Privacy Policy

Last Updated: November 20, 2023

Overview

This Privacy Policy describes how Floify LLC (“Floify” or “we”) collects, uses, and shares personal information. This Privacy Policy applies to personal information we collect when Floify Clients (defined below) or their customers access or use our websites, mobile applications, or other platforms or properties (the “Properties”), use our products and services (individually and collectively with the Properties, the “Services”), communicate with us by telephone, chat or SMS, or otherwise interact with us. This Privacy Policy also applies to personal information we collect from other sources, including our parent company, Porch.com, Inc., Porch’s parent company, Porch Group, Inc., and their direct and indirect subsidiary companies (each, a “Porch Group Company”) and mortgage companies, other loan originators, realtors and other business users that use our loan document workflow management system for uploading, downloading, and managing documents and information (“Floify Client”).

By "personal information," we mean information that uniquely identifies an individual, such as a name, email address, or government-issued identification number (such as a driver’s license number or social security number); unique financial information; and information that we link to an individual’s unique identifier(s) or unique financial information. If information is de-linked or de-identified, we do not consider it to be personal information. For example, a postal address would not be personal information if it were included in a list of addresses without names or other unique identifiers. Business information (such as the names, logos, business personnel photos, and contact information of a business or the business address, landing or other relevant web pages, phone number, or other publicly available information) is not personal information.

Individuals in their business capacity (i.e., a Floify Client, as a representative of a Floify Client, or a potential Floify Client) and individuals who are customers of a Floify Client and using the Floify loan document workflow management system as part of the process to obtain a mortgage (individually and collectively with Floify Client, “Users”) may both access the Floify Properties. In both cases, we may receive an individual’s name and other personal information, and we will collect personal information as described in this Privacy Policy.

References to Floify also include companies providing services to Floify, the Porch Group Companies, and Floify Clients or other business partners, to the extent that such parties are collecting, using, or sharing personal information for or on behalf of Floify. This Privacy Policy applies to information collected by those companies only when they provide such information to Floify.

We may change this Privacy Policy from time to time. If we make changes, we will notify Users by posting the updated Privacy Policy on our website and updating the effective date at the top of this Privacy Policy and, in some cases, we may provide Users with additional notice (such as adding a statement to our websites’ homepages or sending a notification).  

For Users that do not agree with the terms of this Privacy Policy, please do not continue using the Services.

Information We Collect

Information a User Gives to Us

We collect information that Users provide directly to us. For example, we collect mortgage- and borrower-related information and documents Users upload to our loan document workflow management system. Users may also provide us information to receive other benefits of the Services, such as customer support, or when a User otherwise transacts business with us; when a User provides us a success story or other testimonial about experiences with Floify; when a User engages with us on social media or participates in our promotional marketing programs; when a User contacts our sales team regarding business; or when a User otherwise provides or uploads content that includes personal information.

Information We Collect Automatically 

When a User accesses or uses the Services or when we send a User emails, we and our advertisers may use tracking technologies to automatically collect information about a User.  Please see our Cookie Policy to learn more about these technologies, how we use them, and how to manage or disable them. Automatically collected information may be associated with a User’s unique browser, device identifier or Internet protocol (IP) address, but we do not consider it to be personal information unless it is linked to a User’s unique identifier(s). 

Automatically collected information includes: 

• Log Information. We log information such as IP address, access times, operating system, browser type and language, Internet service provider (ISP), and the web page a User visited before navigating to our Services.

• Usage and Session Information. We collect usage information, such as how many visitors visit a specific page, how long they stay, which links they click on, and how, when and how often they order particular services, and session information, such as mouse actions, pages visited, screen actions and other interaction patterns.

• Device Information. We collect information about the computer or mobile device a User uses to access the Services, including the hardware model, operating system and version, unique device identifiers and mobile network information.

• Location Data. If a User uses mobile Services, we may collect location data directly from the User’s mobile device if the device allows us to do so. In addition, a User’s IP address may provide an approximate geo-location.

