Privacy Policy

Last Updated: November 21, 2025

1. Introduction

At Capital Mortgage Source (NMLS# 2320694), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our mortgage brokerage services. We comply with applicable privacy laws including the Gramm-Leach-Bliley Act (GLBA), California Consumer Privacy Act (CCPA), and other state and federal regulations.

Company Information:
CORMOR Inc
NMLS# 2320694
Phone: 888-315-6706
Email: ryan@cmsoregon.com

2. Information We Collect

We collect information necessary to provide mortgage brokerage services and as required by law. The types of information we collect include:

• Personal Identifiers: Name, address, email address, phone number, social security number, date of birth, and driver's license or government-issued identification.
• Financial Information: Employment details, income, assets, debts, credit history, banking information, tax returns, and other financial documents required for mortgage loan applications.
• Property Information: Details about properties you're purchasing, selling, or refinancing including addresses, appraisals, and title information.
• Usage Data: IP address, browser type, device information, pages visited, time spent on pages, referring URLs, and other analytics data collected through our website.
• Cookies and Tracking Technologies: We use cookies, web beacons, local storage, and similar technologies only with your consent. You can manage your cookie preferences through our cookie consent banner.
• Communications: Records of your correspondence with us via email, phone, text message, or through our contact forms.

3. How We Use Your Information

We use the information we collect for various purposes, including to:

• Process and evaluate mortgage applications
• Communicate with you about our services
• Improve our website and services
• Comply with legal obligations
• Detect, prevent, and address technical issues
• Send you promotional materials if you have opted in to receive them

4. Information Sharing and Disclosure

We do not sell your personal information to third parties. We share your information only as necessary to provide services, comply with legal obligations, or with your explicit consent.

We may share your information with:

• Lenders and Financial Institutions: To submit and process your mortgage application, obtain pre-approvals, and secure loan funding.
• Credit Bureaus: To obtain credit reports and verify creditworthiness as part of the mortgage application process.
• Appraisers and Title Companies: To facilitate property valuation, title searches, and closing procedures.
• Service Providers: Including Firebase (Google Cloud Platform) for data storage and analytics, email service providers, document management systems, and IT support vendors. These providers are contractually obligated to protect your information.
• Government Agencies: When required by law, regulation, legal process, or governmental request (e.g., CFPB, HUD, state licensing authorities).
• Professional Advisors: Attorneys, accountants, auditors, and consultants as needed for business operations and legal compliance.
• Business Transfers: In connection with a merger, sale, or transfer of company assets, subject to confidentiality obligations.

Under the GLBA, we are required to share certain information with our affiliates and third parties involved in processing your loan. You may limit some but not all sharing as described in the "Your Privacy Rights" section below.

5. Security of Your Information

We implement comprehensive security measures to protect your personal and financial information, including:

• Encryption of data in transit using SSL/TLS protocols
• Encryption of sensitive data at rest in our databases
• Multi-factor authentication for employee access to systems containing personal information
• Regular security assessments and vulnerability testing
• Restricted access to personal information on a need-to-know basis
• Employee training on data security and privacy obligations
• Secure document transmission systems for sensitive financial documents

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activity under your account.

6. Data Retention

We retain your personal information for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Loan Files: Retained for the duration of the loan origination process and for at least 7 years after loan closing or application withdrawal, as required by federal and state regulations.
• Marketing Communications: Until you unsubscribe or request deletion, subject to legal retention requirements.
• Website Analytics: Anonymized analytics data may be retained indefinitely for business analysis purposes.
• Legal and Compliance Records: Retained as required by applicable laws, regulations, and legal holds.

7. Your Privacy Rights

Gramm-Leach-Bliley Act (GLBA) Rights

Under the GLBA, you have the right to:

• Receive annual privacy notices about our information collection and sharing practices
• Opt out of certain information sharing with non-affiliated third parties for marketing purposes

California Consumer Privacy Act (CCPA) Rights

If you are a California resident, you have the right to:

• Know: Request disclosure of the categories and specific pieces of personal information we collect, use, disclose, and sell
• Delete: Request deletion of your personal information, subject to certain exceptions
• Opt-Out: Opt out of the sale of your personal information (we do not sell personal information)
• Non-Discrimination: Not receive discriminatory treatment for exercising your CCPA rights

Other Privacy Rights

Depending on your location, you may also have the right to:

• Access and obtain a copy of your personal information
• Correct inaccurate or incomplete personal information
• Object to or restrict certain processing of your personal information
• Data portability (receive your information in a structured, machine-readable format)
• Withdraw consent where processing is based on consent

To exercise your rights: Contact us at ryan@cmsoregon.com or 888-315-6706. We will respond to verified requests within the timeframes required by applicable law (typically 30-45 days). We may need to verify your identity before processing your request.

8. Third-Party Services and Links

Our website uses third-party services that may collect information:

• Google Firebase: For website hosting, data storage, and analytics. Subject to Google's Privacy Policy.
• Firebase Analytics: For tracking website usage and visitor behavior (requires user consent via cookie banner).

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

10. Do Not Track Signals

Some web browsers have a "Do Not Track" feature. Our website does not currently respond to Do Not Track signals. However, you can manage your privacy preferences through our cookie consent banner and browser settings.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on this page with a new "Last Updated" date. For significant changes, we may provide additional notice (such as via email or a prominent notice on our website). Your continued use of our services after changes become effective constitutes acceptance of the revised policy.

12. Contact Us

If you have questions, concerns, or wish to exercise your privacy rights, please contact us:

13. Effective Date and Acknowledgment

This Privacy Policy is effective as of the "Last Updated" date shown at the top of this page. By using our website or services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.