Privacy Policy
Last Updated: October 30, 2024
Overview
This Privacy Policy describes how Floify LLC, a Porch.com, Inc. business (“Floify” or “we”), collects, uses, and shares personal information. This Privacy Policy applies to personal information we collect when Floify Clients (defined below) or their customers access or use our websites, mobile applications, or other platforms or properties (the “Properties”), use our products and services (individually and collectively with the Properties, the “Services”), communicate with us by telephone, chat or SMS, or otherwise interact with us. This Privacy Policy also applies to personal information we collect from other sources, including Floify’s parent company, Porch.com, Inc., and its subsidiaries (each, a “Porch Group Company”) and mortgage companies, other loan originators, realtors and other business users that use our loan document workflow management system for uploading, downloading, and managing documents and information (each, a “Floify Client”).
By "personal information," we mean information that uniquely identifies an individual, such as a name, email address, or government-issued identification number (such as a driver’s license number or social security number); unique financial information; and information that we link to an individual’s unique identifier(s) or unique financial information. If information is de-linked or de-identified, we do not consider it to be personal information. For example, a postal address would not be personal information if it were included in a list of addresses without names or other unique identifiers. Business information (such as the names, logos, business personnel photos, and contact information of a business or the business address, landing or other relevant web pages, phone number, or other publicly available information) is not personal information.
Individuals in their business capacity (i.e., a Floify Client, a representative of a Floify Client, or a potential Floify Client) and individuals who are customers of a Floify Client and using the Floify loan document workflow management system as part of the process to obtain a mortgage (individually and collectively with Floify Clients, “Users”) may both access the Floify Properties. In both cases, we may receive an individual’s name and other personal information, and we will collect personal information as described in this Privacy Policy.
References to Floify also include companies providing services to Floify, the Porch Group Companies, and Floify Clients or other business partners, to the extent that such parties are collecting, using, or sharing personal information for or on behalf of Floify. This Privacy Policy applies to information collected by those companies only when they provide such information to Floify.
We may change this Privacy Policy from time to time. If we make changes, we will notify Users by posting the updated Privacy Policy on our website and updating the effective date at the top of this Privacy Policy. In some cases, we may provide Users with additional notice (such as adding a statement to our websites’ homepages or sending a notification).
For Users that do not agree with the terms of this Privacy Policy, please do not continue using the Services.
Information We Collect
Information a User Gives to Us
We collect information that Users provide directly to us. For example, we collect mortgage- and borrower-related information and documents Users upload to our loan document workflow management system. Users may also provide us information to receive other benefits of the Services, such as customer support, or when a User otherwise transacts business with us; when a User provides us a success story or other testimonial about experiences with Floify; when a User engages with us on social media or participates in our promotional marketing programs; when a User contacts our sales team regarding business; or when a User otherwise provides or uploads content that includes personal information.
Information We Collect Automatically
When a User accesses or uses the Services or when we send a User emails, we and our advertisers may use tracking technologies to automatically collect information about a User. Please see our Cookie Policy to learn more about these technologies, how we use them, and how to manage or disable them. Automatically collected information may be associated with a User’s unique browser, device identifier or Internet Protocol (IP) address, but we do not consider it to be personal information unless it is linked to a User’s unique identifier(s).
Automatically collected information includes:
- Log Information. We log information such as IP address, access times, operating system, browser type and language, Internet Service Provider (ISP), and the web page a User visited before navigating to our Services.
- Usage and Session Information. We collect usage information, such as how many visitors visit a specific page, how long they stay, which links they click on, and how, when and how often they order particular services, and session information, such as mouse actions, pages visited, screen actions and other interaction patterns.
- Device Information. We collect information about the computer or mobile device a User uses to access the Services, including the hardware model, operating system and version, unique device identifiers and mobile network information.
- Location Data. If a User uses mobile Services, we may collect location data directly from the User’s mobile device if the device allows us to do so. In addition, a User’s IP address may provide an approximate geo-location.
- Transaction Information. When a User purchases a service, we collect information about the transaction, such as the date and location of the purchase.
- Emails. When a User receives emails from us, we collect information about whether and when the User opened the email, whether the User clicked on the images and links in the email, and whether the User’s computer or mobile device is capable of receiving HTML-based email.
Information We Collect from Floify Clients, Porch Group Companies and Third Parties
We obtain personal information from Floify Clients, when an invited borrower uses our loan document workflow management system and when they submit or upload information in connection with a borrower’s loan application.
We may also obtain information from the Porch Group Companies and other companies that partner with Floify to offer promotions to their or our clients or users. For example, a Porch Group Company may provide us with consumer information to allow us to offer them Floify services or for Floify Clients to offer them refinancing services.
