Updated: October 21, 2025
This Privacy Notice describes the information Staircase, Inc. (“Staircase”, “we”, “our”, or “us”) collects, how we use and retain this information, with whom we share it, and the choices you have in connection with these activities. This Privacy Notice applies to the Staircase’s website (https://www.staircase.co/) (the "Website") and our digital platform, including website application (collectively, the “Platform”), owned and controlled by Staircase, as well as a variety of marketing data, consumer analytics, and marketing technologies services (collectively, our “Services”).
This Privacy Notice does not apply to the information collected by our customers through our Services or any third-party vendor or technology that can be integrated through our Services.
1. PERSONAL INFORMATION WE COLLECT FROM YOU AS A REPRESENTATIVE OF A LENDER THROUGH CONTACT WITH YOU AND HOW WE USE IT
When you interact with our Services, we collect your personal information. Personal information is information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. We will retain your information for as long as it is necessary for the purpose of the processing, unless we receive a request to delete this information and no exception to your right to deletion applies.
A. When you engage with our Services
When we collect your personal information through the Platform, we are collecting your information in your capacity as a representative of our customer (rather than a personal capacity).
We will collect your personal information when you:
Register for the Platform. When you register for an account on the Platform we will collect your identifiers (name, business telephone number, selected username and password, business email address), employment information (employer name, and job title/role), and personal affinities or expertise. We will use your identifiers to set up your account profile and communicate with you about our services, use personal affinities and expertise to match you with potential borrowers based on similar interests and expertise and create ice breaker scripts, and we will use your telephone number to send you a verification code as part of the account verification process. We may share your identifiers with your employer to provide our services in accordance with the agreement we have with your employer.
Log in to the Platform. When you log in to the Platform, we will collect your personal identifiers (username and password). We will use this information to authenticate you to your account.
Automated decision-making. We perform automated decision-making and train our algorithms using your personal information, including the information you explicitly provide, Website browsing history (what webpages in our platform you visit, how often, etc.), how you use the Platform (what services you use), and from where you are accessing the Services to improve our Services. We will also analyze your voice recording using automated decision-making to generate ice breaker scripts for you to use with your potential borrower. To object to the automated decision-making related to your personal information, you may contact us at admin@staircase.co.
Subscribe you to our marketing communications. When you create an account, you are automatically signed up to receive marketing communications from us. We will collect your identifiers (name) and contact information (business e-mail address) to send you e-mail marketing communications. You can opt-out of future email communications by clicking the “Unsubscribe” button at the bottom of each email. If you have an online account, you can also use Settings to manage your consents. We may share your identifiers and contact information with our third party marketing providers who send you marketing emails on our behalf. Please note that we will continue to send you notifications related to notifications that are necessary to the Services, or notifications regarding requested services. If you opt-in to your emails being tracked, our e-mail communications will analyze whether a predefined action took place by a recipient, such as opening our communications or clicking on a specific item, in order to better adapt and distribute our communications.
Automatic Data Collection. We collect information automatically through cookies and similar technologies as you use our Platform to: (i) track you within the Platform; (ii) enhance user experience; (iii) conduct analytics to improve the Platform; (iv) prevent fraudulent use of the Platform; (v) diagnosis and repair Platform errors, and, in cases of abuse, track and mitigate the abuse. This includes the following internet or other electronic network activity information:
Usage information. We use essential, performance, and analytics cookies to collect information about your interaction with our Platform, such as what you access, what you click on, the frequency of access, and how much time you spend on the Platform.
Device information. We use essential, performance, and analytics cookies to collect certain information about the device you use to access the Platform, such as browser type, browser language, hardware model, operating system, and device preferences.
Location information. We use essential, performance, and analytics cookies to collect information about your location, which may be determined through your IP address, GPS, or RFID signal.
Particular third-party cookies to note on our Website include:
Google Analytics. We use Google Analytics to collect information on your use of our Website to improve our Website. In order to collect this information, Google Analytics may set cookies on your browser, or read cookies that are already there. Google Analytics may also receive information about you from applications you have downloaded that partner with Google. We do not combine the information collected through the use of Google Analytics with personally identifiable information. Google’s ability to use and share information collected by Google Analytics about your visits to our Website is restricted by the Google Analytics Terms of Use and Privacy Policy. To prevent your data from being used by Google Analytics, you can download the Google Analytics opt-out browser add-on.
