Privacy Policy

Last updated: October 5, 2026

This Privacy Policy describes how WIRMS LLC, a Tennessee Limited Liability Company ("WIRMS," "we," "us," or "our"), collects, uses, and shares information when you visit wirms.com or interact with our tools and services (the "Services").

WIRMS provides infrastructure tools and lender intelligence resources for mortgage professionals. We are not a consumer credit application portal, and we do not collect loan applications from consumers through this site.

1. Information We Collect

2. How We Use Information

• To respond to inquiries, provide requested information, and deliver the Services.
• To operate, maintain, secure, and improve the Services.
• To send service-related notifications, updates, and (with your consent) marketing communications.
• To detect, investigate, and prevent fraud, abuse, and security incidents.
• To comply with applicable laws, regulations, and lawful requests from authorities.

3. How We Share Information

We do not sell your personal information. We may share information in the following limited circumstances:

• Service providers: with third-party vendors that provide infrastructure, hosting, analytics, email delivery, and similar services on our behalf, under appropriate confidentiality and data-protection terms.
• Legal requirements: when required by law, subpoena, court order, or to protect the rights, safety, or property of WIRMS, our users, or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, in which case information may be transferred subject to standard confidentiality protections.
• With your consent: when you direct us to share information with a third party.

4. Third-Party Services

The Services may use third-party tools for hosting, analytics, error tracking, and communications, including but not limited to: Vercel (hosting and infrastructure), Supabase (database services), Meta Platforms (the WhatsApp Business Platform, for messaging), Anthropic (AI classification of documents uploaded to NodSense, our loan-origination software), and email-delivery providers. These providers process information on our behalf under their own privacy and security policies. Anthropic does not use the documents to train its models and deletes them within 30 days, except where it must keep them longer to enforce its usage policies or to comply with the law.

5. WhatsApp Messaging and Meta Data

NodSense, our loan-origination software, lets mortgage businesses ("Business Customers") connect their own WhatsApp Business accounts through Meta's WhatsApp Business Platform and message their borrowers. When a Business Customer connects, Meta shares with us the identifiers of its business portfolio, WhatsApp Business account and phone number, and an access token that lets our software send messages and manage message templates on its behalf. When messages are sent or received, we process the recipient's phone number, the message content, and delivery and read status.

We use this information only to deliver the Business Customer's messages, show their status, and keep the records the Business Customer needs. We do not sell it or use it for advertising, and we share it only with Meta (to deliver messages) and the service providers in Section 4. Each Business Customer's own privacy policy governs its relationship with its borrowers.

6. Deleting Your Data

A Business Customer can disconnect at any time by removing WIRMS Messaging from its Meta business settings; we then stop sending and delete the stored access token.

Anyone can ask us to delete personal data we hold, including WhatsApp messages and phone numbers: email luke@wirms.com with the subject "Data deletion request" and the phone number or account involved. We confirm by reply and complete deletion within 30 days, unless the law requires us to keep it.

7. Data Retention

We retain personal information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we take reasonable steps to delete or anonymize it.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict the processing of your personal information, as well as the right to data portability and to object to certain processing. To exercise these rights, contact us using the information below. We will respond within the timeframes required by applicable law.

9. Security

We implement reasonable administrative, technical, and physical safeguards to protect information from unauthorized access, disclosure, alteration, or destruction. No internet transmission or storage system is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, please contact us so we can delete it.

11. International Users

The Services are operated from the United States. If you access the Services from outside the U.S., you understand that your information will be transferred to and processed in the U.S., where data-protection laws may differ from those in your jurisdiction.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be communicated by posting a notice on the Services or through other reasonable means.

13. Contact Us

This Privacy Policy is provided for informational purposes and does not constitute legal advice. WIRMS is operated by WIRMS LLC, a Tennessee Limited Liability Company.