Version 2.4 - Effective October 24, 2026
HomeTurf Mortgage Marketplace ("HomeTurf," "we," "our," or "us") is a technology platform that connects borrowers with mortgage lenders. We are not a lender, loan broker, or loan servicer. This Privacy Policy explains how we collect, use, and protect your personal information when you use our platform across all four auction modes: Purchase, Refinance, Pre-Approval, and Beat My Rate.
At HomeTurf, we take your privacy seriously. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our website (www.hometurfus.com) and services. By using HomeTurf, you consent to the data practices described in this policy.
Our platform supports four auction modes - Purchase, Refinance, Pre-Approval, and Beat My Rate - each of which collects different types and amounts of information. This policy describes what is collected for each mode and how that information is shared with participating lenders.
HomeTurf is currently available in 5 states. We handle all user information with the utmost care and in compliance with applicable privacy laws.
Why we collect your information. Because HomeTurf helps you obtain competing mortgage offers, we collect nonpublic personal information (NPI) such as your name, contact details, and the financial information you provide (for example, your credit score range, your income, assets, and debts, and any documents you upload).
How we share it. We share your information only as needed to operate the platform and only with your participation: lenders bidding on your auction see the auction details described in Data Collection by Auction Mode, without your name or contact details, and a lender receives your contact details only after you select that lender as your winning bid. When you select, HomeTurf shares your name, email, and phone (and, for a purchase or refinance, the property address) with that lender only. Every lender agrees to our Lender Code of Conduct as a condition of bidding. No lender receives your uploaded documents. We also use service providers that handle information for us, such as Google Cloud's Vertex AI, which reads some uploaded documents (see AI Document Reading below). We do not sell your personal information, and we do not share it with non-affiliated third parties for their own marketing.
How we protect it. We maintain administrative, technical, and physical safeguards designed to protect your information, including access controls that keep your contact details hidden from lenders until you choose one and keep your documents hidden from all lenders.
Your choices. You control which lender, if any, receives your contact details by choosing a winning bid. You can delete your account from your account settings, or ask for a copy or deletion of your data at any time by emailing privacy@hometurfus.com.
The information we collect depends on which auction mode you use. See the "Data Collection by Auction Mode" section below for a detailed breakdown.
HomeTurf supports four auction modes. Each mode collects different information to facilitate the auction process. This section describes exactly what is collected and what is shared with lenders for each mode.
Pre-Approval auctions are designed with enhanced privacy. We save financial information only in broad ranges (bands), not exact figures, to minimize the personal data shared while still enabling lenders to make competitive offers.
In a Beat My Rate auction, HomeTurf never asks for your current lender's name, and other lenders never see it. Your Loan Estimate shows the name, so only you and HomeTurf staff can open that file, and it is deleted no later than 90 days after your auction closes, unless the law requires us to keep it.
Two pages on our site work without an account: the Loan Estimate Decoder, which explains a Loan Estimate section by section, and our page for people getting lender calls after a mortgage application, which offers a checklist. Each can email you what it shows. This section describes what those pages collect and keep.
We use your information to:
The city, state, and first 3 digits of the ZIP code, property type, and the exact price or value, loan amount, down payment, and, for a refinance, current loan details, because accurate offers depend on them. Credit score, income, and assets are shown as ranges.
Target state only (no city or address), and credit score, income, and asset ranges. Pre-Approval also shows a price range, a loan amount range, and your purchase timeline. Beat My Rate shows the benchmark rate and APR exactly and the loan amount as a $10,000 range. No property address or city is shared.
Your name, email, phone number, street address, and uploaded documents are never shared during the auction. Lenders see your credit score, income, and assets only as ranges. HomeTurf never asks for your current lender's name in a Beat My Rate auction.
Only the lender you choose receives your contact details. No lender receives your uploaded documents. Lenders you did not choose receive no information about you. The winning lender is required to contact you within 36 hours.
We implement industry-standard security measures to protect your information:
While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to maintaining robust protections. See our Security page for more details.
We delete the documents you upload, and the information our systems read from them, no later than 90 days after your auction closes. An auction closes when bidding ends or when you cancel it; if it never goes live, the 90 days start from its last change. A document that is never used in an auction is deleted no later than 90 days after you upload it. We keep a document longer only when the law requires us to, for example under a court order or a regulator's request. After we delete a file or the information read from it, it can stay in our cloud provider's recovery storage for up to 7 days, where only HomeTurf administrators can restore it. What Google keeps when its AI reads a document, a temporary cache and logs of requests its safety checks flag, is described in AI Document Reading. You can ask us to delete your documents sooner, at any time, by emailing privacy@hometurfus.com.
We retain your account information for as long as your account is active. You may request deletion of your account at any time. Some information may be retained as required by law or for legitimate business purposes. If you start an auction and do not launch it, we keep the unfinished draft in your account for about 30 days after your last change so you can pick up where you left off; it is visible only to you and to HomeTurf staff for support, and it is deleted when you launch the auction, discard the draft, or delete your account. Your auction details, such as the figures you entered or confirmed and the offers you received, stay in your account until you delete your account. Deleting your account permanently deletes your profile, auctions, bids, and documents, any checklist or breakdown request made with your email address, and any decoded Loan Estimate you turned into an auction draft. We keep a record that the account was deleted, with its email address, so we can show the request was carried out. A lender you chose keeps the contact details you shared with it.
Your credit and income are held and shared as bands, never as exact figures. Pre-Approval additionally uses the price range you set rather than a single figure. In Beat My Rate, your benchmark rate and APR are shown to bidding lenders exactly, because the whole purpose is for lenders to beat a specific offer, while your loan amount is shared only as a $10,000 range. In an auction, HomeTurf also keeps the loan amount and property value read from your Loan Estimate to check your benchmark; lenders never see them. Your name, contact details, and current lender's name are never shared with them.
A decoded Loan Estimate (the record described under Free Tools & Emails; the file is never stored) is kept for 30 days after the decode and then deleted by our nightly sweep, or deleted with your account if you turned it into an auction draft. A checklist or breakdown request is kept for 30 days after the email is sent and then deleted the same way, or, if you asked for our guides, when you unsubscribe or delete your account; the hashed delivery record goes with it. A hashed form of an unsubscribed address stays on our do-not-email list until you ask us to remove it. The counters that limit how often the tools can be called hold hashed values only and are deleted after 2 days.
You have the right to:
To exercise these rights, contact us at privacy@hometurfus.com
California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
To exercise these rights, California residents can contact us at privacy@hometurfus.com
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will delete it immediately. If you believe we have collected information from a minor, please contact us at privacy@hometurfus.com.
We may update this Privacy Policy periodically. We will notify you of material changes by posting the new policy on our website, updating the "Version" and "Effective" date at the top of this page, and sending you an email notification. We post corrections and clarifications the same way, with the new date at the top of this page. Your continued use of HomeTurf after changes become effective constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or our data practices, please contact us:
Privacy Inquiries: privacy@hometurfus.com
General Support: support@hometurfus.com
Mailing Address: PO Box 75, Fort Lauderdale, FL 33302
© 2026 HomeTurf Mortgage Marketplace. All rights reserved.
We use essential cookies to keep you signed in and run the site. With your permission, we also load three advertising and analytics tags on our public pages, from Meta, Google Analytics and Reddit, to measure our ads and, through Meta and Reddit, to show HomeTurf ads to people who visited. They never receive your name, email or financial details. See our Privacy Policy.