In general, to disable cookies and limit the collection and use of information through them, you can set your browser to refuse cookies or indicate when a cookie is being sent. When you opt-out an opt-out cookie will be placed on your device. The opt-out cookie is browser and device specific and will only last until cookies are cleared from your browser or device.
Aggregate data. We aggregate the data we collect for benchmarking purposes and for internal analytics.
B. When you interact with Staircase, generally
We provide customer service online. When you contact our Customer Service representatives by emailing hello@staircase.co, we collect from you, your identifiers (name, company address, company phone number, and company email address) and any other information you choose to include in your correspondence. We use this personal information to respond to your questions or inquiries, troubleshoot where necessary, and address any issues you may have. We do not share this information with any third parties.
Communicate with you by telephone or videoconference. When you communicate with us by telephone or videoconference, with your consent, we will record the call or videoconference and collect your identifiers (name) and auditory information (recording of your voice). If you videoconference with us with your video enabled, we will also collect a recording of your physical appearance (the visual element of the videoconference). We will share this information with our automatic note-taking technology service provider to assist us in efficiently providing our services to you and supporting our relationship or potential relationship with you. This third-party note-taking technology uses artificial intelligence to transcribe our conversation, analyze intonations to identify potential sentiments during our conversation, and flag main points and action items. To opt out during the meeting, tell the person with whom you are speaking to turn off the note taking functionality. To opt out after the meeting, email us at admin@staircase.co.
Sign up for the Services. If you are a business and you sign up for the Services, to set up your business account with us, we collect your identifiers (business representative name, business email address, business telephone number, business billing and physical address), financial information (payment card number, expiration date, CVV, or bank account number and routing number). We will use your identifiers and financial information to set up your account, bill you for our Services, and to communicate with you about our Services. We will share this information with our bank or payment processors to process the fees we collect for providing the Services.
Hire employees. When you apply for employment with Staircase, we will collect your personal identifiers (name, email address, physical address, telephone number) and your professional or employment information (resume, cover letter, employment history, educational history). We use this personal information to assess and manage your application with Staircase, to communicate with you regarding your candidacy, and as necessary to comply with the law. For more information, including the retention period for this information, please email hello@staircase.co.
D. When we collect information from our Application and Vendor Partners
When you use our Services to integrate your systems with third party technology and vendors, we process the information that is transferred between vendors and/or applications. Users of these vendors and/or applications may also provide information about you when they use the Services (i.e., personal identifiers, including name, social security number, address, date of birth; commercial information, including property purchase history; and, financial information, including income, and mortgage information). This information is subject to the vendors and/or applications’ privacy policy. To be clear, although we provide the API to allow the connection between applications, we do not access or control the information flowing between applications.
2. PERSONAL INFORMATION WE COLLECT ABOUT YOU WITHOUT CONTACT WITH YOU AND HOW WE USE IT
A. When we collect information from our Application and Vendor Partners
Part of our business is connecting our customers, through our Platform, with third party technologies and vendors to allow seamless integration and data flow between our customers’ systems and the third-party technology and vendors. As such, we collect the information that is transferred between vendors and/or applications. This information is subject to the vendors and/or applications’ privacy policy. Although we provide the API to allow the connection between applications, we do not access or control the information flowing between applications.
Staircase may also use the personal information collected for the above purposes to comply with the law and for other limited circumstances as described in HOW WE SHARE YOUR PERSONAL INFORMATION.
3. DATA RETENTION
We may need to use and retain your personal information for longer than the periods indicated above for purposes of:
Compliance with our legal obligations. For example, retaining your records for the purpose of accounting, dispute resolution, and compliance with labor, tax, and financial regulations.
Meeting our safety and security commitments. Such as keeping our properties secure and preventing fraud.
Exercising or defending legal claims. We also may need to retain information for longer than the terms in order to meet with legal process or enforceable governmental request.
