Tabrasa Privacy Policy
Effective date: July 28, 2026
Tabrasa, LLC (“Tabrasa,” “we,” “us,” or “our”) provides the Tabrasa One platform and related products and services (the “Service”). This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have. It is incorporated into the Tabrasa Subscriber Agreement.
Your information (our customer). When you register for and use the Service — for example, a loan officer, an administrator, or a company that subscribes — we handle information about you as described here, and for that information we act as the business/controller.
Information you put into the Service about other people (your clients and contacts). When you upload or generate information about your own borrowers, clients, contacts, or prospects, we process that information on your behalf and under your instructions as your service provider/processor. For that information, you are responsible for privacy notices and consents, and our handling is governed by the Subscriber Agreement (including Section 10) and any data-processing terms we make available.
1. Information we collect
Information you give us. Account and profile details (name, business name, email, phone, NMLS identifier where applicable), billing and payment information (processed by our payment processor), support requests and correspondence, and any content or settings you submit to the Service.
Information we collect automatically. Device and usage data such as IP address, browser and device type, pages and features used, and dates/times of access, collected through cookies and similar technologies (see Section 4). This helps us operate, secure, and improve the Service.
Subscriber Content, including data about your clients. Information you upload to or generate in the Service — which, for products beyond MMG, may include contacts, recipient lists, loan data, and personal or nonpublic personal financial information about your borrowers, clients, or prospects. We process this on your behalf as described above. If you use only MMG and do not upload such data, we do not process this category of information for you.
Information from third parties. We may receive information from your organization (if your access is provided by an employer), from service providers that help us operate the Service, and from integrations you choose to connect (for example, a loan-origination system).
2. How we use information
We use the information we collect to: provide, maintain, secure, and support the Service; process payments and manage subscriptions, including renewal reminders; authenticate users and prevent fraud and abuse; respond to your requests and communicate with you about the Service; understand how the Service is used and improve it; send you product and marketing communications (from which you can opt out at any time); and comply with law and enforce our agreements.
We do not sell your personal information. We do not use Subscriber Content to train shared or general-purpose artificial intelligence or machine-learning models except with your agreement.
3. How we share information
We share information only as described here:
- Service providers (subprocessors). We use vendors to perform functions on our behalf — for example, cloud hosting, payment processing, email delivery, customer support, and analytics. They may access information only to perform services for us and are bound by confidentiality and data-protection obligations. A current list of the subprocessors that process Subscriber Content is available on request at support@tabrasa.io.
- At your direction. When you connect an integration or ask us to share information with a third party, we share it as you direct.
- Legal and safety. We may disclose information where we reasonably believe it is required by law, subpoena, or legal process, or necessary to protect the rights, property, or safety of Tabrasa, our customers, or others, or to investigate fraud or violations of our agreements.
- Business transfers. If Tabrasa is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
We may create and use aggregated or de-identified information that does not identify you or any individual for any lawful purpose, including analytics and improving and marketing the Service.
4. Cookies and tracking technologies
We use cookies and similar technologies for essential site functionality, analytics, and marketing. You can manage non-essential cookies through the cookie preferences control on our website and through your browser settings; blocking some cookies may affect how the Service works. Where required, we honor recognized browser-based opt-out signals (such as Global Privacy Control) as a request to opt out of targeted advertising/“sharing.”
5. How we protect information
We maintain administrative, technical, and physical safeguards designed to protect information, including encryption of sensitive data at rest and in transit, network protections, access controls, and multi-factor authentication for privileged access. For borrower nonpublic personal financial information you process through the Service, we maintain safeguards consistent with the Gramm-Leach-Bliley Act (GLBA) and the FTC Safeguards Rule. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
6. How long we keep information
We retain information for as long as your account is active and as needed to provide the Service, and afterward as needed to comply with legal obligations, resolve disputes, and enforce our agreements. For at least 30 days following termination, you may export your Subscriber Content yourself using the export functionality in the Service, or request an export that we will provide within 30 days, as described in the Subscriber Agreement; after that we delete or de-identify it in the ordinary course, subject to backup and legal-hold retention.
7. Your choices and rights
Access and update. You can review and update your account information by signing in to the Service, or by contacting us at support@tabrasa.io.
Marketing communications. You can opt out of marketing emails using the unsubscribe link in those messages or by contacting us. We will still send service and transactional messages (for example, billing and renewal notices).
State privacy rights. Depending on where you live (for example, California, Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws), you may have the right to request access to, correction of, or deletion of your personal information; to receive a portable copy; to opt out of targeted advertising, the “sale” or “sharing” of personal information, and certain profiling; and to not be discriminated against for exercising these rights. To exercise a right, contact us at support@tabrasa.io; we will verify your request and respond as required by law. You may use an authorized agent where permitted. Note that where we process information about your clients on your behalf, we will refer requests from those individuals to you.
“Do not sell or share.” We do not sell personal information and do not share it for cross-context behavioral advertising in a way that requires an opt-out under applicable law; if this changes, we will provide the required opt-out mechanism.
8. Children’s privacy
The Service is for business use and is not directed to children. We do not knowingly collect personal information from anyone under 18.
9. U.S. only
The Service is intended for users in the United States, and information is processed in the United States.
10. Changes to this Policy
We may update this Policy from time to time. When we make a material change, we will post the updated Policy with a new effective date and, where appropriate, provide additional notice. Your continued use of the Service after the effective date means you accept the updated Policy.
11. Contact us
Questions about this Policy or our privacy practices: Tabrasa, LLC — support@tabrasa.io
© 2026 Tabrasa, LLC. All rights reserved.
