the same email is a new account and receives its own Stripe customer association.
4.Credits and billing history
We keep a credit account and a credit ledger for grants, reservations, releases, and consumed calculations. An open credit reservation is released if the account is deleted before that calculation is completed. The reservation row remains as history and is not left in an active reserved state.
Purchases, the credit ledger, and the credit balance are billing records. They are kept when an account is deleted.
5.How we use information
We use this information to:
- Create and authenticate accounts and keep sessions secure
- Run, save, and show your analyses, imports, documents, and exports
- Sell credits, apply a starter analysis, and keep a billing history
- Prevent fraud, abuse, duplicate free starter claims, and credit-system circumvention
- Block an account that has been blocked, and keep that block in force
- Respond to support requests you send us
- Maintain the security and operation of the Service
- Meet legal, tax, accounting, and dispute-resolution duties
We do not sell personal information. We do not publish your deals as listings or use them to introduce buyers and sellers.
6.Third-party services
We share information with service providers only as needed to run the Service:
- Stripe processes credit checkout and starter card verification, and retains its own billing and customer records.
- Email delivery sends one-time registration and login codes to the address you provide. Codes are delivered by email from our mail server.
- Google Tag Manager is used on the public marketing website. The signed-in application does not load Google Tag Manager.
- Hosting of the application, database, uploaded files, and operational backups is on servers we operate.
Professional advisers and authorities may receive information when needed for legal advice, accounting, tax, a legal process, or protection of rights. We are not responsible for a third party’s own privacy practices. Stripe’s and Google’s policies govern their handling of information they receive.
7.Cookies and the public website
The public website may use cookies or similar technologies through Google Tag Manager and through ordinary browser operation. The signed-in application keeps its session in the browser for that tab. You can control cookies in your browser. Blocking them may affect the public website.
8.Account deletion, retained records, and backups
You may delete your own account from the signed-in application. Deletion is meant to close that account. It does not instantly and permanently erase every copy of information we have ever stored.
Active data that is removed
For a normal deletion, we remove the account’s active work data, including:
- Deals, calculation packs, and calculation results
- Document records and the corresponding files in active object storage
- Imported listing data and import requests
- Court and portfolio records saved to the account
- The email address, first name, and last name on that account
- Login credentials, verification codes, and sessions, so old tokens stop working
File removal happens after the account closure is saved. If removal of a file is interrupted, the account is already closed and that file is not left attached to an active document record. The remaining file names stay on a cleanup list. A later cleanup retries only those names. Retrying a name that was already removed is safe. Cleanup does not restore the account and does not delete backups. The same email address can be used to register a new, separate account. That new account does not receive the deleted account’s deals or a new starter eligibility.
Records that are kept
We keep records needed for billing, fraud prevention, and audit, including:
- The closed account record, without the first and last name
- Purchases, the credit ledger, credit balance, and credit-reservation history
- Starter verification records, the starter entitlement status for that closed account, and the hashed card-fingerprint claim
- The local Stripe customer identifier for that closed account
- Audit records, with email, first name, and last name removed from their metadata
A normal deletion does not by itself place the person on a block list. If the account was already blocked, the block and the email address stay in place so that email cannot be used to open another account.
Backups
We keep operational backups of the database and of stored files. Account deletion does not edit or delete those backups. Information removed from the active Service may remain in an existing backup until that backup is rotated out. We do not publish a fixed calendar retention period for those backups.
9.Blocked accounts and fraud prevention
We may block an account for fraud, abuse, attempts to circumvent the credit or starter rules, or other harmful use. A blocked account cannot be used. If that account is later deleted by its user, the block and the email address are retained. The hashed starter-claim record is retained either way, so deleting an account does not reset starter eligibility.
10.Security
We use reasonable administrative and technical measures designed to protect accounts and stored information, including hashed session tokens, hashed one-time codes, hashed starter claims, and access controls that keep one account’s deals separate from another account’s deals.
No website, server, or transmission is perfectly secure. You are responsible for protecting access to your email account, because that email is how sign-in codes are delivered.
11.Your requests
Depending on where you live and on applicable law, you may request access to, correction of, or deletion of personal information we hold, or object to certain processing. Contact support@notedealanalyzer.com. We may need to verify that the request comes from the account holder.
We may decline or limit a request where the information is a retained billing, fraud-prevention, security, or audit record, or where the law allows or requires us to keep it. Account deletion inside the Service is the ordinary way to close an account and remove active work data, subject to the retained records and backups described above.
12.Children
The Service is not directed to children. We do not knowingly collect personal information from children under 13, or under a higher age where the law requires it. If you believe a child has provided personal information, contact support@notedealanalyzer.com.
13.International processing
Stripe processes payments and card verification. Google processes information collected on the public website through Google Tag Manager. Those providers may process that information in the United States and in other countries under their own practices. We do not state a data-center location for the application database, uploaded files, or backups in this policy. If you access the Service from outside your country of residence, your information may be processed in a country with different data-protection laws.
14.Changes
We may update this Privacy Policy. The updated version will be posted on this page with a new “Last updated” date. Continued use of the Service after the update is posted is subject to the updated policy, except where applicable law requires a different form of notice or consent.
15.Contact
Questions and privacy requests:
SunShineson Finance LLC
Delaware, USA
Email: support@notedealanalyzer.com