We may obtain personal information (such as business lead information) from third-party data providers and public sources.
Information Collected from Calls
When a User calls us, or when we call a User, we may monitor and/or record those calls for quality assurance and customer satisfaction purposes. In those jurisdictions where consent is required for a party to record a telephone call, a User consents to us recording such calls. We treat the records of these calls, when linked to a User’s unique identifier(s), as personal information.
Social Media
When a User interacts or engages with us on social media sites such as Facebook through posts, comments, questions and other interactions, we may collect such publicly available information, including profile information, to allow us to connect with the User, or better understand user reactions and issues. Once collected, this information may remain with us even if the User deletes it from the social media site(s).
Testimonials
We post success stories or other testimonials on our website, which may contain personal information. Before posting a testimonial, we obtain the person’s consent to post their name and image along with their testimonial.
Aggregate and Anonymized Information
We may also aggregate (group) or de-link/de-identify (anonymize) information. For example, we may collect and compile anonymous demographic information about the age, gender, household income, co-signers and financial information of our borrower users; or statistics about how many loan applications and documents were processed through our document workflow management system. Aggregated, anonymized data is not personal information subject to this Privacy Policy, and we may use it to analyze usage of the Services or for any other purpose. We may also share aggregated and/or anonymized information with Porch Group Companies and our and their business partners.
Categories of Personal Information Collected
In the last 12 months, Floify has collected the following categories of personal information from the categories of sources described above. We consider this information to be personal information to the extent that it is information that uniquely identifies a User, is unique financial information, or is linked to User’s unique identifier(s), or if it is defined as personal information by applicable state law.
Category | Examples |
Direct Identifiers | Real name, unique personal identifier or online identifier, Internet Protocol address, email address, account name, social security number, driver's license number, passport number, or other similar identifiers. |
Personal information categories listed in the California customer records statute (Cal. Civ. Code § 1798.80(e)) | Name; signature; telephone number; credit card number, debit card number, bank account number, or any other financial information; insurance policy number; education or employment; criminal background check history. Types of personal information included in the California consumer records statute that are included in other categories are not repeated here. |
Protected classification characteristics under California or federal law | Age (40 years or older); race, national origin, or ethnicity; citizenship status; marital or familial status; sex (including gender, gender identity, gender expression), or veteran or military status. |
Commercial information | Records of personal and real property. |
Internet or other similar network activity | Browsing history; search history; information on a consumer's interaction with a website, application, or advertisement. |
Geolocation data | The location of a person’s computer or device when accessing or using the Properties. |
Professional or employment-related information | Current or past employment history, place of work. |
Inferences drawn from other personal information | None |
Audio, electronic, visual, thermal, olfactory, or similar information | Call recordings of customer service calls; photographs of individuals. |
Biometric information | None |
Education information | None (except as included in other categories) |
How We Use Information We Collect
In general, we use the information we collect to operate our business and, where we are legally and contractually permitted to do so, to facilitate the business of the Porch Group Companies, including:
- To provide, maintain, improve, and personalize the Services and the services of other Porch Group Companies.
- To process transactions, provide and improve customer service and performance, communicate with Users about their account, changes in our policies or other service matters, and to otherwise manage our customer relationships.
- To offer products and services from Floify, the Porch Group Companies, and our and their business partners (when permitted to do so under this Privacy Policy).
- To optimize marketing campaigns and analyze their effectiveness, distribution and reach.
- To develop new products and services.
- To administer contests, promotions or sweepstakes.
- To detect, investigate and address technical issues, security incidents, fraudulent transactions, abuse, violations of our agreements and policies, and illegal activities.
- To comply with our legal obligations and legal processes.
- To create aggregated or de-identified data sets.
- To analyze trends, administer the Properties, and track visitor navigations on the Properties to understand what visitors are looking for.
- To carry out certain short-term activities and other reasonable internal purposes related to the Services or our customers’ ongoing relationship with us.
- To perform other business purposes described at the time the information is collected or as otherwise set forth in applicable data privacy laws.
Floify will not collect additional categories of personal information or use the personal information we collect for materially different, unrelated, or incompatible purposes without providing notice to the User.
How We Share Information
Except as described in this Privacy Policy, we do not sell or rent personal information to any third party. If we share personal information, we do so only as follows.
User-Directed Disclosures
We share a User’s personal information when the User directs us to do something that requires its disclosure or when a User otherwise provides consent. For example:
- When a User uses our loan document workflow management system to provide User’s documents and information to a Floify Client, the Floify Client will receive the User’s personal information;
- When a User chooses to connect User’s Floify borrower account to third party services, that third party will receive User’s information (in accordance with User’s privacy settings with those third-party services); and
- If a User opts in to receiving marketing from Porch Group Companies, as described below, we will provide User’s information to them for that purpose.