4. HOW WE SHARE YOUR PERSONAL INFORMATION
A. General Sharing. Staircase shares personal information in the following instances:
Within Staircase. We share your personal information within Staircase for the legitimate business purposes of efficiently and effectively providing the Services, such as accounting and customer service support. Access to your personal information is limited to those on a need-to-know basis.
With service providers. We share personal information with service providers that assist us in providing the Services. These service providers are described more specifically in the PERSONAL INFORMATION WE COLLECT THROUGH CONTACT WITH YOU AND HOW WE USE IT and PERSONAL INFORMATION WE COLLECT WITHOUT CONTACT WITH YOU AND HOW WE USE IT sections of this Privacy Notice. Generally, we share the information described above with our cloud data storage and infrastructure provider, helpdesk providers, payment processors, data validation provider, marketing providers, website hosting providers, email providers, and your identifiers with our customer relationship management provider.
In the event of a corporate reorganization. In the event that we enter into, or intend to enter into, a transaction that alters the structure of our business, such as a reorganization, merger, acquisition, sale, joint venture, assignment, consolidation, transfer, change of control, or other disposition of all or any portion of our business, assets or stock, we would share personal information with third parties, including the buyer or target (and their agents and advisors) for the purpose of facilitating and completing the transaction. We would also share personal information with third parties if we undergo bankruptcy or liquidation, in the course of such proceedings.
For legal purposes. We will share your personal information where we are legally required to do so, such as in response to court orders, law enforcement or legal process, including for national security purposes; to establish, protect, or exercise our legal rights, as required to enforce our terms of service or other contracts; to defend against legal claims or demands; to detect, investigate, prevent, or take action against illegal activities, fraud, or situations involving potential threats to the rights, property, or personal safety of any person; or to comply with the requirements of any applicable law.
With our Customer. We will share your personal information with our customer(s) to provide the Platform and our services. All personal information we collect about consumers under Section 2(A) may be shared or sold to our customers.
With your consent. Apart from the reasons identified above, we may request your permission to share your personal information for a specific purpose. We will notify you and request consent before you provide the personal information or before the personal information you have already provided is shared for such purpose. You may revoke your consent at any time.
Staircase may also share anonymized and aggregated data (“De-Identified Information”) in marketing materials. Staircase may also use De-Identified Information for commercial collaborations with private companies for purposes such market analysis.
B. Sharing in the Last Twelve (12) Months
For a business purpose. In the preceding twelve (12) months, Staircase has disclosed the following categories of personal information for a business purpose to the following categories of third parties:
We have disclosed your identifiers, employment information, and network and other internet activity information with service providers that assist us in providing the Services. These service providers assist us with the following: cloud data storage and infrastructure, helpdesk services, auditing, data validation, marketing, website hosting, email communication, and customer relationship management.
We have disclosed your identifiers and employment information to your employer to provide our services to our customer.
We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and to identify and repair the Services.
We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to update, improve, and maintain the Services.
We have disclosed your financial information with our payment processors to facilitate your purchase(s) through our Services.
We have disclosed your internet or other electronic network activity information with advertising providers to measure the effectiveness of our online promotional campaigns.
C. Sale/Sharing of Personal Information
In the preceding twelve (12) months, Staircase has sold/shared the following categories of personal information to the following categories of third parties:
Staircase has shared your identifiers, commercial information, employment information, and inferences to our customers for our customers to contact you about mortgage products and services.
Staircase has shared your internet or other electronic network activity information collected via cookies and other tracking technologies with our data analytics providers and ad networks to serve targeted advertisements regarding goods and services that may be of interest to you, based on information relating to your access to and use of our Services, as well as on information received from you both online and offline and from third parties.
Such disclosure may be deemed a sale under applicable US data privacy law or sharing under the CPRA. To opt out of this sale or sharing, please email us at optout@staircase.co.
5. GENERAL INFORMATION CHOICES
You have the following choices with respect to your personal information:
Correct or view your Account information. You may access your Staircase account profile to correct or view certain personal information of yours in our possession and which is associated with your Account.
Opt Out of Marketing Communications. You may opt out of receiving marketing emails from us by clicking the “unsubscribe” link provided with each email. Please note that we will continue to send you notifications necessary to the Services, your account, purchases, or any assistance you request.
