Privacy Policy

Vurno is a service from 8 Blocks LLC (“Vurno”, “we”, “us”) that helps mortgage loan officers and their teams keep in touch with past clients and work with real estate agents. This policy explains what information we handle, why we handle it, who we share it with, and the choices you have. It covers our website at vurno.io, the Vurno app, the home pages and emails we deliver on behalf of our customers, and the forms our customers place on their own websites.

1. The two roles we play

For our customers, the loan officers, teams and companies who sign up for Vurno, we are responsible for their account information: who they are, how they pay, and how they use the service.

For the people in our customers’ books, the homeowners, borrowers and real estate agents a customer adds to Vurno, we handle information on that customer’s behalf, as their service provider. The customer decides who to add and how to stay in touch; we use that information only to provide Vurno to that customer. If you are a homeowner or an agent and have a question about how a loan officer uses your information, please contact them directly. You can also write to us and we will help them respond.

Many of our customers are financial institutions under the Gramm-Leach-Bliley Act. We act as their service provider, protect the nonpublic personal information they entrust to us accordingly, and use it only to perform the service. Their own privacy notices govern their relationship with you.

2. Information we collect

From our customers

• Account and profile: name, email address, and password (held by our sign-in provider as a one-way hash, never readable by us) or the basic Google profile if you sign in with Google; company name, logo, brand color, NMLS numbers, title, phone and mobile numbers, headshot, mailing address and disclaimer text you add for your emails.
• Team: the members and invitations in your workspace and their roles.
• Billing: your plan, billing contact and payment history. Card and bank details go directly to our payment processor; we never see or store full card numbers.
• Support and feedback: what you send us when you write to support or use the feedback form.

About the people in a customer’s book

• Client information a customer provides by importing a file, emailing a spreadsheet, connecting another system or entering it by hand: names, email addresses, phone numbers, property addresses, and loan details such as amount, interest rate, loan type, term, closing date, estimated balance and mortgage insurance, plus the notes, to-dos and loan officer assignment a customer records. Vurno has no place for Social Security numbers, dates of birth, bank or loan account numbers, or credit reports, and customers may not upload them.
• Information we generate for the customer: home value estimates and listing status from property data providers, equity and loan-to-value estimates, comparisons with current market rates, and a “heat” score that ranks who to contact first based on equity, rate, home activity and engagement. The heat score is a marketing priority, not a credit decision, and it may not be used for one.
• Real estate agents: professional information from public listing sources (name, brokerage, public profile and contact details, active and sold listings, sales statistics), plus anything the customer adds, such as a pipeline stage or notes.

From homeowners directly

• What you enter on a loan officer’s home page, lead page or website form: your name, email, phone number, property address, current or target interest rate, questions, messages and email preferences.
• Your consent choices for email and text messages, with the time you gave them and the internet address they came from.
• Whether you opened or clicked an email and when you viewed your home page. Emails we send for loan officers contain a small image and tracked links that record this, so your loan officer knows when an update was useful. Turning off images in your email program stops open tracking.

Automatically, from devices

• Log data: internet address, browser type, pages requested and times, used for security, reliability and troubleshooting.
• Cookies: the ones needed to sign in and stay signed in, and one first-party cookie on our marketing site and sign-up pages that remembers, for 30 days, which ad, campaign or website first brought you to Vurno (and, if it was one of our Facebook or Instagram ads, that ad’s click identifier). It is not set when your browser sends Do Not Track or Global Privacy Control. The app and the homeowner pages carry no third-party analytics or advertising trackers.
• Website analytics: our marketing site counts visits, referring sites, campaigns and countries, and does nothing when your browser sends Do Not Track or Global Privacy Control.
• Notifications: if a Vurno user turns on notifications on a device, the device’s notification address, so we can deliver them.

3. How we use information

• To provide Vurno: value homes and watch for changes, build to-do lists and alerts, send emails and (where someone has agreed to them) text messages on a customer’s behalf, host home pages, and show agents’ listing activity.
• To run accounts: sign-in and verification, billing, customer support and service announcements.
• To keep Vurno secure: prevent fraud, spam and abuse, investigate problems, and enforce our Terms of Service.
• To improve Vurno, using aggregated or de-identified information.
• To meet legal obligations.