Porch Group Companies
If User is a borrower and User and User’s associated Floify Client consent to User’s receiving marketing from Porch Group Companies, we will provide User’s information to Porch Group Companies so that they can offer User the Porch Home Assistant moving concierge service, insurance, and other products and services of interest to User. If User and User’s associated Floify Client do not consent to marketing from the Porch Group Companies, we will not provide User’s information to them for the purposes of marketing. However, we may provide User’s personal information to the Porch Group Companies in connection with the database, technical, legal, accounting, and other services (other than marketing) shared between the Porch Group Companies, to improve their products and services (such as confirming or supplementing information they have about User or classifying User as a mover) and for other internal business purposes.
When a User interacts with Floify on behalf of their business, we may share User’s information with the Porch Group Companies to allow them to offer relevant services to User’s business and to personalize their communications with User’s associated borrowers who have opted into marketing from the Porch Group Companies.
The Porch Group Companies will be bound by the terms of this Privacy Policy with respect to personal information received from Floify and will use that personal information only as described in this Privacy Policy.
Companies Providing Services to Floify
We share information with third-party vendors, consultants, and other service providers that are providing business services to Floify. For instance, we may share information with a third-party service provider that hosts the Properties, provides call center or other customer service, processes payments, sends out emails, serves ads to Users on the Properties or on a third-party platform, or monitors or analyzes Services data. Such companies will have access to personal information only as necessary to carry out their work and are prohibited from using it for any other purpose.
Floify Business Partners
If User is not already a customer of a Floify Client, we may provide User’s personal information to Floify Clients to enable them to offer the User relevant financial services. When a User interacts with Floify on behalf of their business, we may share such personal information with our business partners to allow them to offer services or promotions to their business.
Companies with Whom a User Has an Existing Relationship
If User is already a customer of, or otherwise has a direct relationship with, a business partner of a Porch Group Company (an “Existing Relationship Company”) and we have shared User’s information with a Porch Group Company for marketing and product/service improvement purposes as described above (i.e., with User’s consent), the Porch Group Company may disclose certain information about User to that Existing Relationship Company. If User is a match to a customer on the Existing Relationship Company customer list, the Porch Group Company may provide the Existing Relationship Customer with information such as the groups or segments User belongs to (such as mover or homeowner) and demographic information about User and User’s home (such as estimated household income and square footage), so that the Existing Relationship Company can provide User with more relevant advertising, products and services. The Porch Group Company will not give the Existing Relationship Company any of User’s contact information, unique personal identifiers, or unique financial information unless for another purpose permitted in this Privacy Policy. However, the Existing Relationship Company may already have some or all of that information (because of its existing relationship with User) and they will be able to link User with the other information about User that the Porch Group Company provides to them.
Contests and Sweepstakes
When User signs up for and participates in a contest or sweepstakes, we may publicly disclose User’s name, company, city and state if User wins.
Compliance with Laws and Policies; Protection of Rights
We may disclose a User’s personal information if we believe disclosure is necessary to comply with any applicable law, regulation, or legal process, to cooperate with government or law enforcement, or to avoid legal liability; to resolve complaints or disputes; to investigate and resolve technical issues, security incidents, fraud, abuse, and illegal activities; if we believe User’s actions are inconsistent with the spirit or language of our user agreements or policies; or to protect the rights, reputation, safety and property of Floify or others.
Strategic Transactions
We may disclose personal information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business or in a bankruptcy, liquidation, dissolution or similar transaction. In the event that we or all of our assets are acquired in such a transaction, our collected information would be one of the transferred assets.
Professional Information
We do not consider business information to be personal information. Accordingly, we may share business names, owner/proprietor names, business contact information, registration and licensing data, and other information with third parties for any purpose.
Categories of Personal Information Disclosed
In the last 12 months, Floify has disclosed the following categories of personal information for a business purpose to the following categories of third parties:
Category of Information | Category of Third Parties |
Direct Identifiers |
|
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) |
|
Protected classification characteristics under California or federal law |
|
Commercial information |
|
Internet or other similar network activity |
|
Geolocation data |
|
Professional or employment-related information |
|
Inferences drawn from other personal information |
|
Audio, electronic, visual, thermal, olfactory, or similar information |
|
Biometric information |
|
Education information |
|
Security
We take reasonable measures, including administrative, technical, and physical safeguards, to restrict access to a User’s personal information and help protect it from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. However, no such measure is 100% secure.
