We use encryption and Google Cloud infrastructure to protect your personal and financial information.
Data sent between your browser and HomeTurf is encrypted with TLS.
Email verification, secure password requirements, and session management via Firebase Authentication protect your account.
Our database, file storage, and server functions run on Google Cloud Platform.
Your identity stays anonymous during auctions. Only the lender you choose receives your contact information.
Lenders never see your name, email, phone number, or street address during an auction.
Only the lender you choose receives your contact details. Other lenders never get access to your identity.
Your documents are deleted no later than 90 days after your auction closes, or sooner if you ask, unless the law requires us to keep them. A Loan Estimate read by our free Decoder is never stored; its figures are kept for 30 days, with a note of which ad or link brought you to the site, as our Privacy Policy describes.
Data sent between your browser and HomeTurf is encrypted with TLS. Our database and file storage run on Google Cloud, which encrypts stored data by default with AES-256.
Hosted on Google Cloud Platform. Google Cloud maintains SOC 2 Type II reports.
Access rules on our database and file storage limit each account to its own private data, and no lender can open a borrower's documents.
Your password is handled by Google's Firebase Authentication, which stores it only in hashed form. HomeTurf's servers never receive your password.
HomeTurf reviews each lender's NMLS record and state licenses at onboarding, typically within 1 business day. Auctions are shown to lenders; quoting requires an approved NMLS record and a license in the auction's state.
If a security breach affects your information, we will notify you as the law requires.
Our main vendors (Google Cloud and its Vertex AI service, Firebase, Vercel, SendGrid, Stripe, Sentry) each maintain their own security certifications.
Data in transit is encrypted with TLS
Stored data is encrypted at rest by Google Cloud (AES-256)
Google Cloud maintains SOC 2 Type II reports
Stripe is certified to PCI DSS Level 1; HomeTurf does not store card numbers
Security is a shared responsibility. Here's how you can help protect your account:
If you discover a security vulnerability or have concerns about your account security, please contact us immediately. We take all reports seriously and will respond promptly.
HomeTurf support handles reports of security vulnerabilities and incidents
We encrypt data in transit and at rest. During auctions, lenders see your credit score, income, and assets only as ranges; in Purchase and Refinance auctions they also see the exact property and loan figures, because accurate offers depend on them.
Only you and HomeTurf staff can open your documents. No lender receives them, including the lender you choose. When AI reads a document (normally each Beat My Rate Loan Estimate, and a purchase agreement or mortgage statement only if you turn on AI verification), we send it to Google Cloud's Vertex AI, as our Privacy Policy describes. The free Loan Estimate Decoder sends the Loan Estimate you choose to Vertex AI the same way but never stores the file; the figures it read are kept for 30 days, with a note of which ad or link brought you to the site, and no lender sees them. If Google's automated safety checks flag a request as possible misuse, Google may log it, including the document, for up to 90 days, and authorized Google employees may review it. Your documents are deleted no later than 90 days after your auction closes, unless the law requires us to keep them, and you can ask us to delete them sooner, at any time, by emailing privacy@hometurfus.com. After we delete a file or the information read from it, it can stay in our cloud provider's recovery storage for up to 7 days, where only HomeTurf administrators can restore it.
No. We never sell, rent, or trade your personal information to third parties for marketing purposes.
Lenders provide their NMLS number and the states where they hold a license. HomeTurf reviews the lender's NMLS record and state licenses through NMLS Consumer Access at onboarding, typically within 1 business day. Lenders can browse auctions in the meantime; quoting requires an approved NMLS record and a license in the auction's state, which is checked when the lender quotes.
© 2026 HomeTurf Mortgage Marketplace. All rights reserved.
We use essential cookies to keep you signed in and run the site. With your permission, we also load three advertising and analytics tags on our public pages, from Meta, Google Analytics and Reddit, to measure our ads and, through Meta and Reddit, to show HomeTurf ads to people who visited. They never receive your name, email or financial details. See our Privacy Policy.