• Transaction Information. When a User purchases a service, we collect information about the transaction, such as the date and location of the purchase.

• Emails. When a User receives emails from us, we collect information about whether and when the User opened the email, whether the User clicked on the images and links in the email, and whether the User computer or mobile device is capable of receiving HTML-based email.

Information We Collect from Floify Clients, Porch Group Companies and Third Parties

We obtain personal information from Floify Clients, when an invited borrower uses our loan document workflow management system and when they submit or upload information in connection with a borrower’s loan application.

We may also obtain information from Porch Group Companies and other companies that partner with Floify to offer promotions to their or our clients or users.  For example, a Porch Group Company may provide us with consumer information to allow us to offer them Floify services or for Floify Clients to offer them refinancing services.

We may obtain personal information (such as business lead information) from third-party data providers and public sources.

Information Collected from Calls

When a User calls us, or when we call a User, we may monitor and/or record those calls for quality assurance and customer satisfaction purposes. In those jurisdictions where consent is required for a party to record a telephone call, User consents to us recording such calls. We treat the records of these calls, when linked to a User’s unique identifier(s), as personal information.

Social Media 

When a User interacts or engages with us on social media sites such as Facebook through posts, comments, questions and other interactions, we may collect such publicly available information, including profile information, to allow us to connect with the User, or better understand user reactions and issues. Once collected, this information may remain with us even if the User deletes it from the social media site(s).

Testimonials

We post success stories or other testimonials on our website, which may contain personal information. Before posting a testimonial, we obtain the person’s consent to post their name and image along with their testimonial.

Aggregate and Anonymized Information

We may also aggregate (group) or de-link/de-identify (anonymize) information. For example, we may collect and compile anonymous demographic information about the age, gender, household income, co-signers and financial information of our borrower users; or statistics about how many loan applications and documents were processed through our document workflow management system. Aggregated, anonymized data is not personal information subject to this Privacy Policy, and we may use it to analyze usage of the Services or for any other purpose. We may also share aggregated and/or anonymized information with Porch Group Companies and our and their business partners. 

Categories of Personal Information Collected 

In the last 12 months, Floify has collected the following categories of personal information from the categories of sources described above. We consider this information to be personal information to the extent that it is information that uniquely identifies a User, is unique financial information, or is linked to User’s unique identifier(s), or if it is defined as personal information by applicable state law.

How We Use Information We Collect

In general, we use the information we collect to operate our business and, where we are legally and contractually permitted to do so, to facilitate the business of the Porch Group Companies, including:

• To provide, maintain, improve, and personalize the Services and the services of other Porch Group Companies.

• To process transactions, to provide and improve customer service and performance, to communicate with Users about their account, changes in our policies or other service matters, and to otherwise manage our customer relationships.

• To offer products and services from Floify, the Porch Group Companies, and our and their business partners (when permitted to do so under this privacy policy).

• To optimize marketing campaigns and to analyze their effectiveness, distribution and reach.

• To develop new products and services.

• To administer contests, promotions or sweepstakes.

• To detect, investigate and address technical issues, security incidents, fraudulent transactions, abuse, violations of our agreements and policies, and illegal activities.

• To comply with our legal obligations and legal processes.

• To create aggregated or de-identified data sets.

• To analyze trends, administer the Properties, and track visitor navigations on the Properties to understand what visitors are looking for.

• To carry out certain short-term activities and other reasonable internal purposes related to the Services or our customers’ ongoing relationship with us.

• To perform other business purposes described at the time the information is collected or as otherwise set forth in applicable data privacy laws.

Floify will not collect additional categories of personal information or use the personal information we collect for materially different, unrelated, or incompatible purposes without providing notice to the User.

How We Share Information

Except as described in this Privacy Policy, we do not sell or rent personal information to any third party. If we share personal information, we do so only as follows.

