Privacy Policy
Last updated 29 August 2026
Mars is not charging anybody until it is. You can use the product in the meantime — nothing here is being relied on to take your money.
This explains what Mars LOS LLC collects when you use Mars, who it goes to, and how it is protected.
If you are a borrower: your mortgage broker chose Mars and decides what happens to your information. We hold and protect it on their behalf and do not use it for our own purposes. To see, correct or delete your file, contact your broker — they are the ones who can act on it.
Who is responsible for what
The brokerage using Mars is the financial institution with the relationship to the borrower. They decide what to collect and how long to keep it. We are their service provider: we process borrower information only on their instructions and only to run the service. Under the Gramm–Leach–Bliley Act we handle their customers' nonpublic personal information as a service provider, and we do not disclose or reuse it for anything else.
What we collect
- Account information about the brokerage and its staff: names, work email addresses, phone numbers, company details, NMLS number, and hashed passwords. We never store a password in a form we can read.
- Loan file information that the brokerage or the borrower enters: names, contact details, property address, income and debts, credit score, loan terms, milestones, notes, tasks and conditions.
- Documents uploaded by staff or borrowers — pay stubs, statements, disclosures and the like.
- The last four digits of a social security number, where entered, to help identify the borrower. Mars has no field for a full social security number — the application and the 1003 take only the last four digits. The full number a credit pull needs is collected by the brokerage outside Mars; Mars records only that it was collected. Documents you upload (pay stubs, W-2s, tax returns, scanned intake sheets) may contain one; they are stored encrypted at rest and are not shown to the AI assistant except as described below.
- Operational records: sign-in times, an audit trail of who changed what, and error logs, which we need for security and for the audit history regulators expect.
- Billing information for the brokerage's subscription. Card details go straight to Stripe and never reach our servers.
What we do not do
- We do not sell personal information, and we never have.
- We do not share it for cross-context behavioural advertising.
- We do not use borrower information to train machine-learning models, and neither may our providers.
- We do not run advertising or third-party tracking on the signed-in product.
Who else sees it
Only the providers needed to run the service, each limited to what their job requires:
| Provider | What it handles |
|---|---|
| Hosting provider | Runs the servers and stores the database and uploaded documents. |
| Anthropic | Powers the Emery assistant. Sent only when the brokerage enables it and someone asks a question — see below. |
| Stripe | Subscription payments for the brokerage. No borrower information. |
| Email provider | Delivers transactional messages. The brokerage supplies this account, or we send from ours. |
| E‑signature, credit and pricing vendors | Only where the brokerage connects their own account. Their privacy terms govern what they receive. |
We also disclose information where the law requires it, and to protect against fraud or abuse. If we are ever party to a merger or sale, the same commitments follow the data.
The Emery assistant, specifically
Emery is optional and off unless the brokerage turns it on. When someone asks her a question, the details needed to answer it are sent to Anthropic: borrower names and contact details, property, loan terms, any credit score on file, milestones, what is outstanding, and the notes and call logs staff have written on the file — for the company that person is signed into, and no other.
Exception — scanned intake sheets. Off unless your admin turns it on. If you enable the Leads import, the page images you upload are sent to Anthropic to be read. They can contain a date of birth or a social security number written by hand, and Mars does not redact the image — it cannot, because those are pixels in a photograph of a handwritten form. The model is instructed not to read the SSN box and anything SSN-shaped is dropped from the result, but by then the image has been transmitted; an instruction is not redaction, and we would rather say so than let you assume otherwise. Every batch that is sent is recorded in your Activity log with who sent it, how many pages, and which model received them. Notes and call logs staff type are sent as written.
From the loan file itself, social security digits and dates of birth are removed before anything is sent, and uploaded documents are never sent. Anthropic processes it to answer the question and does not train on it. If a brokerage would rather send nothing at all, Emery can be switched off in Settings and the rest of Mars works exactly as before.
How it is protected
- Traffic is encrypted in transit with TLS.
- Passwords are salted and hashed; sessions expire and can be revoked.
- Each brokerage's data is isolated, and every request is checked against the company you are signed into.
- Documents a borrower can download are limited to the ones they sent themselves.
- Backups of the database and documents run nightly.
- Uploaded documents are encrypted at rest with AES‑256‑GCM, so the files on disk cannot be read without the key.
- Access is restricted to the brokerage a document belongs to and, for a borrower, to the files they sent themselves.
- Access to production is limited to staff who need it.
No system is perfectly secure. If a breach affects personal information we will notify the affected brokerage without undue delay so they can meet their own notification duties, and we will notify individuals and regulators where the law requires.
How long it is kept
Loan files are kept while the brokerage's account is active, because lending records must be retained for years under federal and state rules — that retention decision is theirs, not ours. When an account closes, the export stays available for 30 days and we then delete or anonymise the data, except where we must keep it by law. Backups age out on their own schedule.
Your rights
Depending on where you live you may have the right to know what is held about you, to get a copy, to correct it, to delete it, and not to be discriminated against for asking. California residents have these rights under the CCPA as amended, including the right to know what is sold or shared — for us the answer is nothing.
Borrowers should contact their broker, who controls the file and can act on the request. If you contact us directly we will pass it to them and help them respond. Brokerage staff can email us at info@marslos.com. We verify identity before acting and respond within the time the law allows.
Cookies
Mars sets one cookie, to keep you signed in. It is marked HttpOnly and SameSite, and Secure over HTTPS. There are no advertising or analytics cookies in the signed-in product. Clearing it signs you out.
Children
Mars is a tool for businesses and is not directed to anyone under 18. We do not knowingly collect information from children.
Where data is held
Data is stored in the United States. If you use Mars from elsewhere, your information will be processed there.
Changes
If we change this policy we will update the date above and, for material changes, tell brokerage administrators in the product or by email before it takes effect.
Contact
info@marslos.com · 30600 Northwestern Hwy Ste 105, Farmington Hills, MI 48334