Last Updated: July 22, 2026
What is Personal Information.
Personal Information is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with an identified or identifiable natural person.
Personal Information does not include aggregated information or de-identified information that is maintained in a form that cannot reasonably be associated with or linked to an identified or identifiable individual.
Personal Information also does not include publicly available information or other information excluded from the definition of Personal Information under your state’s privacy laws. For example, information lawfully made available from federal, state, or local government records may qualify as publicly available information in your state.
Our Collection and Use of Personal Information.
We collect Personal Information to provide our Services, improve our customer experience, and to support our business functions. Our collection, use, and disclosure of Personal Information will vary depending on your interactions with us. Our third-party service providers may also collect Personal Information to perform services on our behalf.
Categories of Personal Information We Collect.
Personal and Online Identifiers. Information such as names, addresses, email addresses, phone numbers, and account usernames.
Professional or Employment-Related Information. Information such as job titles, organizations, professional licenses, credentials, professional affiliations, and professional contact information.
Financial Information. Information such as your credit or debit card numbers used to pay for our Services.
Transactional Information. Information such as your purchase history with RETR.
Communications . Information such as letters, emails, social media posts, reviews, feedback, chatbots, or other comments.
Online Activity. Information such as internet protocol (“IP”) addresses, cookie IDs, hardware and software information, device information, and information about how you use our Services.
Non-Precise Geolocation Data. Information such as city, state, or zip code associated with your IP address.
Inferences. Inferences drawn from other forms of Personal Information to create a profile reflecting an individual’s preferences, characteristics, predispositions, abilities, or aptitudes in their professional capacity.
Personal Information We Collect From You.
Account Information. We collect Personal Information when you create an account to use our Services. This includes personal and online identifiers and professional or employment-related information. You will also need to provide a username and password for your account. We maintain a record of your username, but passwords are encrypted and not retrievable by RETR.
Payment Information. Our Services require a paid subscription. In order to process your subscription, you must provide financial information such as a credit card or debit card. We use a third-party payment processor for payments, so we only have access to a minimal amount of details about your payment method, such as the last four digits, expiration date, and the billing address associated with your debit or credit card.
Business Contacts. You may choose to import the contact information of your business contacts to take advantage of certain Services. The information you provide may qualify as personal and online identifiers or professional or employment-related information depending on the content.
Communications . Communications between you and RETR or communications sent through our Services. We collect all communications, so the Personal Information collected depends on the content of the communication.
Personal Information We Collect Automatically.
Use and Device Information. We collect information about how you interact with our Services. This includes personal and online identifiers, online activity, and non-precise geolocation data.
Cookies. We use cookies and similar technology. Cookies are small text files which include an anonymous unique identifier. Cookies are sent to your browser from our servers and are stored on your computer’s hard drive. Sending a cookie to your browser enables us to collect data about you and keeps a record of your preferences when using our Services, both on an individual and aggregate basis. For example, we may use cookies to collect information such as personal and online identifiers, online activity, and non-precise geolocation data to understand, simplify, and improve our user experience; monitor and analyze the performance of our Services; or deliver targeted content and advertisements to you from us. We may use both persistent and session cookies. Persistent cookies remain on your computer after you close your session and until you delete them, while session cookies expire when you close your browser. Many web browsers allow you to modify your cookie settings, so please visit your browser’s help menu for more information. Please be aware that blocking certain cookies may impact the functionality and availability of certain areas of our Services.
Pixel Tags. A pixel tag (also called a tracking pixel, web beacon, or clear GIF) is a tiny, usually invisible image or small piece of code embedded in a web page, email, or advertisement. When the page or email is viewed, the pixel tag communicates with a server to collect information about the interaction. We use pixel tags to collect online activity information.
Personal Information We Collect from Third Parties and Other Sources.
Publicly Available Information. We obtain Personal Information from publicly available sources, such as third-party websites, social media sites, public records, and business websites. This information includes personal and online identifiers and professional or employment-related information.
Business Partners. We may obtain Personal Information from our business partners. This includes personal and online identifiers and professional or employment-related information.
