Privacy Policy

STX Lending (“we,” “us,” or “our”) is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at stxlending.com(the “Website”), use our services, or interact with us in any way.

By accessing or using our Website, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our services.

1. Information We Collect

1.1 Personal Information You Provide

When you apply for a mortgage, request a quote, or contact us, we may collect:

• Full name, date of birth, and Social Security Number (SSN)
• Home address, mailing address, and email address
• Phone number(s)
• Employment information, income, and financial documentation
• Property information (address, type, estimated value)
• Credit history and credit scores (obtained with your consent)
• Bank account information, asset statements, and tax returns
• Government-issued identification
• Any other information you voluntarily provide through forms or communications

1.2 Information Collected Automatically

When you browse our Website, we may automatically collect:

• IP address, browser type, operating system, and device information
• Pages visited, time spent on pages, and navigation patterns
• Referring URLs, search terms, and click data
• Cookies, pixel tags, and similar tracking technologies
• Location data (city/state level, not precise location)

1.3 Information from Third Parties

We may receive information from:

• Credit bureaus (Equifax, Experian, TransUnion) — with your authorization
• Employment and income verification services
• Property appraisal and title companies
• Flood, hazard, and mortgage insurance providers
• Government agencies (IRS, SSA) for verification purposes
• Marketing partners and lead providers (with appropriate consent)

2. How We Use Your Information

We use your personal information to:

• Process your mortgage application — underwriting, credit evaluation, property valuation, closing, and funding
• Communicate with you — loan status updates, document requests, marketing communications (with consent), and customer service inquiries
• Comply with legal and regulatory obligations — federal and state lending laws, anti-money laundering (AML) requirements, HMDA reporting, and regulatory examinations
• Prevent fraud — identity verification, fraud detection, and suspicious activity reporting
• Improve our Website and services — analytics, user experience optimization, and product development
• Market our products — personalized rate alerts, loan program recommendations, and educational content (you can opt out at any time)

3. How We Share Your Information

We do not sell your personal information. We may share your data with the following parties, solely for the purposes described:

• Lenders and investors — to underwrite, fund, and service your loan
• Credit bureaus — to obtain and report credit information as required by law
• Appraisal, title, and escrow companies — to complete your real estate transaction
• Mortgage insurance providers — when mortgage insurance is required
• Government agencies — as required by HMDA, ECOA, AML, and other regulatory reporting obligations
• Service providers — technology vendors, cloud hosting, document management, and analytics partners who are contractually bound to protect your data
• Legal authorities — when required by law, subpoena, court order, or to protect our rights and safety

4. Gramm-Leach-Bliley Act (GLBA) Notice

As a mortgage broker, STX Lending is subject to the Gramm-Leach-Bliley Act. We provide a separate Privacy Notice to mortgage applicants as required by GLBA, which details our information-sharing practices and your right to opt out of certain sharing. This notice is provided at the time of application and annually thereafter for active customers.

5. Your Rights and Choices

You have the following rights regarding your personal information:

• Access — Request a copy of the personal information we hold about you
• Correction — Request correction of inaccurate personal information
• Deletion — Request deletion of your personal information (subject to legal retention requirements)
• Opt-Out of Marketing — Unsubscribe from marketing emails or text messages at any time by clicking the unsubscribe link or by contacting us
• Do Not Call — Request to be added to our internal Do Not Call list
• Cookie Preferences — Manage cookie preferences through your browser settings

To exercise these rights, contact us at privacy@stxlending.com or call (210) 750-6164.

6. Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit
• AES-256 encryption for data at rest
• Multi-factor authentication for employee access to sensitive systems
• Regular security audits and penetration testing
• Employee training on data protection and phishing prevention
• Physical security controls at our office locations

While we take reasonable steps to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze website traffic and usage patterns (Google Analytics)
• Deliver relevant advertising and measure campaign effectiveness
• Enable security features and prevent fraud

You can manage cookie preferences through your browser settings. Disabling cookies may affect certain features of the Website.

8. Third-Party Links

Our Website may contain links to third-party websites (e.g., real estate portals, credit monitoring services, government sites). We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing personal information.

9. Children’s Privacy

Our Website and services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly.

10. California Residents (CCPA/CPRA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• Right to know what personal information we collect and how it is used
• Right to request deletion of personal information
• Right to opt out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

Note: Certain financial data collected for the purpose of processing mortgage applications may be exempt under GLBA and therefore not subject to CCPA/CPRA.

11. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. For mortgage transactions, federal and state regulations require retention of certain documents for a minimum of 3 to 7 years after the loan closes or the application is withdrawn/denied.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised “Last Updated” date. Your continued use of the Website after such changes constitutes acceptance of the updated policy.

13. Contact Us

For questions, concerns, or requests related to this Privacy Policy, please contact: