Privacy Policy

STR Home Loans LLC

Effective Date: March 10, 2026
Last Revised: March 10, 2026

By using our website or services, you acknowledge that you have read and understood this Privacy Policy. This policy applies to all individuals who visit our website, submit a loan inquiry, apply for a mortgage, or otherwise interact with STR Home Loans LLC.

1. About STR Home Loans LLC

STR Home Loans LLC is a licensed mortgage broker registered in the State of North Carolina and licensed to originate mortgage loans in multiple states nationwide. We specialize in DSCR (Debt Service Coverage Ratio) loans, short-term rental mortgages, and second home financing.

As a mortgage broker, we act as an intermediary between borrowers and wholesale lenders and investors. We do not directly fund loans. We are subject to federal and state laws governing the collection, use, and sharing of personal and financial information, including but not limited to the Gramm-Leach-Bliley Act (GLBA), the Fair Credit Reporting Act (FCRA), the Real Estate Settlement Procedures Act (RESPA), and applicable state privacy laws.

Privacy Officer: privacy@mystrhomeloan.com Website: www.mystrhomeloan.com

2. Information We Collect

2.1 Information You Provide Directly

Identity & Contact Information

Full legal name, date of birth, Social Security Number (SSN) or Individual Taxpayer Identification Number (ITIN)
Current and prior mailing address(es), email address, phone number(s)
Employment information, income, and asset documentation
Immigration or residency status (where applicable)

Mortgage & Financial Information

Loan purpose, property type, and desired loan amount
Bank account statements, tax returns, W-2s, or equivalent income documentation
Existing mortgage information, credit obligations, and liabilities
Property address and estimated value
Business financial statements (for DSCR and investor loans)

2.2 Information We Collect Automatically

When you visit our website, we may automatically collect:

IP address, browser type, operating system, and device identifiers
Pages visited, links clicked, time on site, and referral source
Cookies, web beacons, pixels, and similar tracking technologies (see Section 8)
Geographic location data based on IP address

2.3 Information From Third Parties

Credit reports and scores from Equifax, Experian, and/or TransUnion
Property valuation data and Automated Valuation Models (AVMs)
Lead generation and referral partner information
Public records such as property ownership, tax records, and court filings
Identity verification and fraud prevention services

3. How We Use Your Information

3.1 Loan Origination and Processing

Evaluating your eligibility for mortgage products
Processing your loan application and submitting to wholesale lenders
Ordering appraisals, title services, and other settlement services as required under RESPA
Verifying your identity and preventing fraud
Communicating with you regarding your application status

3.2 Legal and Regulatory Compliance

Complying with the Gramm-Leach-Bliley Act (GLBA) financial privacy requirements
Fulfilling obligations under the Fair Credit Reporting Act (FCRA)
Meeting Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements
Responding to regulatory examinations, subpoenas, and lawful requests
Maintaining required records under state and federal mortgage licensing laws

3.3 Marketing and Communications

Sending you information about mortgage products, rates, and promotions
Contacting you via email, SMS/text message, or telephone (with your consent where required)
Responding to your inquiries submitted through our website or contact forms
Sending transactional communications related to your loan or account

3.4 Business Operations

Improving our website, products, and services
Analytics and performance monitoring
Training and quality assurance
Risk management and internal audit

4. How We Share Your Information

STR Home Loans LLC does not sell your personal information. We share your information only as described in this section.

4.1 Wholesale Lenders and Investors

We share your loan application information with wholesale mortgage lenders and investors to obtain loan approvals, rate quotes, and final loan decisions. This sharing is necessary to perform our brokerage services. These parties are independently subject to federal and state privacy and lending laws.

4.2 Credit Bureaus

With your authorization, we submit credit inquiries to one or more of the three major credit reporting agencies — Equifax, Experian, and TransUnion — as required to evaluate your creditworthiness in connection with a loan application. This is a permissible purpose under the FCRA.

4.3 Loan Origination and Technology Platforms

We use third-party loan origination software (LOS) and point-of-sale (POS) platforms to process and manage loan applications. These vendors act as our service providers and handle your information only as directed by us and are bound by appropriate data protection agreements.

4.4 Marketing and Communications Platforms

We use third-party email and marketing platforms to send you communications. These service providers process your contact information on our behalf and are prohibited from using your data for their own marketing purposes.

4.5 Loan Servicing

If your loan is originated and subsequently serviced by a third party, we may transfer your information to the loan servicer as required to facilitate servicing, payment processing, and post-closing obligations.

4.6 Legal and Regulatory Disclosure

We may disclose your information as required or permitted by law, including:

In response to a court order, subpoena, regulatory examination, or government investigation
To comply with applicable federal and state mortgage licensing requirements
To protect the rights, property, or safety of STR Home Loans, our clients, or the public
In connection with a merger, acquisition, or sale of all or substantially all of our assets

5. Gramm-Leach-Bliley Act (GLBA) Financial Privacy Notice

Federal law gives you the right to limit some, but not all, sharing of your nonpublic personal information. Federal law also requires us to tell you how we collect, share, and protect your information.

