EmloPrivacy Policy
Emlo is operated by Elyon Labs. This policy covers the Emlo web app, the Emlo mobile apps, and this website.
What we collect
Your account
Your email address, a hashed version of your password, your time zone, and the name of your organization. We never store your password itself.
Your billing details
Checkout runs through Stripe. Stripe collects your billing name, business name, billing address, tax ID, and payment method. Emlo stores only the Stripe customer and subscription identifiers and your seat count — we do not receive or store your card number.
What you put into the product
Emlo is a place to track your production, so the records you create are the substance of the service: leads, referral partners, VIP clients, loans, goals, and your weekly activity. Contact records can include a person’s name, email address, and phone number.
Much of this is information about other people — your clients and referral partners. You are responsible for having a lawful basis to record it, and for honouring any request one of those people makes to you about it. We act on your instructions with respect to that data.
Sign-in records
When you sign in we record the IP address and browser or device user agent for that session, so you and we can tell legitimate sign-ins from suspicious ones.
What we do not do
We do not sell your data. We do not share it with advertisers. We do not use the records you enter to build profiles for anyone other than you and the people you have invited to your organization.
This website runs no analytics, no advertising pixels, and no third-party tracking scripts, and sets no cookies.
Who we share it with
We use a small number of service providers to run Emlo, and they only receive what they need to do their job:
- Stripe — payment processing, billing, invoices and tax handling.
- Render — application hosting and the database that stores your records.
- Cloudflare — delivery of coaching video content, where your organization uses that feature.
- Our email provider — delivery of account email such as onboarding links, invitations and password resets.
We may also disclose information where the law requires it, or where it is necessary to investigate abuse or protect someone’s safety.
Access within your organization
Your data is scoped to your organization. Owners and admins can invite and remove members. If you joined an organization that someone else pays for, that organization controls the account and can remove your access to it.
Keeping it and deleting it
We keep your data for as long as your organization has an account with us. If you cancel, we keep it for a limited period so you can change your mind, and then delete it.
You can ask us for a copy of your data, ask us to correct it, or ask us to delete it, by emailing [email protected]. Deleting your account deletes the records inside it, so export anything you want to keep first. Some billing records are kept longer where tax and accounting law requires it.
Security
Traffic between you and Emlo is encrypted in transit. Passwords are stored only as salted hashes, and session tokens are stored only as digests. Access to production systems is limited to people who need it.
No service can promise perfect security, and we will not pretend otherwise. If you believe you have found a vulnerability, please email [email protected] and we will look at it promptly.
Children
Emlo is a tool for mortgage professionals. It is not directed at children and we do not knowingly collect information from anyone under 18.
Changes
If we change this policy we will update the date at the top of this page, and for material changes we will tell account owners by email.
Contact
Elyon Labs — [email protected]