Privacy Policy

FlowAg, a beapbeap, Inc. product. Last updated: September 28, 2026.

This policy is pending legal review. It describes how this site handles your information today, written from a direct reading of what the software collects and which companies receive it. It has not been reviewed or approved by an attorney, and it may be updated once our legal counsel has read it.

Who this covers

This site is used by mortgage loan officers and their companies to prepare loan options and to stay in touch with the people they help. If a loan officer sent you a link to this site, the company that loan officer works for is responsible for your information, and beapbeap, Inc. operates the software on their behalf.

For loan officers: read "Artificial intelligence" below. It names the outside companies that receive the documents your borrowers upload and the questions you type into the help assistant. That section is about your work as much as it is about them.

What we collect

• Contact details: your name, phone number, email address and property address.
• Identity, if you apply: your Social Security number, date of birth, citizenship status, marital status, number of dependents, your tax filing status, whether you have served in the military, and your government identification such as a driver's license, passport or state identification card. Your Social Security number, date of birth and identification number are encrypted when they are saved to your file. Some records saved before that encryption was switched on are still unencrypted, and the unchanged copy of a marketing partner's submission described under "How you reached us" can hold your date of birth unencrypted.
• Where you have lived: your current address, whether you own or rent it and what you pay, how long you have lived there, and your previous address if you moved recently.
• A co-borrower: if someone applies with you, we collect the same information about them that this list describes for you.
• Government required demographics: your ethnicity, race and sex. Federal mortgage reporting law requires the lender to ask. You may decline, and declining does not affect your application. These answers are not always stored with the extra encryption described above.
• Property: the address, property type, whether you will live in it, its estimated value, and any loan already secured on it including the current lender and the balance. If you own other real estate, we collect the same for each property: its address, value, how it is used, any rental income, its costs, and the mortgages on it.
• Employment and income: your employer, job title and start date, whether you are self employed, and your income itemized by source: base pay, overtime, bonus, commission, dividends, net rental income, Social Security, pension, child support and other income.
• Assets and debts: the institution, account type, last four digits of the account number and balance for each asset; and the creditor, last four digits, monthly payment and unpaid balance for each debt. For each asset and debt you list, we store the last four digits of the account number. If you upload a mortgage statement, we also keep your current loan's full account number, encrypted.
• The loan you want: amount, down payment, term and rate.
• Credit: a credit score or credit grade that you tell us or that a lead partner passes to us, and a record that you authorized a credit check and when. We do not obtain your credit report ourselves: this product has no connection to Experian, Equifax, TransUnion or any other credit bureau. If your loan officer applies to Aven for you (see "Service providers"), we also keep the result Aven sends back, including its decision, the credit score from its soft check, the credit line offered, the loan to value ratio and any reasons it gives for declining.
• Declarations: your answers to the standard mortgage application questions, such as any bankruptcy, foreclosure, lawsuit or unpaid judgment, any delinquent federal debt, and how you will hold title to the property.
• Documents you upload and the information read out of them: pay stubs, W-2 forms, tax returns, bank statements, mortgage statements, insurance pages and photographs of your identification. Please read "Artificial intelligence" below, because these files are sent to an outside company to be read.
• Your messages and calls with your loan officer through this site, including the contents of text messages and emails and a record of how each call ended. Calls may be recorded, and a recorded call does not announce that it is being recorded.
• Technical information: your internet address and your browser's identifying string, stored alongside an electronic signature or consent so we can show when and from where it was given, and in our internal record of who changed what. See "Cookies" for how page visits are measured.
• How you reached us: if you came through a marketing partner or an advertisement, we keep their original submission about you exactly as they sent it. It can contain advertising identifiers, the page you filled in, the site that referred you, and the consent wording you were shown. We keep it unchanged because it is the evidence of what you were actually told.

How it is used

• To prepare and show you loan options.
• To contact you about your inquiry by text message, email and phone.
• To keep a record of your conversation so your loan officer can help you.
• To read the documents you upload, so the figures do not have to be typed in by hand.

Artificial intelligence

This site uses outside artificial intelligence services. We name them rather than calling them "AI service providers", because the fact that matters is that your information goes to a company you did not choose.

The most important thing on this page. When a document is uploaded here, the file itself is sent to an outside company to be read. Not a summary of it, and not a few fields taken out of it: the actual file. So the pay stub, W-2, tax return, bank statement or photograph of your driver's license that you upload is transmitted to Anthropic, which reads it and returns the information on it. If that fails, the same file is sent instead to Microsoft Azure Document Intelligence to be read there. If you would rather your documents were not processed this way, tell your loan officer before you upload anything and send them another way.

• Microsoft Azure Document Intelligence is the fallback document reader. When the reading above fails, your document is sent here instead.
• Anthropic reads uploaded documents, as above, and figures read from them, such as your income or your current loan balance, can be filled into your file. It also answers a loan officer's questions about using this software, which sends Anthropic what the officer types.

No decision about whether you are offered a loan, or on what terms, is made by an artificial intelligence service here. Loan options are worked out by your loan officer and by fixed pricing rules, which use the figures in your file, including any that were read from your documents.

Text messages

Reply STOP to any text message to stop receiving texts. Your request is recorded, and the automated texts, calls and emails this site sends you stop. Stopping texts does not stop your application.