User-Directed Disclosures

We share a User’s personal information when the User directs us to do something that requires its disclosure or when a User otherwise provides consent. For example:

• when a User uses our loan document workflow management system to provide User’s documents and information to a Floify Client, the Floify Client will receive the User’s personal information;

• when a User chooses to connect User’s Floify borrower account to third party services, that third party will receive User’s information (in accordance with User’s privacy settings with those third-party services); and

• if a User opts in to receiving marketing from Porch Group Companies, as described below, we will provide User’s information to them for that purpose.

Porch Group Companies

If User is a borrower and User and User’s associated Floify Client consent to User’s receiving marketing from Porch Group Companies, we will provide User’s information to Porch Group Companies so that they can offer User the Porch Home Assistant moving concierge service, insurance, and other products and services of interest to User. If User and User’s Floify Client do not consent to marketing from the Porch Group Companies, we will not provide User’s information to them for the purposes of marketing. However, we may provide User’s personal information to the Porch Group Companies in connection with the database, technical, legal, accounting, and other services (other than marketing) shared between the Porch Group Companies, to improve their products and services (such as confirming or supplementing information they have about User or classifying User as a mover) and for other internal business purposes.

When a User interacts with Floify on behalf of their business, we may share User’s information with the Porch Group Companies to allow them to offer relevant services to User’s business and to personalize their communications with User’s associated borrowers who have opted into marketing from the Porch Group Companies.

The Porch Group Companies will be bound by the terms of this Privacy Policy with respect to personal information received from Floify and will use that personal information only as described in this Privacy Policy.

Companies Providing Services to Floify

We share information with third-party vendors, consultants, and other service providers that are providing business services to Floify. For instance, we may share information with a third-party service provider that hosts the Properties, provides call center or other customer service, processes payments, sends out emails, serves ads to Users on the Properties or on a third-party platform, or monitors or analyzes Services data. Such companies will have access to personal information only as necessary to carry out their work and are prohibited from using it for any other purpose.

Floify Business Partners  

If User is not already a customer of a Floify Client, we may provide User’s personal information to Floify Clients to enable them to offer the User relevant financial services. When a User interacts with Floify on behalf of their business, we may share such personal information with our business partners to allow them to offer services or promotions to their business.

Companies with Whom a User Has an Existing Relationship

If User is already a customer of, or otherwise has a direct relationship with, a business partner of a Porch Group Company (an “Existing Relationship Company”) and we have shared User’s information with a Porch Group Company for marketing and product/service improvement purposes as described above (i.e., with User’s consent), the Porch Group Company may disclose certain information about User to that Existing Relationship Company. If User is a match to a customer on the Existing Relationship Company customer list, the Porch Group Company may provide the Existing Relationship Customer with information such as the groups or segments User belongs to (such as mover or homeowner) and demographic information about User and User’s home (such as estimated household income and square footage), so that the Existing Relationship Company can provide User with more relevant advertising, products and services. The Porch Group Company will not give the Existing Relationship Company any of User’s contact information, unique personal identifiers, or unique financial information unless for another purpose permitted in this Privacy Policy. However, the Existing Relationship Company may already have some or all of that information (because of its existing relationship with User) and they will be able to link User with the other information about User that the Porch Group Company provides to them.

Contests and Sweepstakes

When User signs up for and participates in a contest or sweepstakes, we may publicly disclose User’s name, company, city and state if User wins.

Compliance with Laws and Policies; Protection of Rights

We may disclose a User’s personal information if we believe disclosure is necessary to comply with any applicable law, regulation, or legal process, to cooperate with government or law enforcement, or to avoid legal liability; to resolve complaints or disputes; to investigate and resolve technical issues, security incidents, fraud, abuse, and illegal activities; if we believe User’s actions are inconsistent with the spirit or language of our user agreements or policies; or to protect the rights, reputation, safety and property of Floify or others.

Strategic Transactions 

We may disclose personal information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business or in a bankruptcy, liquidation, dissolution or similar transaction. In the event that we or all of our assets are acquired in such a transaction, our collected information would be one of the transferred assets.

Professional Information

We do not consider business information to be personal information. Accordingly, we may share business names, owner/proprietor names, business contact information, registration and licensing data, and other information with third parties for any purpose.

