Privacy Policy

1. Information We Collect

All Blu Technologies LLC (“All Blu,” “we,” “us”) collects the following categories of information from our business customers and prospective customers:

• Identification & contact data: name, business name, email address, mobile phone number, mailing address
• Business information: NMLS ID, brokerage name, state licensure, loan officer credentials
• Account data: username, hashed password, authentication tokens, session metadata
• Communications data: messages sent through our platform, support ticket history, call recordings (with consent)
• Mobile carrier data: when sending SMS/MMS messages, we receive delivery status, opt-out events, and message routing metadata from Twilio and underlying mobile carriers
• Loan file data (NPI): when our customers use the All Blu platform in the course of their mortgage business, the platform processes non-public personal information including borrower identifying information, financial data, credit data, income, and asset data, in accordance with the Gramm-Leach-Bliley Act (GLBA) and applicable state privacy laws
• Billing data: payment method tokens stored by Stripe; All Blu does not store full payment card numbers
• Technical data: IP address, browser type, device identifiers, usage analytics

2. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the All Blu platform
• Process account registration, billing, and subscription management
• Send operational SMS/MMS and email communications regarding your account, including support, billing, system notifications, and product updates
• Respond to customer support inquiries
• Improve our products and develop new features
• Comply with legal obligations, including financial industry regulatory requirements
• Detect, prevent, and address fraud, security incidents, and abuse

3. No Sale, Sharing, or Third-Party Marketing Use

All Blu does not sell, rent, or share mobile phone numbers, SMS opt-in data, or consent information with any third parties for their own marketing purposes. Mobile information collected from our users is used solely for the operational purposes described in this policy and is not shared with third parties for marketing, promotional, or advertising activities of those third parties.

We share information only with the following categories of service providers, strictly to provide services on our behalf and under contractual confidentiality obligations:

• Twilio — SMS/MMS delivery and voice communications
• Stripe — payment processing and subscription billing
• Google Cloud Platform — hosting and infrastructure
• DigitalOcean — supplementary infrastructure
• Mercury — banking services for All Blu Technologies
• Authorized integration partners (e.g., Fannie Mae DO, Freddie Mac LPA, credit bureaus, title vendors) — only when explicitly initiated by our customers in the course of loan origination workflows

We may also disclose information when legally required (subpoena, court order, regulatory request) or to protect our rights and the safety of our users.

4. Connected Email & Calendar Accounts (Google & Microsoft)

All Blu lets a user optionally connect their own Google (Gmail) or Microsoft (Outlook) account so that their email, calendar, and shared files appear inside the All Blu workspace. Connecting an account is always initiated by the user through Google’s or Microsoft’s standard OAuth consent screen, and can be disconnected at any time. When an account is connected, All Blu accesses only the data needed to provide these features:

• Email — we read messages, message metadata, and attachments to display the user’s mailbox and threads inside All Blu, mark messages read/starred, and send or reply to email on the user’s behalf when they compose it. (Google scopes: gmail.readonly, gmail.modify, gmail.compose, gmail.send. Microsoft Graph scopes: Mail.Read, Mail.Send.)
• Calendar — we read and write calendar events so the user can view and manage their schedule inside All Blu. (Google: calendar. Microsoft: Calendars.ReadWrite.)
• Shared files — when an inbound email contains a Google Drive or OneDrive share link, we read the linked file’s name, type, and thumbnail to display it in the document view. (Google: drive.readonly. Microsoft: Files.Read.All.)

How this data is used and protected. Data obtained from Google or Microsoft APIs is used solely to provide the features above to the user who connected the account. To display the mailbox responsively, message content and metadata are synced to All Blu’s database (hosted on Google Cloud Platform) and are accessible only to that user’s All Blu account. We do not use this data for advertising, we do not sell or transfer it to third parties, and we do not use it to train generalized or standalone artificial-intelligence or machine-learning models. A user may disconnect a connected account at any time from All Blu’s Settings → Integrations, or revoke access directly from their Google Account or Microsoft Account permissions page; on disconnect we stop syncing and delete the stored tokens, and synced messages are removed on request to support@allblu.ai.

All Blu’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Our use of information received from Microsoft Graph likewise adheres to Microsoft’s APIs Terms of Use and applicable Microsoft data policies.

5. SMS Communications and Consent

Phone numbers obtained through SMS opt-in or consent are not shared with third parties or affiliates for marketing purposes. SMS consent data is used exclusively for the purpose of sending the operational communications described in your account agreement and Terms of Service.

6. Data Retention

We retain account and communications data for the duration of your account plus a period required by law or industry regulation, after which data is securely deleted or anonymized.

7. Your Rights

You may request access to, correction of, or deletion of your personal information by contacting support@allblu.ai. You may opt out of SMS/MMS communications at any time by replying STOP to any message.

8. Contact

For privacy questions: support@allblu.ai

All Blu Technologies LLC
30 N Gould St Ste N, Sheridan, WY 82801