Third-Party Websites or Services
The Properties may contain links to other third-party websites and services, either directly or through advertisements on the Properties. For example, there are a number of separate products and services offered by third parties advertised by us through the Services that may be complementary to a User’s use of the Services. If a User chooses to use these separate products or services, disclose information to the third-party providers, or grant them permission to collect information about a User, then their use of User’s information is governed by their privacy policies. Floify is not responsible for the content or privacy practices of websites operated by third parties, including our advertising partners and networks. We encourage Users to review the privacy policies of third-party websites and services before providing any information to them.
Managing Personal Information
Account Information
Users may access, update and correct their online account information at any time by logging into their online account and updating their preferences. If a User wishes to delete their online account, they may email us at support@floify.com. When a User requests that we terminate such User’s account, User’s personal information (including documents a User has uploaded) will be permanently deleted from our primary production servers, further access to User’s account will not be possible, and we will disconnect User’s account from all third-party services. However, there might be some latency in deleting User’s information and documents from our backup servers and backup storage, which we keep to ensure our continued ability to provide the Services in the event of malfunction or damage to our primary production servers. In addition, we may retain User’s information as required by law or for legitimate business purposes and User’s personal information may be retained by third parties with whom such information has already been shared. We may also retain cached or archived copies of User’s information. Please note that, even if User’s account is deleted, information that a User chooses to provide in a public area of the Services (such as testimonials) will remain visible.
A User may also request to access information or to update or correct inaccurate information by emailing us at support@floify.com or writing us at Floify LLC, 1630A 30th Street #120, Boulder, CO 80301.
If User is a borrower and wishes to correct User’s information in their Floify Client’s records, User should please contact their Floify Client.
Cookies
Most web browsers are set to accept cookies by default. User’s usually choose to set their browser to remove or reject browser cookies. Please note that removing or rejecting cookies may affect the availability and functionality of the Services.
To opt out of being tracked by Google Analytics when using our web-based services, visit https://tools.google.com/dlpage/gaoptout.
Promotional Communications
Receiving promotional calls, text (SMS) messages, emails and direct mail from Floify is completely voluntary, and Users may opt out at any time. To opt out of promotional communications from Floify, email us at support@floify.com or opt out of receiving promotional emails by clicking the unsubscribe link in the email, and opt out of promotional text (SMS) messages by texting STOP. Users may receive a final email or text message confirming the request. Message and data rates may apply. Please allow up to 10 business days to process any opt-out request.
Please note that even if a User opts out, we may still send non-promotional communications, such as emails about site outages, User’s online account or service requests that User submitted.
Communications By Third Parties
To opt out from receiving promotional communications from a Floify Client, a Porch Group Company or other third party, or to make requests regarding a User’s personal information or other information held by them, User should contact them directly.
Children and Our Services
Our Services are not directed to children, and no one under the age of 18 may use our Services. If we learn that we have collected personal information of a child under 18, we will make commercially reasonable efforts to delete such information from our files.
State-Specific Rights
For Users residing in California, Colorado, Connecticut, Montana, Oregon, Texas, Utah or Virginia, state law grants such Users additional rights (see below for information on the rights currently granted by state). A User may submit a request to exercise such User’s rights by completing our online form. Completing the form online will allow us to work on the request more quickly and efficiently, but a User can also get help by calling (720) 853-2966. Please see below for more information on our process for verifying we have received a legally valid request.
Floify will not discriminate or retaliate against a User if such User elects to exercise any legally available rights as described in this Privacy Policy. If a User would like an authorized agent to submit a request on such User’s behalf, please send us an email at legal@floify.com for instructions and additional information we need to respond to a request when submitted by a legally authorized agent.
Identity verification requirement
The law requires that we validate the identity and legal authority associated with certain personal information requests, including for customers residing in states granting additional rights as set out below. As a result, we may require that a User take additional steps to validate such User’s identity and legal authority, particularly where a User makes a request through our online form. Should a User fail to confirm the request within the relevant timeframe and/or fail to provide the additional information requested, the request will be considered unvalidated and closed.
We will provide a response to any personal information request within the timeframe required by law. If we cannot substantively respond to the request in a timely manner, we will notify User and provide the reason for the delay.
Under certain circumstances, we may not be able to fulfill a request, such as when doing so would interfere with our regulatory or legal obligations, where we cannot verify a User’s identity, or if the request involves disproportionate cost or effort. But we will respond to the request within a reasonable time, as required by law, and provide an explanation.
For California residents
California law requires that we provide certain disclosures, including a description of legal rights, to those who reside in the state of California. If User is a California resident, this section applies in addition to all other applicable rights and information contained in this Privacy Policy.