Categories of Personal Information Disclosed 

In the last 12 months, Floify has disclosed the following categories of personal information for a business purpose to the following categories of third parties: 

Security

We take reasonable measures, including administrative, technical, and physical safeguards, to restrict access to a User’s personal information and help protect it from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. However, no such measure is 100% secure.

Third-Party Websites or Services 

The Properties may contain links to other third-party websites and services, either directly or through advertisements on the Properties. For example, there are a number of separate products and services offered by third parties advertised by us through the Services that may be complementary to a User’s use of the Services. If a User chooses to use these separate products or services, disclose information to the third-party providers, or grant them permission to collect information about a User, then their use of User’s information is governed by their privacy policies. Floify is not responsible for the content or privacy practices of websites operated by third parties, including our advertising partners and networks. We encourage Users to review the privacy policies of third-party websites and services before providing any information to them.

Managing Personal Information

Account Information

Users may access, update and correct their online account information at any time by logging into their online account and updating their preferences. If a User wishes to delete their online account, they may email us at support@floify.com. When a User requests that we terminate User’s account, User’s personal information (including documents a User have uploaded) will be permanently deleted from our primary production servers, further access to User’s account will not be possible, and we will disconnect User’s account from all third-party services. However, there might be some latency in deleting User’s  information and documents from our backup servers and backup storage, which we keep to ensure our continued ability to provide the Services in the event of malfunction or damage to our primary production servers. In addition, we may retain User’s information as required by law or for legitimate business purposes and User’s personal information may be retained by third parties with whom such information has already been shared. We may also retain cached or archived copies of User’s information. Please note that, even if User’s account is deleted, information that a User chooses to provide in a public area of the Services (such as testimonials) will remain visible.

User may also request to access information or to update or correct inaccurate information by emailing us at support@floify.com or writing us at Floify LLC, 1630A 30th Street #120, Boulder, Colorado 80301.

If User is a borrower and wishes to correct User’s information in their Floify Client’s records, User should please contact their Floify Client.

Cookies

Most web browsers are set to accept cookies by default. User’s usually choose to set their browser to remove or reject browser cookies. Please note that removing or rejecting cookies may affect the availability and functionality of the Services.

To opt out of being tracked by Google Analytics when using our web-based services, visit https://tools.google.com/dlpage/gaoptout.

Promotional Communications

Receiving promotional calls, text (SMS) messages, emails and direct mail from Floify is completely voluntary, and Users may opt out at any time. To opt out of promotional communications from Floify, email us at support@floify.com or opt out of receiving promotional emails by clicking the unsubscribe link in the email, and opt out of promotional text (SMS) messages by texting STOP. Users may receive a final email or text message confirming the request. Message and data rates may apply. Please allow up to 10 business days to process any opt-out request. 

Please note that even if a User opts out, we may still send non-promotional communications, such as emails about site outages, User’s online account or service requests that User submitted.

Communications By Third Parties

To opt out from receiving promotional communications from a Floify Client, a Porch Group Company or other third party, or to make requests regarding a User’s personal information or other information held by them, User should contact them directly.

Children and Our Services

Our Services are not directed to children, and no one under the age of 18 may use our Services. If we learn that we have collected personal information of a child under 18, we will make commercially reasonable efforts to delete such information from our files.

State-Specific Rights

California Resident Privacy Rights

Under the California Consumer Privacy Act or CCPA, California residents have certain rights regarding their personal information, including:

• The right to know the categories of personal information we’ve collected about them and the categories of sources from which we got the information (see Information We Collect);

• The right to know the business purposes for which we’ve shared their personal information (see How We Use Information We Collect);

• The right to know the categories of third parties with whom we’ve shared their personal information (see How We Share Information We Collect);

• The right to access the specific pieces of personal information we’ve collected about them and to request that we delete personal information, subject to certain exceptions (see below); 

• The right to opt out of the sale of their personal information (see below); and

• The right to not be discriminated against for exercising their CCPA privacy rights.

