Privacy Policy

What Broker AI is

Broker AI (operated by disruptionio, “we,” “us”) is a configuration and hosting layer for independent mortgage brokers. A broker builds a profile describing their business — their ideal client profile, lead-scoring rubric, referral partners, compliance guardrails, and voice — and connects it to an AI agent they already use (such as Claude or ChatGPT), on their own AI subscription. This policy explains what we collect, why, and what we deliberately never collect.

What we collect

• Account information: your email address and authentication session.
• Your broker profile: business details, ICP, lead-scoring rubric settings, referral partner information, compliance preferences, ad budget and targeting preferences you enter in the wizard.
• Connection credentials: if you connect an AI agent (Claude, ChatGPT) or an ad platform (Meta, Google, Microsoft) to Broker AI, we store the access tokens needed to maintain that connection, scoped to the permissions you grant.
• Billing information: handled by Stripe. We never see or store your card number.
• Product usage signals: aggregate, anonymized feedback your connected agent reports back (e.g. ad-channel performance benchmarks, corrections to lead-scoring suggestions) — never tied to an individual client or lead.
• Benchmarks across brokers: your funded rate, cost per lead and cost per funded file by lead source (Google Ads, Zillow, referrals and other sources Broker AI names, never one you typed) are pooled with other brokers’ in your province or state. A pooled figure is only ever shown as an average of five or more brokers; no lead, client or individual figure is shared. This is on by default; you can switch it off on your Ads page, and a brokerage can switch it off for everyone it covers.
• A workflow address you supply: if you connect a workflow you run elsewhere (Devs.ai, Make, Zapier, n8n, Power Automate), we store its address encrypted, and when you press “Run my file workflow” on a lead we send that address the file’s code, stage and source, nothing about a client. The workflow’s own credentials, such as a CRM token, are never collected here.

What we never collect

Real client or lead data — names, incomes, credit information, property details, or anything else about an actual person applying for a mortgage — never touches our servers. That work happens entirely inside your own AI agent’s conversation, on your own AI subscription. This is a deliberate architectural boundary, not a policy we could quietly change: our own product does not have a database table capable of storing it.

How we use connected ad-platform and AI-agent access

If you connect a Google, Meta, or Microsoft ad account, we use that access only to power the features you’ve asked for: showing your agent real campaign performance, and — for actions that would change something live, like a campaign, budget, or targeting change — holding the proposed change for your explicit approval before anything executes. We do not use this access for advertising, profiling, or any purpose unrelated to operating the feature you connected it for, and we do not sell or share this data with third parties except the service providers described below.

Service providers we use

Supabase (database and authentication hosting), Stripe (billing), and — only for the specific connections you set up — Anthropic/Claude, OpenAI/ChatGPT, Meta, Google, and Microsoft. Each handles data under their own privacy terms for the access you’ve granted them.

Your controls

You can revoke any connected AI agent or ad-platform connection at any time from your account settings. You can request deletion of your account and profile data by emailing us at the address below — we’ll confirm once it’s done.

Security

Access to your profile is restricted to your own account via row-level database security. Connection credentials (OAuth tokens) are stored encrypted and are never exposed in plain text to anyone, including us, outside of the specific service call that needs them.

Changes to this policy

If we make a material change to this policy, we’ll update the date at the top and, where practical, notify active brokers directly.

Contact

Questions about this policy or your data: broker@disruptionio.com