For California disclosures, please see the Information We Collect and How We Use The Information We Collect sections above for information about the categories of personal information we collect and categories of recipients to which we have disclosed such information over the preceding 12 months.
As a California resident, a User has the right to request:
- To know more about and access such User’s personal information.
- That we correct User’s personal information that is inaccurate.
- That we delete User’s personal information.
To exercise the access and deletion rights described above, a User may submit a verifiable consumer request to us by either:
- Calling us toll free at (720) 853-2966; or
- Visiting our webpage at https://floify.com/legal/ccpadatarequest.
In addition, California law also gives Users the right to request that we limit the use of "sensitive" personal information. Floify does not use any sensitive personal information to make inferences about Users and uses sensitive personal information only for reasons set forth in this Policy and as permitted by the California Consumer Privacy Act.
The rights granted under California law may provide us with exceptions to fulfilling a request, including where we need to retain the information to fulfill a legal obligation, complete a transaction, prevent fraud or any other purpose permitted by law.
Should a User wish to appeal a determination we have made with regard to a personal information request, send an email to legal@floify.com within 14 days of receiving a final response from us. Include "Data Subject Rights Appeal" in the subject line of the email, and provide the User’s name, the email address associated with the request and any relevant information for us to investigate the appeal. We will provide a response to the request for an appeal within a reasonable time and in accordance with applicable law.
Do not sell or share personal information. As described above, we may work with certain advertising partners to show ads that are targeted to a User’s interests. These activities may be considered "selling" or "sharing" of personal information under California law. To opt out of these activities, a User must submit a request using our online form and adjust settings for each device and browser used with the Properties. We do not knowingly "sell" or "share" the personal information of consumers under 16 years of age.
For our customers residing in Colorado, Connecticut, Montana, Oregon, Texas, Utah and Virginia
Colorado, Connecticut, Montana, Oregon, Texas, Utah and Virginia laws require that we provide certain disclosures, including a description of legal rights, to those who reside in those states. If a User is a resident of Colorado, Connecticut, Montana, Oregon, Texas, Utah or Virginia, this section applies in addition to all other applicable rights and information contained in this Privacy Policy.
As a resident of Colorado, Connecticut, Montana, Oregon, Texas, Utah or Virginia, a User has the right to request:
- To know whether we are processing personal information, access to that information and to receive a copy of such personal information.
- That we correct User’s personal information that is inaccurate.
- That we delete User’s personal information.
- To opt out of the processing of personal information for the purposes of providing User with targeted advertising.
As a resident of Oregon, a User also has the right to request that we provide a list of the third parties we share personal information with.
To exercise the access and deletion rights described above, a User may submit a verifiable consumer request to us by either:
- Calling us toll free at (720) 853-2966; or
- Visiting our webpage at https://floify.com/legal/ccpadatarequest.
The rights granted under applicable law may provide us with exceptions to fulfilling a request, including where we need to retain the information to fulfill a legal obligation, complete a transaction, prevent fraud or any other purpose permitted by law.
Should a User wish to appeal a determination we have made with regard to a personal information request, send an email to legal@floify.com within 14 days of receiving a final response from us. Include "Data Subject Rights Appeal" in the subject line of the email, and provide the User’s name, the email address associated with the request and any relevant information for us to investigate the appeal. We will provide a response to the request for an appeal within a reasonable time and in accordance with applicable law.
Other than as set forth in this Policy, we do not collect or process personal information that may be considered "sensitive" and subject to the laws in Colorado, Connecticut, Montana, Oregon, Texas, Utah or Virginia. We do not use personal information for profiling in furtherance of decisions that produce legal or similarly significant effects concerning a consumer.
Retention
Floify retains personal information as long as it is needed for business or legal purposes.
Governing Law; Visitors Residing Outside the United States
Our Properties and Services are hosted and performed, and all personal data is processed, in the United States. This Privacy Policy is subject to the laws of the United States of America and the State of Washington, without regard to conflict of law principles. If a User resides outside of the United States, User is responsible for complying with local laws in connection with their use of the Services, and User consents to the collection, transfer, storage, and use of User’s personal information in the United States in accordance with this Privacy Policy.
The laws governing processing of personal information vary depending on the jurisdiction in which User resides. To the extent the laws of a User’s jurisdiction are different or more restrictive than the terms of this Privacy Policy, it is Floify’s policy to follow the requirements of those laws to the extent those laws are applicable to Floify’s activities or User’s personal information.
Additional Information or Assistance
Please address comments or questions to legal@floify.com or write to us at the address below.
Floify LLC
1630A 30th Street #120
Boulder, CO 80301