For purposes of these rights, “sold” and “business purpose” have the meanings given in the CCPA. For example, if a User submits an opt-out request, User will not be opted out from transactions that the CCPA does not deem to be sales. In addition, please note that the CCPA does not require us to delete personal information that we need to maintain for certain purposes.

Users may submit a verifiable consumer request to exercise the access and deletion rights described above with respect to their personal information by either:

• Calling us toll free at 720.853.2966; or
  
• Visiting our webpage at https://floify.com/legal/ccpadatarequest.

Only a User or someone that User authorizes to act on their behalf, may make a verifiable consumer request related to User’s personal information. We will work to respond to a consumer request within 15 business days (for opt-out requests) or 45 calendar days (for deletion and access requests) of receipt. We will not charge User a fee for making a request unless the request is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will notify User and explain our decision before completing their request.

Nevada Resident Privacy Rights

Nevada residents have the right to opt out of the sale of certain kinds of personal information (such as name, physical address, email address, telephone number and other personal information collected through a website) to purchasers that will then license or sell the covered information to additional persons. Users can exercise this right by visiting our webpage at https://floify.com/legal/ccpadatarequest.  Nevada law specifies various transactions that are excluded from the definition of “sale”; if a User exercises this opt-out right, User will not be opted out from transactions that the law does not deem to be sales.

Virginia Resident Privacy Rights

Under Virginia’s Consumer Data Protection Act, effective as of January 1, 2023, Virginia residents have certain rights regarding their personal information, including:

• The right to access the specific pieces of their personal information we’ve collected (see Information We Collect) and to request that we delete personal information, subject to certain exceptions (see below);

• The right to opt out of the sale of their personal information (see below);

• The right to opt-out of targeted advertising (see below); and
• The right to request correction of inaccurate personal information and to request to limit disclosure or use of a User’s sensitive personal information. Please note, however, that any right to request correction is limited by the legal rights of Floify and its users relating to content on the Properties, including without limitation legally protected rights related to freedom of speech.

For purposes of these rights, “sold” and “business purpose” have the meanings given in the VCDPA. For example, if a User submits an opt-out request, User will not be opted out from transactions that the VCDPA does not deem to be sales. In addition, please note that the VCDPA does not require us to delete personal information that we need to maintain for certain purposes.

To exercise the access and deletion rights described above, Users may submit a verifiable consumer request to us by either:

Calling us toll free at 720.853.2966; or
Visiting our webpage at https://floify.com/legal/ccpadatarequest. 

Only a User or someone that User authorizes to act on their behalf, may make a verifiable consumer request related to User’s personal information. We will work to respond to a consumer request within 15 business days (for opt-out requests) or 45 calendar days (for deletion and access requests) of receipt. We will not charge the User a fee for making a request unless the request is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will notify User and explain our decision before completing their request.

Colorado Resident Privacy Rights

Under Colorado’s Consumer Privacy Act, effective as of July 1, 2023, Colorado residents have certain rights regarding their personal information, including:

• The right to access the specific pieces of their personal information we’ve collected (see Information We Collect) and to request that we delete personal information, subject to certain exceptions (see below);
• The right to opt out of the sale of their personal information (see below);
• The right to opt-out of targeted advertising (see below); and
• The right to request correction of inaccurate personal information and to request to limit disclosure or use of a User’s sensitive personal information. Please note, however, that any right to request correction is limited by the legal rights of Floify and its users relating to content on the Properties, including without limitation legally protected rights related to freedom of speech.

For purposes of these rights, “sold” and “business purpose” have the meanings given in the CPA. For example, if a User submits an opt-out request, User will not be opted out from transactions that the CPA does not deem to be sales. In addition, please note that the CPA does not require us to delete personal information that we need to maintain for certain purposes.

To exercise the access and deletion rights described above, a User may submit a verifiable consumer request to us by either:

• Calling us toll free at 720.853.2966; or
• Visiting our webpage at https://floify.com/legal/ccpadatarequest. 