We do not sell personal information, and we do not use a customer’s client list to market our own products to those clients. The only advertising-related sharing is the Meta ad measurement described in section 4; it never involves homeowners, and Global Privacy Control turns it off.

4. How we share information

• With the customer it belongs to, and with the members of their workspace according to the workspace’s settings.
• With service providers that work for us under contract and may use information only to provide their services to us: hosting, database and file storage, sign-in, email delivery, text messaging, payment processing, address lookup, and property and listing data.
• With Meta, to measure our own ads: if you create a Vurno account after clicking one of our ads on Facebook or Instagram, we tell Meta that the ad led to a sign-up (and later, if it happens, to activation or a subscription and its amount), with the ad’s click identifier, your browser type and a one-way scrambled (hashed) copy of your email address, so we can measure and improve our ads. We don’t do this if your browser sent Do Not Track or Global Privacy Control when you signed up, for anyone who didn’t arrive from one of our Meta ads, or ever for homeowners or a customer’s clients.
• With other systems a customer connects, such as a CRM or automation tool, at that customer’s direction.
• For legal and safety reasons: to comply with law or legal process, to protect the rights, property or safety of Vurno, our customers or others, and to investigate fraud or security issues.
• In a business transfer, such as a merger or sale of assets, subject to this policy.
• With your consent, or as aggregated or de-identified information that cannot reasonably identify anyone.

5. Text messages

Vurno sends text messages only to people who agreed to receive them: loan officers who turn on text alerts, and homeowners who check the text box on a loan officer’s form. Message frequency varies with activity. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third parties, except the service providers that deliver the messages for us.

6. Your choices and rights

• Homeowners: every update email has a link to unsubscribe or change how often it comes, and you can reply STOP to any text. To see, correct or delete what a loan officer has about you, ask them, or write to support@vurno.io and we will route your request to them.
• Customers: update your profile and settings in the app, export your clients and agents from Settings at any time, remove any client or agent, and ask us to close your workspace.
• Privacy rights under state law: depending on where you live (for example California, Colorado, Connecticut, Virginia or Texas), you may have the right to know what personal information we have about you, to get a copy, to correct it, to delete it, and to opt out of its sale, sharing for targeted advertising, or profiling. We don’t sell or profile; the Meta ad measurement in section 4 may count as sharing, and you can opt out of it by signing up with Global Privacy Control on or by writing to support@vurno.io. We will not treat you differently for using these rights. To make a request, write to support@vurno.io; we will verify it and answer within the time the law allows, and you may use an authorized agent. When we hold the information for a customer, we pass the request to that customer and help them answer it. Some information covered by the Gramm-Leach-Bliley Act is exempt from certain state laws.

7. How long we keep information

• Customer accounts: while the account is open, and for up to 90 days after it closes so it can be restored if needed. After that we delete it, except for billing records and anything the law requires us to keep.
• Clients and agents: until the customer removes them or closes their workspace. Removed records leave our active systems right away, and backup copies roll off within 30 days.
• Consent and opt-out records: as long as we need them to honor opt-outs and show that consent was given.
• Logs: for a limited period used for security and troubleshooting.

8. Security

We protect information with encryption in transit and at rest, isolate each workspace’s data inside the database itself, limit access to the people who need it to run the service, encrypt the credentials for systems customers connect, and verify new accounts’ email addresses. No system is perfectly secure; if a breach affects your information, we will notify you and our customers as the law requires.

9. Children

Vurno is for adults in the mortgage and real estate business. It is not directed to anyone under 18, and we do not knowingly collect information from children.

10. Where information is processed

Vurno is operated from the United States, and information is stored and processed there. If you use Vurno from another country, your information will be transferred to the United States.

11. Other websites

Home pages and emails may link to listing sites, a loan officer’s own website, or other services. Their privacy practices are their own; please read their policies.

12. Changes to this policy

When we change this policy we will post the new version here with a new date. If a change is material, we will also tell our customers by email or in the app before it takes effect.

13. Contact us

Questions or requests about privacy: support@vurno.io. 8 Blocks LLC, operator of Vurno.