Privacy Policy

Zupral LLC operates ZRM, a CRM and operational visibility layer built on top of BytePro for GSM Mortgage. For privacy questions or requests, contact us at privacy@zupral.com.

We collect the following categories of information:

• Account & authentication data. Operator name, email, username, role assignments, a securely hashed password, multi-factor authentication enrollment, and session and security-event logs (such as sign-in attempts and their outcomes).
• Borrower & contact data.Loan application and contact information synced from or paired with BytePro — for example, borrower names, contact details, and loan attributes — along with contact records and notes created within ZRM.
• Lead submissions. Information that prospects voluntarily provide through loan-officer landing pages, including contact details and prequalification answers.
• Usage & device data. Standard log, device, and cookie data generated as you use the service, used to operate and secure it.

We use information to:

• Provide, operate, and maintain ZRM.
• Authenticate users and secure accounts, sessions, and data.
• Surface application, contact, and sync information to authorized operators based on role.
• Route and manage leads submitted through landing pages.
• Monitor performance, troubleshoot, and protect against fraud and abuse.
• Comply with legal obligations and enforce our Terms.

ZRM processes nonpublic personal information about loan applicants on behalf of GSM Mortgage. We handle that information consistent with the Gramm-Leach-Bliley Act (GLBA) and applicable privacy laws, and we use it only to provide the service. We do not use borrower or contact data for advertising, and we do not sell personal information.

ZRM uses strictly necessary cookies and similar technologies to keep you signed in and to maintain session security. Your interface preferences, such as light or dark theme, are stored locally in your browser. We do not use ZRM to serve third-party advertising.

We share information only as needed to operate the service:

• Service providers. Infrastructure, hosting, and communications providers (such as BytePro as the loan system of record and Twilio for messaging, where used) that process data on our behalf.
• Legal & safety. When required by law, regulation, or legal process, or to protect the rights, property, or safety of Zupral, GSM Mortgage, or others.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell your personal information.

We retain information for as long as needed to provide the service and to meet legal, regulatory, and recordkeeping obligations. Because BytePro remains the system of record for loan data, deletion or correction of loan records is governed by GSM Mortgage’s processes in that system. To request deletion of account data, or to ask a question about retention, contact privacy@zupral.com.

We use administrative and technical safeguards designed to protect information, including password hashing, multi-factor authentication for privileged roles, session revocation, role-based access controls, and encryption in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

ZRM is operated from the United States. If you access the service from outside the United States, your information may be transferred to, stored in, and processed in the United States, where data-protection laws may differ from those in your jurisdiction.

ZRM is an internal tool intended for authorized adult operators. It is not directed to children, and we do not knowingly collect personal information from children through the service.

Depending on your jurisdiction, you may have rights to access, correct, or delete certain personal information, or to limit how it is used, under laws such as the CCPA/CPRA or GLBA. Borrower-facing privacy rights are generally handled by GSM Mortgage as the financial institution. To exercise a right or make a request, contact privacy@zupral.com.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes may be communicated through the service or by other appropriate means.

If you have questions about this Privacy Policy or our data practices, contact Zupral LLC at privacy@zupral.com.