Only a User or someone that User authorizes to act on their behalf, may make a verifiable consumer request related to User’s personal information. We will work to respond to a consumer request within 15 business days (for opt-out requests) or 45 calendar days (for deletion and access requests) of receipt. We will not charge User a fee for making a request unless the request is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will notify User and explain our decision before completing their request. 

Connecticut Resident Privacy Rights

Under Connecticut’s Data Privacy Act, effective as of July 1, 2023, Connecticut residents have certain rights regarding their personal information, including:

• The right to access the specific pieces of their personal information we’ve collected (see Information We Collect) and to request that we delete personal information, subject to certain exceptions (see below);
• The right to opt out of the sale of their personal information (see below);
• The right to opt-out of targeted advertising (see below); and
• The right to request correction of inaccurate personal information and to request to limit disclosure or use of a User’s sensitive personal information. Please note, however, that any right to request correction is limited by the legal rights of Floify and its users relating to content on the Properties, including without limitation legally protected rights related to freedom of speech.

For purposes of these rights, “sold” and “business purpose” have the meanings given in the CDPA. For example, if a User submits an opt-out request, User will not be opted out from transactions that the CDPA does not deem to be sales. In addition, please note that the CDPA does not require us to delete personal information that we need to maintain for certain purposes.

To exercise the access and deletion rights described above, Users may submit a verifiable consumer request to us by either:

• Calling us toll free at 720.853.2966; or
• Visiting our webpage at https://floify.com/legal/ccpadatarequest. 

Only a User or someone that User authorizes to act on their behalf, may make a verifiable consumer request related to User’s personal information. We will work to respond to a consumer request within 15 business days (for opt-out requests) or 45 calendar days (for deletion and access requests) of receipt. We will not charge User a fee for making a request unless the request is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will notify User and explain our decision before completing their request. 

Utah Resident Privacy Rights

Under Utah’s Consumer Privacy Act, effective as of December 31, 2023, Utah residents have certain rights regarding their personal information, including:

• The right to access the specific pieces of their personal information we’ve collected (see Information We Collect) and to request that we delete personal information, subject to certain exceptions (see below);
• The right to opt out of the sale of their personal information (see below); and
• The right to opt-out of targeted advertising (see below).

For purposes of these rights, “sold” and “business purpose” have the meanings given in the UCPA. For example, if a User submits an opt-out request, User will not be opted out from transactions that the UCPA does not deem to be sales. In addition, please note that the UCPA does not require us to delete personal information that we need to maintain for certain purposes.

To exercise the access and deletion rights described above, Users may submit a verifiable consumer request to us by either:

• Calling us toll free at 720.853.2966; or
• Visiting our webpage at https://floify.com/legal/ccpadatarequest. 

Only a User or someone that User authorizes to act on their behalf, may make a verifiable consumer request related to User’s personal information. We will work to respond to a consumer request within 15 business days (for opt-out requests) or 45 calendar days (for deletion and access requests) of receipt. We will not charge User a fee for making a request unless the request is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will notify User and explain our decision before completing their request. 

Retention

Floify retains personal information as long as it is needed for business or legal purposes.

Governing Law; Visitors Residing Outside the United States  

Our Properties and Services are hosted and performed, and all personal data is processed, in the United States. This Privacy Policy is subject the laws of the United States of America and the State of Washington, without regard to conflict of law principles. If a User resides outside of the United States, User is responsible for complying with local laws in connection with their use of the Services, and User consents to the collection, transfer, storage, and use of User’s personal information in the United States in accordance with this Privacy Policy.

The laws governing processing of personal information vary depending on the jurisdiction in which User resides. To the extent the laws of a User’s jurisdiction are different or more restrictive than the terms of this Privacy Policy, it is Floify’s policy to follow the requirements of those laws to the extent those laws are applicable to Floify’s activities or User’s personal information.

Additional Information or Assistance

Please address comments or questions to legal@floify.com or write to us at the address below.

Floify LLC
1630A 30th Street #120
Boulder, Colorado 80301