Privacy Policy - Benedict Group

Who we are and what this covers

Benedict Group, Inc., a Connecticut corporation ("Benedict Group", "we", "us"), makes loan servicing software for lenders. This policy explains what information we collect through benedictgroup.com, the client portal and our communications with you, how we use it, and the choices you have. It covers the website and the client portal only. The software we license to clients is covered by the client's agreement with us, as explained next.

Our software runs on your systems, not ours

Our products (LOANS! For .Net, Benedict Servicing, the Portal and the API) are installed and operated by each client on the client's own computers and servers. The loan, borrower and financial information processed by that software stays with the client. We do not host it, store it, or have access to it in the ordinary course of business, and this policy does not apply to it. The client is responsible for that information and for any privacy notice its own users or borrowers need. If you send us any of that information, for example with a support request, remove confidential and borrower-identifying details first. We do not accept responsibility for information you send us that you should have removed.

Information you give us

We collect information you choose to provide:

When you request a demo or contact us: your name, work email, company, phone number, areas of interest and your message.
When a client portal account is created for you, or you create one with a work email: your name, work email, organization, title and phone numbers, your sign-in details, and the people and settings your organization's administrators maintain.
When you use support: the questions you ask, the files you choose to provide, and any feedback you leave on our documentation.
When you correspond with us by email or phone: the content of that correspondence, which we may keep as a business record.

Information about lenders and the people who work for them

We keep business information about lenders and loan servicing organizations, and about the people who work for them, so that we can tell those organizations about our products. This information comes from public sources such as lender and program directories published by government agencies and housing finance programs, from organizations' own websites, and from our business correspondence. It is business contact information: name, title, organization, work email, work phone and business address. It is not consumer information, and we do not use it for any purpose other than offering and supporting our products. You can ask us to stop contacting you at any time, using the link in any email we send or by writing to the address at the end of this policy.

Information collected automatically

When you use the website or the portal, our servers record each request: the network address it came from, the page requested, the time, the browser type, the page that referred you and, for signed-in users, the account. We keep this record to run the site safely: to detect and block abuse, to investigate security incidents, and to diagnose faults. Our application deletes it after 30 days; our hosting provider keeps its own standard platform logs for a limited period for the same security purposes. Separately, we count page views and clicks on the public pages. Those counts are kept with a one-way daily code in place of the address, with no cookie, and cannot be used to identify you. Actions taken by signed-in users in the portal are kept in an audit record for up to two years. We may block an address that behaves abusively.

Cookies

We use only the cookies the site needs: a cookie that keeps you signed in, a cookie that protects forms against forgery, a short-lived cookie that carries information between the steps of a form, and, where you unlock invitation-only pages with a code, a cookie that remembers that for twelve hours. We do not use advertising cookies, third-party analytics, or any third-party tracking, and no tracking scripts from other companies load on our pages.

AI assistant

Where we offer an AI assistant, the questions you submit are processed by an AI model provider acting on our behalf to generate the reply. We instruct our providers not to keep your requests or use them to train their models. We keep a record of the conversation with your account so that we can support you, improve the answers and bill for usage where your agreement provides for it, and our staff may review that record. Do not enter confidential, personal or borrower-identifying information into the assistant. Answers are generated automatically and may be incomplete or wrong; check them before you rely on them.

How we use information

We use the information described above to:

respond to your requests and provide what you asked for;
create and administer client portal accounts, deliver software and documentation, issue licenses, and provide support;
bill for our products and services;
send service messages about your account, your organization's software, and changes to our services;
tell lenders and loan servicing organizations about our products;
keep the website and portal secure, monitor their use, and improve them;
comply with the law, and establish, exercise or defend our legal rights and agreements.

Who we share information with

We do not sell personal information, and we do not share it with other companies for their own marketing. We share information only:

with service providers that act on our behalf, such as our hosting provider, our email delivery provider, an AI model provider, and an address-verification service. They receive only what they need to do their work for us and may not use it for anything else;
with your organization: if you have a client portal account, the administrators at your organization can see your profile and manage your access;
where the law requires it, or where we believe disclosure is necessary to protect our rights, our clients, the safety of any person, or to enforce our agreements;
as part of a business transaction: if we sell, merge, reorganize or transfer all or part of our business or a product line, the information we hold may be transferred to the new owner as part of that transaction.

Where information is kept

We are a United States company, and our systems and service providers are in the United States. If you use our website or portal from outside the United States, you agree that your information will be handled there.

How long we keep information

We keep information for as long as we need it for the purposes described above, and longer where the law, a dispute or our records require it. As a guide: the security log of requests is deleted after 30 days; page-view and click counts after about thirteen months; portal account, support and conversation records for as long as the account exists and for a reasonable period afterwards; business contact information for as long as it is relevant, or until you ask us to stop contacting you, in which case we keep a record of that request so that we can honor it; and correspondence as a business record.

Your choices

You can stop receiving marketing email at any time with the link in any message we send. You can ask us to see, correct or remove the personal information we hold about you by writing to the address below. Client portal users can download their own profile information from Account settings, and can ask their organization's administrator to close their account. We will honor reasonable requests, subject to information we need to keep for security, legal or record-keeping reasons, and we may ask you to confirm your identity first.

Security

We take reasonable steps to protect the information we hold: encrypted connections, access controls, monitoring, and limiting access to staff who need it. No method of storage or transmission is completely secure, and we cannot guarantee that information will never be lost, misused or accessed without authorization. You are responsible for keeping your sign-in details secret and for telling us promptly if you suspect misuse of your account.

Children

Our website and services are for businesses and the people who work for them. They are not directed to anyone under eighteen, and we do not knowingly collect information from children.

Other websites

Our pages may link to other websites. We are not responsible for their content or their handling of your information.

Accessibility

We want our content to be usable by everyone. If something on our site is difficult for you to use, tell us and we will help.

Changes to this policy

We may change this policy as our services change. We post the new version here with its date, and your continued use of the website or portal after that date means you accept it. If a change materially affects portal users, we will tell them.

Contact

Benedict Group, Inc., 1495 Canyon Blvd, PMB #409, Boulder, CO 80302. Email info@benedictgroup.com or call (303) 747-6690.