Service providers

We use service providers to run this site on our behalf. They process your information only to provide those services:

• Microsoft Application Insights measures how our pages load and catches errors, so it receives the pages you view and your internet address, as described under "Cookies and measurement".
• Our text messaging and calling carrier delivers text messages and carries calls, so it receives phone numbers, message contents and call records.
• Infobip provides the telephone built into a loan officer's browser, so it receives call audio and the numbers on a call.
• Resend sends our system email and receives email replies, so it receives the addresses and the contents. An email your loan officer sends you from the site may instead go out through their own mailbox, in which case their own mail provider handles it.
• Google sign in and Gmail: If your loan officer connects a Gmail account, Google signs the officer in and delivers the emails sent from that account, so it receives the officer's email address and the recipients and contents of those emails.
• Microsoft: If your loan officer connects an Office 365 mailbox, Microsoft signs the officer in and delivers the emails sent from that account, so it receives the officer's email address and the recipients and contents of those emails. Microsoft also keeps sign-in accounts for our staff and loan officers.
• Microsoft Azure Communication Services: If you join a live video help session, it carries the video, audio and screen sharing of the session, so it receives your display name, your video and voice and your IP address.
• The push notification services run by your browser or phone maker delivers notifications to our loan officers' phones and browsers, so it receives the notification text, which can include a borrower's name, phone number and the start of a message.
• Telegram carries internal alerts to our team about leads that need attention, so it can receive a borrower's name, phone number, email address and the start of a text they sent us.
• The email service your loan officer connects: If your loan officer connects their own email account, that email provider delivers the messages sent from it, so it receives your email address and the contents of those messages.
• Salesforce is a customer records system. If your loan officer's company uses Salesforce, it receives your name, email address, phone number, address and the status of your loan inquiry.
• LendingPad is a loan origination system. If your loan officer's company uses LendingPad, it receives your name, email address, phone number, property address and the loan details you gave us.
• Encompass (Ellie Mae) is a loan origination system. If your loan officer's company uses Encompass, it receives your name, email address, phone number and loan amount.
• Fannie Mae Desktop Underwriter is the underwriting system used to check a loan application against its lending guidelines. If your loan officer's company uses it, it receives the full loan application you completed, including your identity, income, assets, debts and the property.
• PossibleNOW checks phone numbers against Do Not Call lists before we text or call you, so it receives your phone number.
• Trestle tells us whether a phone number is a mobile, landline or internet line, so it receives your phone number.
• Stripe processes card payments for a loan officer's own account and messaging charges. Stripe receives no borrower information.
• Your loan officer company's single sign on provider (such as Okta) signs staff in. If your loan officer's company uses single sign on, the provider the company chose receives the sign in details of its staff, not borrowers.
• Google Maps provides maps, street photos and address lookups, so it receives the property address you give us and the IP address of a browser that loads a map.
• Our referral partner website is a partner website that tracks referrals. If your inquiry came through a referral, it receives your email address, your phone number and the status of your inquiry.
• Microsoft Azure runs the site and stores its data, including the database, the file storage your documents sit in, and sign in.
• Cloudflare carries and protects the connection to this site's main web address, so everything sent between your browser and that address passes through it, including what you type into a form.
• Google Fonts supplies the typefaces many of our pages load, so when you open one of those pages your browser sends Google your internet address and browser details.
• jsDelivr supplies the code libraries and the measurement code described under "Cookies and measurement", so it receives your internet address and browser details when a page loads them.
• esm.sh delivers code used by our in-browser video calls and is contacted by your web browser, so it receives your IP address and browser details.
• Font Awesome supplies the icons shown on some of our pages and is contacted by your web browser, so it receives your IP address and browser details.
• Make receives the problem reports our staff and loan officers send us, which can include details from the page they were looking at.
• ClickUp receives the problem reports our staff and loan officers send us, which can include details from the page they were looking at.
• Rebuilt Web builds a preview web page for business prospects reached by our campaigns, so it receives the business name, phone number and email address of the prospect.
• Our email and sign up automation service runs the automation that sends some of our emails and sets up new loan officer mailboxes. It receives the emails it sends, including the recipient's name and email address and the message.

The artificial intelligence services that receive information are named under "Artificial intelligence" above.

If your loan officer applies for a loan product on your behalf with our partner lender Aven, your loan officer must first confirm that you gave them your information intending to apply and that you acknowledge a soft credit check. The application is then sent to Aven: your name, phone number, email address, home address, stated annual household income, date of birth and, if your loan officer enters it, your Social Security number, together with that confirmation and your loan officer's license number. Aven runs that check, not us. A soft check does not affect your credit score. Your Social Security number is passed to Aven at that moment and is not stored by us. Your date of birth is stored, encrypted, on your file if the file did not already have one.

Your loan officer, their company, and the lender they submit your application to also see your information. That is the purpose of sending it.

Keeping and deleting information

When your record is deleted it is hidden immediately, and it can be restored for 30 days. After that it can no longer be restored, and it stays hidden. To have it erased completely, email dev@beapbeap.ai with proof that the record is yours. We confirm with your lender before we erase it.

Deleting the record does not remove everything connected to it. Your loan application, the documents you uploaded and your message history are stored separately, and deleting the record does not delete them. We would rather tell you that than let "delete" sound like something it is not. Our database backups can also hold a copy for up to 7 days after a deletion, and our system logs, which are kept for 30 days, can also refer to it.

To ask for your information to be updated or deleted, contact your loan officer or write to us at the address below. Depending on where you live you may have a legal right to a copy of your information or to have it deleted, and a deletion request may be limited by records a lender is required by law to keep.

Cookies and measurement

This site uses cookies to keep you signed in, to open the page your loan officer sent you, and to protect its forms. If you arrived through a partner's link, a cookie remembers which partner sent you for 90 days.

The pages your loan officer sends you also use Microsoft Application Insights to measure how they load and to catch errors. It records the pages you view and sets two cookies that recognize your browser across visits (ai_user and ai_session). This policy page does not load it.

Emails sent from this site can contain a small tracking image and tracked links, so this site records when an email was opened and which links were clicked.

Questions

Contact the loan officer or company that sent you the link, or write to us directly:

As stated at the top, this policy is pending legal review and will be revised once counsel has read it.