As a financial institution subject to the GLBA, we are required to provide you with this notice regarding how we handle your Nonpublic Personal Information (NPI).

5.1 What We Share

We share NPI for our everyday business purposes — such as to process your transactions, maintain your account(s), and respond to court orders and legal investigations. We also share NPI for joint marketing with other financial companies and with nonaffiliated companies that perform services for us.

5.2 Your Right to Opt Out

Certain types of sharing are subject to your opt-out right under the GLBA. You may direct us not to share your information with certain nonaffiliated third parties for marketing purposes not related to servicing your loan. To opt out, contact us at privacy@mystrhomeloan.com.

5.3 Information Security Safeguards

We maintain physical, electronic, and procedural safeguards to protect your NPI in accordance with the GLBA Safeguards Rule (16 C.F.R. Part 314). Our safeguards program includes:

Designation of a qualified individual responsible for overseeing our information security program
Risk assessment and continuous monitoring of our information systems
Encryption of customer information in transit and at rest
Multi-factor authentication for systems containing NPI
Vendor oversight and contractual data security requirements
Employee training on data security and privacy obligations
Incident response plan for data security events

6. Fair Credit Reporting Act (FCRA) Notice

When you apply for a mortgage with STR Home Loans, we may obtain your consumer report (credit report) from one or more consumer reporting agencies. The following applies to our use of consumer report information:

We obtain credit reports only with a permissible purpose as defined under 15 U.S.C. § 1681b, including in connection with a credit transaction you have initiated.
You have the right to know if information in your credit report has been used against you in a credit decision. If we take adverse action based on your credit report, we will provide you with the required adverse action notice.
You have the right to obtain a free copy of your credit report from the consumer reporting agency used within 60 days of any adverse action.
You have the right to dispute inaccurate or incomplete information in your credit report directly with the consumer reporting agency.
We may share loan-level information with certain investors and lenders who have a permissible purpose under the FCRA.

7. Communications Consent — TCPA, A2P 10DLC, and CAN-SPAM

7.1 SMS and Text Message Communications

By providing your mobile phone number and expressly consenting to receive text messages from STR Home Loans, you agree to receive autodialed and/or pre-recorded SMS/MMS text messages. Standard message and data rates may apply. Message frequency will vary. Consent to receive text messages is NOT required as a condition of purchasing any product or service from STR Home Loans.

STR Home Loans uses A2P (Application-to-Person) 10DLC-registered messaging to communicate with borrowers and prospects via SMS. Our text messaging program may include:

Loan application status updates and document request notifications
Rate alerts and mortgage product information
Appointment reminders
Marketing messages related to our mortgage products and services

How to Opt Out of SMS Messages

You may opt out of receiving SMS messages from STR Home Loans at any time by:

Replying STOP to any text message you receive from us
Emailing privacy@mystrhomeloan.com with your name and phone number

After you opt out, you will receive one final confirmation message. You will not receive further marketing SMS messages, although you may still receive transactional messages required in connection with any active loan application unless you specifically request otherwise.

How to Get Help

For assistance with our SMS program, reply HELP to any message or email privacy@mystrhomeloan.com.

7.2 Telephone Calls

By providing your telephone number, you consent to receive calls from STR Home Loans at the number(s) you provide, including calls placed using automated telephone dialing systems or an artificial or prerecorded voice, for informational and marketing purposes. You may revoke this consent at any time by contacting us at privacy@mystrhomeloan.com.

We comply with the Telephone Consumer Protection Act (TCPA), 47 U.S.C. § 227, and all applicable Do Not Call regulations. If you are on the National Do Not Call Registry and have not consented to receive calls from us, we will honor your DNC status.

7.3 Email Communications

We send commercial email in compliance with the CAN-SPAM Act (15 U.S.C. § 7701 et seq.). Each commercial email we send will:

Clearly identify STR Home Loans LLC as the sender
Include our valid physical mailing address
Contain a clear and conspicuous opt-out mechanism

You may opt out of marketing emails at any time by clicking the "Unsubscribe" link in any marketing email or by emailing privacy@mystrhomeloan.com. Opt-out requests will be honored within 10 business days.

7.4 Web Chat

Our website may offer a live chat or chatbot feature. Information you provide through the chat function is collected and used to respond to your inquiry and may be retained as part of our customer records. Chat interactions may be recorded and reviewed for quality assurance purposes.

8. Cookies and Website Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance user experience, analyze traffic, and support marketing efforts.

8.1 Types of Technologies We Use

Essential Cookies: Necessary for the website to function. These cannot be disabled.
Analytics Cookies: Collect aggregate data about how visitors use our site (e.g., Google Analytics).
Marketing / Advertising Pixels: Help us and our advertising partners measure ad performance and deliver relevant content (e.g., Meta Pixel, Google Ads).
Session and Preference Cookies: Remember your settings and preferences for your current visit.

8.2 Your Cookie Choices

You may control cookie settings through your browser settings or through our cookie consent tool (if present on the site). Note that disabling certain cookies may affect website functionality.

To opt out of Google Analytics, you may install the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.

