Privacy Policy

1. Who we are

ZenFi Inc. ("ZenFi," "we," "us," "our") is a California-based marketing and technology platform. We help homeowners understand cash-out refinancing as a way to lower their monthly debt payments, and we connect interested homeowners with licensed mortgage brokers who can actually handle the loan.

We are not a bank, lender, or mortgage broker. We do not originate, underwrite, or fund loans. Mortgage services are provided by licensed brokers in the ZenFi Network — currently Victory Home Mortgage (California DRE Broker License #01764042, NMLS #463448, Company NMLS #1866428).

2. What we collect

From the qualification form

When you complete our qualification form (hosted by Typeform), we collect:

• First name and last name
• Email address
• Phone number
• Estimated home value
• Approximate balances on your current debts

From your browser

When you visit zenfiusa.com, our analytics provider (PostHog) collects:

• IP address (truncated for privacy)
• Browser type and device
• Pages you visit and clicks you make
• How you arrived at the site (referral source)

This helps us measure what works on the site and what doesn't.

From our ads

When our ads are running on Facebook or Instagram, the Meta Pixel (a small tracking tag) records whether you clicked one of our ads and completed the qualification form. This is how we measure if an ad is working.

What we never collect

Nowhere on zenfiusa.com do we collect:

• Social Security numbers
• Bank account or credit card numbers
• Income or employment verification
• Exact loan amounts or credit scores
• Document uploads (W-2, tax returns, pay stubs)

If you choose to proceed with a cash-out refinance through one of our broker partners, that broker will collect loan-specific information directly from you, under their own privacy practices and federal banking rules. Those practices are separate from this policy.

3. How we use what we collect

• To connect you with a licensed broker when you ask us to.
• To make the site work and to improve it based on what users find useful.
• To measure our advertising so we're not wasting ad spend.
• To follow up with helpful content if you've asked us to.

4. Who sees your information

The mortgage broker you ask to speak with

When you complete the qualification form, we share your contact info and home/debt estimates with a specific licensed mortgage broker (currently Victor Martinez / Victory Home Mortgage). This happens only with your active consent — by submitting the form, you are asking us to connect you.

Service providers we rely on

We use a small number of reputable service providers to run the site:

• Typeform hosts the qualification form (SOC 2 certified).
• Calendly handles scheduling when you book a call.
• PostHog runs website analytics.
• Cloudflare hosts and protects the site.
• Meta (Facebook/Instagram) measures ad performance, when our ads are running.

Each provider only sees what it needs to do its job, and each is bound by its own privacy terms.

Law enforcement

If we receive a valid legal process (subpoena, court order, warrant), we comply to the extent required by law.

We do not sell your personal information

We do not sell personal data in any conventional sense. However, under the California Consumer Privacy Act (CCPA/CPRA), some of our sharing with Meta for ad attribution could be classified as "sharing for cross-context behavioral advertising." You have the right to opt out — see Section 5.

5. Your California privacy rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Right to know what we've collected about you and what we've done with it.
• Right to delete your info (with limited exceptions for legal retention).
• Right to correct inaccurate info.
• Right to opt out of data sharing for cross-context behavioral advertising.
• Right to non-discrimination. We don't treat you differently for exercising these rights.

To exercise any of these, email privacy@zenfiusa.com with your request. We respond within 45 days, with one 45-day extension if needed (we'll tell you if we need it).

You can also authorize an agent to make a request for you. We may ask you to verify your identity or the agent's authority before we process the request.

6. Cookies and tracking

We use first-party cookies for analytics (PostHog) and, when our ads are running, the Meta Pixel cookie for ad attribution. You can:

• Disable cookies in your browser settings.
• Use an ad blocker or privacy-focused browser.
• Enable Global Privacy Control (GPC) in your browser — we honor GPC as an opt-out of "sharing" under CCPA.

We don't use cookies from other ad networks, and we don't sell or broker cookie data.

7. Communications and consent (TCPA)

When you complete our qualification form, you are consenting to be contacted by the specific licensed mortgage broker we connect you with — currently Victor Martinez / Victory Home Mortgage — about your refinancing inquiry. Contact may be by phone call, SMS text message, or email.

Standard carrier rates apply for SMS. Message frequency varies based on your interaction with the broker.

To opt out:

• SMS: reply STOP to any message to stop future messages. Reply HELP for help.
• Email: use the unsubscribe link in any email from us or the broker.
• Calls: tell the broker on the phone, or email privacy@zenfiusa.com to remove you from further contact.

You do not need to agree to marketing calls or texts to use the site or receive help from us.

8. How long we keep your information

• Qualification form responses: up to 24 months, or longer if required by mortgage record-keeping rules that apply to the broker we connected you with.
• Analytics data: linked to your session for up to 12 months, then aggregated.
• Ad performance data: retained per Meta's standard retention schedule.

You can request earlier deletion at any time — see Section 5.

9. Security

We host on Cloudflare, which provides enterprise DDoS protection and automatic HTTPS. We use SOC 2-certified vendors for data handling. Our site itself stores no personal data on our own servers — we have no database, no user accounts, no file storage. The data path is simply: your browser → service provider (Typeform, Calendly, etc.) → broker.

No system is perfectly secure. If a breach ever affected you, we would notify you in accordance with California Civil Code §1798.82 and any other applicable law.

10. Children's privacy

This site is for adult homeowners considering a cash-out refinance. It is not directed at anyone under 18, and we don't knowingly collect personal information from minors. If we learn we have, we delete it promptly.

11. Changes to this policy

If we change this policy, we update the "Effective" date at the top. For material changes, we post a notice on the homepage for at least 30 days before the change takes effect.

12. Contact us

Questions, requests, or concerns:

Privacy: privacy@zenfiusa.com
General: hello@zenfiusa.com
Mail: ZenFi Inc., 10244 Saunders Dr., San Diego, CA 92131