Service Providers. We use third-party service providers to assist with payment processing, customer management, marketing and advertising, analytic services, and inferences. The Personal Information collected from our service providers depends on the type of services being provided, but it can include any of the categories of Personal Information described above.
Data Brokers. The Personal Information we obtain from data brokers includes personal and online identifiers and professional or employment-related information.
Browser Extensions. We offer browser extensions that help lenders identify and view RETR data about real estate agents and loan officers referenced in their email by integrating with the email platform you use. This section describes what the extension collects, how, and what it does not collect.
· Account Connection. To use the extension, you sign in to RETR, either through single sign-on (such as Google or Microsoft) or by creating a RETR account directly. Depending on how you sign in, RETR may receive basic profile information such as your name, email address, and profile photo. We do not receive or request access to your email account, inbox, or messages through the sign-in process itself. To uninstall the extension, follow your browser’s instructions for removing extensions.
· Email Scanning. Once installed, the extension reads elements of your webmail interface, such as sender, recipient, and cc fields, and message body content, for the sole purpose of identifying data points, such as email addresses and Nationwide Multistate Licensing System and Registry (“NMLS”) identifiers, that may correspond to real estate agents or loan officers. This scanning happens locally within your browser. We do not transmit, receive, or store the content of your emails. Only the extracted identifiers are sent to our servers.
· What Is Returned. If a match is found, we will provide information such as brokerage affiliation, real estate or loan transaction history, and other information already available through the RETR Platform. This information will be displayed in a sidebar within your webmail interface.
· Retention of Extracted Identifiers. We may retain the identifiers extracted through the extension, including in cases where no existing match is found, to improve the accuracy and completeness of our records about real estate agents and loan officers over time.
· What Is Not Collected. The extension does not access, collect, transmit, or store: the subject line, body text, or attachments of your emails; your contacts or address book; your calendar; or any content unrelated to identifying agents and loan officers.
· Google API Limited Use Disclosure. Where RETR's single sign-on option uses Google APIs, our use of that information adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Information about Google API services can be found here Google API Services and User Data Policy .
How We Use the Personal Information We Collect.
We use the Personal Information for the following business purposes:
To Operate, Maintain, and Improve Our Services.
· Account Creation. To create, maintain, and protect your account.
· Operate Our Services. To provide our Services and comply with our contractual obligations.
· Communication. To communicate with you for administrative purposes and to respond to technical and customer support questions.
· Improvement and Maintenance. To assist with technical maintenance, ensuring our Services work as intended, maintaining and improving our Services, analyzing how individuals interact with our Services, personalizing your experience using our Services, and product development.
For Security and Fraud Prevention.
· Security. To ensure the security of our systems and networks. This includes system testing and maintenance, data hosting, and troubleshooting.
· Fraud Prevention . To help detect and prevent the unauthorized use of our Services, fraud, and other criminal activity.
For Marketing and Advertising Purposes.
· Marketing Materials. To promote and market our Services and provide industry updates. You can unsubscribe from marketing materials in your account settings or by following the instructions in the communication.
· Targeted Advertising . We may advertise to you on other websites that you visit through the use of cookies and similar technology when you interact with our Services. You may opt out of this type of advertising via your browser or mobile device settings. We do not engage in cross-context behavioral advertising, which is the targeting of advertisements based on Personal Information obtained from an individual's activities across nonaffiliated websites, applications, or services.
Legal Compliance and Dispute Resolution Purposes.
· Legal Compliance. To comply with our legal and regulatory obligations and to enforce and protect our legal rights.
· Dispute Resolution. We may use your Personal Information in connection with litigation or dispute resolution.
Who We Share Personal Information With.
Customers. We make available Personal Information to the customers of our Services. This information includes personal and online identifiers, professional or employment-related information, and inferences.
Service Providers. We share Personal Information with third-party service providers so they can perform services for us. The information we share with service providers depends on the nature of the services provided. Therefore, we may share all the categories of Personal Information we collect, but what an individual service provider receives depends on the services provided.
Business Partners. We may share Personal Information with business partners with whom we share a common customer. The information we may share includes personal and online identifiers and professional or employment-related information.