To opt out of interest-based advertising, visit optout.aboutads.info or optout.networkadvertising.org.

8.3 Do Not Track

Some browsers offer a "Do Not Track" (DNT) signal. At this time, our website does not respond to DNT signals. We will update this policy if our practices change.

9. California Residents — CCPA/CPRA Privacy Rights

If you are a California resident, you are entitled to additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), Cal. Civ. Code § 1798.100 et seq.

9.1 Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information from California consumers:

Identifiers (name, SSN, email address, IP address, phone number)
Financial information (bank statements, income, credit information)
Protected classifications under California law (age, national origin)
Internet or other electronic network activity (browsing history on our site)
Geolocation data (approximate location based on IP)
Professional or employment-related information
Inferences drawn to create a profile about consumer preferences

9.2 Your California Privacy Rights

Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected, used, disclosed, or sold about you.
Right to Delete: You may request deletion of personal information we have collected about you, subject to certain exceptions.
Right to Correct: You may request correction of inaccurate personal information we maintain about you.
Right to Opt Out of Sale/Sharing: We do not sell your personal information. We may share information for cross-context behavioral advertising; you may opt out.
Right to Limit Use of Sensitive Personal Information: You may limit our use of sensitive personal information such as SSN and financial account information.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

9.3 How to Submit a Request

To exercise your California privacy rights, email us at privacy@mystrhomeloan.com with the subject line "California Privacy Request." We will respond to a verifiable consumer request within 45 days of receipt. We may request information to verify your identity before processing your request. Requests may be extended once for an additional 45 days where reasonably necessary with prior notice.

9.4 Authorized Agent

You may designate an authorized agent to submit a request on your behalf. We will require the agent to provide proof of authorization and may require you to verify your identity directly with us.

9.5 Financial Privacy Exceptions

Certain personal information collected and used in connection with your mortgage application may be exempt from CCPA/CPRA deletion and opt-out rights to the extent it is subject to the GLBA or FCRA. We will notify you if a specific request cannot be fulfilled for this reason.

10. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy, comply with our legal and regulatory obligations, and resolve disputes or enforce agreements. Retention periods include:

Mortgage loan records: Minimum of 3 years from the date of loan application or as required by applicable state and federal law
Adverse action records: Minimum of 25 months under FCRA requirements
Marketing records: Until you opt out or as required by applicable law
Website analytics data: As configured with our analytics providers (typically 26 months)
Consumer complaints and regulatory correspondence: As required by licensing authorities

11. Data Security

We implement reasonable and appropriate technical, physical, and administrative safeguards designed to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. These measures include:

Encryption of sensitive data in transit using TLS/SSL and at rest
Access controls limiting employee access to personal information on a need-to-know basis
Multi-factor authentication for systems containing sensitive consumer data
Regular security risk assessments
Vendor due diligence and contractual data protection requirements
Employee training on data security and privacy obligations

Despite our safeguards, no data transmission or storage system is completely secure. If you believe your information has been compromised, please contact us immediately at privacy@mystrhomeloan.com.

12. Children's Privacy

Our website and mortgage services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18 without parental consent, we will delete that information promptly. If you believe we have collected information from a child under 18, please contact us at privacy@mystrhomeloan.com.

13. Third-Party Websites and Links

Our website may contain links to third-party websites, including lender portals, credit resources, or informational sites. This Privacy Policy does not apply to those third-party websites. We encourage you to review the privacy policies of any third-party site you visit. STR Home Loans is not responsible for the privacy practices or content of third-party websites.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last Revised" date at the top of this policy and, where required by law, notify you by email or prominent notice on our website.

Your continued use of our website or services after the effective date of any changes constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

15. State-Specific Rights and Disclosures

In addition to California rights described in Section 9, residents of certain other states may have additional privacy rights under applicable state law, including but not limited to Colorado, Connecticut, Virginia, Texas, and Nevada. If you are a resident of a state with a comprehensive consumer privacy law, you may have similar rights to access, delete, correct, or opt out of certain processing of your personal information. To exercise any applicable state privacy rights, please contact us at privacy@mystrhomeloan.com.

North Carolina residents: As a company registered in North Carolina, we comply with applicable North Carolina privacy and financial services laws.

16. RESPA Affiliated Business Disclosure

In connection with mortgage settlement services, federal law (RESPA, 12 U.S.C. § 2601 et seq.) requires us to disclose any affiliated business arrangements. We may refer you to settlement service providers, including title companies, appraisers, or attorneys. You are not required to use any referred provider and are free to shop for settlement services independently. Any referral arrangements will be disclosed to you separately as required by RESPA.

17. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, or if you wish to exercise any of your rights described herein, please contact our Privacy Officer:

STR Home Loans LLC Attn: Privacy Officer Email: privacy@mystrhomeloan.com Website: www.mystrhomeloan.com

We will acknowledge receipt of your inquiry within 5 business days and respond substantively within the timeframes required by applicable law.

STR Home Loans LLC is a licensed mortgage broker. NMLS ID: 2804759. This Privacy Policy does not constitute legal advice.