Law Enforcement, Governmental Bodies, and Advisors. We may share Personal Information with law enforcement agencies and other governmental and regulatory bodies as necessary. We may also share information with our legal, financial, and data security advisors to assist with our legal and contractual obligations, to protect our legal and contractual rights, to resolve security issues, and to protect our customers or other third parties. Our advisors are bound by confidentiality obligations.
Change in Ownership. We may share Personal Information in the event of any acquisition, merger, refinancing, asset sale, or similar transaction. We may also share Personal Information in the event of insolvency, bankruptcy, or receivership. We will try to anonymize Personal Information when feasible, but this may not always be possible. The recipient will be bound by confidentiality obligations.
Our Collection and Use of Household Consumer Information.
Our Services are intended for businesses and professionals in the mortgage and mortgage-related industries and we do not market our Services to household consumers. Much of the information available through our Services relate to licensed mortgage and real estate professionals and is obtained from publicly available records, licensing authorities, commercial data providers, or other lawful sources. We use this information to provide our customers with market intelligence for the mortgage and mortgage-related industries. However, we may have information that qualifies as the Personal Information of a household consumer. You may exercise your data privacy rights using the directions below and we will comply with all requests in accordance with applicable state and federal law. Be aware that some of the information we collect may fall under a state’s privacy law exemption. These exemptions include, but are not limited to, publicly available information, information that has been de-identified, and information that is provided and used per your consent. We may also obtain Personal Information while performing services for another business. In this situation, we act as a service provider and the business that hired us acts as the controller of the Personal Information. If we receive a data privacy request that involves Personal Information obtained from a controller, we will promptly notify the controller and will advise you to submit your request to the controller.
How We Protect Personal Information.
We implement security measures designed to protect Personal Information from unauthorized access. Your account is protected by your account password and we encourage you to take steps to keep your Personal Information safe by not disclosing your password and by logging out of your account after each use. We further protect your Personal Information by implementing physical, managerial, and technical safeguards. This includes implementing security measures such as encryption in transit and at rest where applicable and firewalls. However, these measures do not guarantee that your Personal Information will not be accessed, disclosed, altered, or destroyed by breach of our security measures. By accessing our Services, you understand and agree to assume these risks.
Retention of Personal Information.
RETR is based in the United States of America and the Personal Information we collect is stored in servers located within the United States of America. We maintain Personal Information only as long as it is reasonably necessary to fulfill the purpose for which it was collected and in accordance with applicable laws. We may retain your Personal Information for longer for legal or regulatory compliance, dispute resolution, contractual obligations, or with your consent. The criteria we consider when determining how long we retain Personal Information include whether we need your Personal Information to provide our Services, whether we have a legal right or obligation to retain your Personal Information, whether our internal record keeping policies require us to retain your Personal Information, whether we intend to provide you with information about our Services, or if we have another business purpose for retaining your information.
Your Privacy Rights.
The privacy laws in the United States vary depending on your state. These privacy laws provide individuals with certain rights pertaining to the collection, storage, and processing of their Personal Information. Depending on applicable law, you may have the following rights:
Right to Know and Access. You may request that we confirm whether or not we have collected any Personal Information about you or to request access to the Personal Information we have collected about you, including:
· The categories of Personal Information we collected about you.
· The categories of sources from which the Personal Information is collected.
· The business or commercial purpose for collecting, selling, or sharing Personal Information.
· Specific pieces of Personal Information we have collected about you.
· The categories of third parties we have disclosed your Personal Information to.
· The categories of Personal Information that we have sold .
Right of Correction . You may request that we correct any inaccuracies in the Personal Information we have collected about you.
Right of Deletion. You may request that we delete the Personal Information we have collected about you, and if applicable, direct any third-party service providers to delete any Personal Information that we sold or shared with them.
Right of Portability. You may request a copy of the Personal Information that we have collected in a portable and usable format that can be transferred to another entity, to the extent it is technically feasible.
Right to Opt-Out. You may request that we stop processing Personal Information for the following purposes:
· Sale of Personal Information. You may request that we stop selling or sharing your Personal Information with third parties.
· Targeted Advertising. You may request that we stop processing your Personal Information for targeted advertising.
· Right to Opt-Out of Profiling. You may request that we stop processing your Personal Information for profiling in furtherance of decisions that produce legal or similarly significant effects on you.
Right to Limit the Use of Sensitive Personal Information. You may request that we limit our use of sensitive Personal Information, if collected, to uses that are necessary to provide you with the goods and/or services you requested.
Right to a List of Third Parties. You may request a list of the specific third parties to whom we disclose Personal Information.
Right of No Discrimination. You have the right not to receive discriminatory treatment because you exercised any of your privacy rights and we will not discriminate against you for exercising any of your rights. However, we may offer different prices, rates, or quality of goods or services if the difference is reasonably related to the value of your Personal Information.
Please understand that some of the rights detailed above are not absolute, might not be available in your state, or may not be applicable in certain scenarios.
How to Exercise Your Rights.
You can exercise your rights by submitting the required verification information below and the right(s) you wish to exercise to hi@retr.app or by mailing your request to:
RETR LLC
8401
Mayland Dr #6641
Richmond, VA 23294
Verification Requirements. We may need to verify your identity before processing your request depending on your state’s privacy laws and the type of request submitted. If we need to verify your identity, we will ask you to provide information that we can match against the information we have. The level of verification required will depend on the nature of your request and the sensitivity of the Personal Information involved. We will use the information collected during the verification process solely to verify your identity or authority to make the request and to process your verified request. We may decline your request if we are unable to verify your identity or locate your information in our systems.
Response to Requests. We will respond to your request within 45 days of receipt, unless your state’s privacy law requires a faster response. We may extend the response period where reasonably necessary and, if we extend the response period, we will inform you of the extension. Our response will inform you of our decision, including an explanation for our decision.
Appeals. If we deny your request to exercise any of your rights or fail to respond within 45 days, you have the right to appeal within 60 days . We will respond to an appeal within 45 days of receipt, unless your state’s privacy law requires a faster response. We may extend the response period when reasonably necessary. If we extend the response period, we will inform you of the extension. Our response will inform you of our decision, including an explanation for our decision. If you have concerns about the results of your appeal, you have the right to contact your state’s Attorney General.
Authorized Agents. You may be permitted by your state’s privacy laws to use an authorized agent to submit requests on your behalf. If an authorized agent submits a request on your behalf, the authorized agent must submit suitable evidence documenting their authority to act on your behalf. Depending on the evidence provided and applicable law, we may request additional information or contact you to confirm the authorized agent’s authority.
Opting Out of the Sale or Sharing of Your Personal Information. You can request that we stop selling or sharing your Personal Information by sending a request to Do Not Sell My Personal Information.
Communications from Us. We may add you to our mailing lists for email communications when you use our Services. You have the right at any time to opt-out from receiving marketing emails from us. You can opt-out by following the unsubscribe instructions provided in the marketing email or by selecting the appropriate setting in your account settings. However, please note that we will still send you administrative emails. For example, emails informing you about changes to our Privacy Policy and Terms of Service.
Do Not Track and Global Privacy Control Signals. Some Internet browsers can be configured to send “Do Not Track” signals to the websites you visit. We currently do not respond to “Do Not Track” signals. However, we will honor any global privacy control signals that come to our attention.
Links to Third-Party Websites.
We may provide links to other websites or applications. Use of these links is not meant as an endorsement or proof of affiliation with the linked website or application. We are not responsible for the privacy practices employed by those websites or applications, or the data or content they contain. The privacy policy of the third-party website or application will apply to your use of that site or application. We encourage you to read their privacy policy and terms of service before use.
Children.
Our Services are designed and marketed towards adults in their professional capacity. We do not knowingly collect, sell, or share the Personal Information of individuals under the age of 18. If you are a parent or guardian of a child under the age of 18 and discover that your child has submitted Personal Information to us, please contact us at hi@retr.app .
Modification to this Privacy Policy.
We may update our Privacy Policy from time to time. You will be notified of any updates to our Privacy Policy in accordance with our Terms of Service. We will also update the “Last Updated” date located at the top of this page. Unless noted otherwise, updates will be effective as soon as they are posted. We encourage you to check back regularly to see if our Privacy Policy has been updated.
Contact Us.
If you have any questions regarding our Privacy Policy, please contact us at hi@retr.app .