Opt Out of Other Cookies. All session cookies are temporary and expire after you close your web browser. Persistent cookies can be removed by following your web browser’s directions. To find out how to see what cookies have been set on your computer or device, and how to reject and delete the cookies, please visit: https://www.aboutcookies.org/. Please note that each web browser is different. To find information relating to your browser, visit the browser developer’s Website and mobile application. If you reset your web browser to refuse all cookies or to indicate when a cookie is being sent, some features of our website may not function properly. If you choose to opt out, we will place an "opt-out cookie" on your device. The "opt-out cookie" is browser specific and device specific and only lasts until cookies are cleared from your browser or device. The opt-out cookie will not work for essential cookies. If the cookie is removed or deleted, if you upgrade your browser or if you visit us from a different computer, you will need to return and update your preferences. By clicking on the “Opt-Out” links below, you will be directed to the respective third-party website where your computer will be scanned to determine who maintains cookies on you. At that time, you can either choose to opt out of all targeted advertising or you can choose to opt out of targeted advertising by selecting individual companies who maintain a cookie on your machine.
Association of National Advertisers opt-out registration: https://dmachoice.thedma.org/
Network Advertising Initiative (NAI) Opt-Out: https://www.networkadvertising.org/managing/opt_out.asp
Digital Advertising Alliance (DAA) Opt-Out: https://optout.aboutads.info
6. RIGHTS OF CONSUMERS
A. Rights of California, Connecticut, Virginia, and Colorado Residents
The California Privacy Rights Act (“CPRA”), Virginia Consumer Data Protection Act (“CDPA”), Connecticut Data Privacy Act (“CTDPA”), and the Colorado Privacy Act (“CPA”) entitle residents of those states to certain rights. To the extent the CPRA, CDPA, CTDPA, or the CPA apply applies to our processing of your personal information, you are entitled to the following rights:
Right to Access/Know. You have the right to request what personal information we have collected, used, disclosed, and sold about you, unless an exception applies. You may only make a request for access twice within a 12-month period.
Right to Deletion. You have the right to request the deletion of your personal information that we collect or maintain, subject to certain exceptions. For example, if we are required by law to retain the information that you are asking be deleted, we would not be able to delete the information until we are legally permitted to delete it.
Right to Opt Out of Sale/Sharing. You have the right to opt out of the sale or sharing of your personal information to third parties. Staircase does not have actual knowledge that it sells or shares personal information of minors under the age of sixteen (16) years without their affirmative consent.
Right to Non-Discrimination. You have the right to not receive discriminatory treatment if and when you exercise your rights to access, delete, opt out, correct, or limit use of sensitive personal information.
Right to Correct. You have the right to correct inaccurate personal information that we collect or maintain.
Right to Limit Use of Sensitive Personal Information. If you are a resident of California, you have the right to limit the use of your sensitive personal information when such use goes beyond that which is necessary for providing the services or certain other permissible purposes like fraud, customer service or quality control. Sensitive information includes Social Security number, driver’s license number, biometric information, precise geolocation, and racial and ethnic origin.
For additional information regarding how to exercise your rights, please see EXERCISING YOUR RIGHTS below.
B. Additional Rights for Colorado, Connecticut, and Virginia Residents
The CPA, CDPA, and CTDPA entitles Colorado, Virginia, and Connecticut residents to the rights referenced in Section A, plus the additional rights described below. To the extent the CPA CPA, CDPA, or CTDPA applies to our processing of your personal information, you are entitled to the following additional rights:
Right to Data Portability. You have the right to ask that we transfer the personal information you gave us from one organization to another or give it to you. However, you make exercise this right no more than two times per calendar year. To exercise your right to data portability, you may submit a request by emailing us at optout@staircase.co.
Right to Opt Out of Profiling. You have the right to opt out of profiling of your personal information in furtherance of decisions that produce legal or similarly significant effect concerning a consumer by fully automated means. To exercise your right to opt out of profiling, you may submit a request by emailing us at optout@staircase.co.
Right to Opt Out of Targeted Advertising. You have the right to opt out of the processing of your personal information for targeted advertising purposes. To exercise your right to opt out of targeted advertising, you may submit a request by emailing us at optout@staircase.co.
Right to Appeal. You have the right to appeal an action taken (or not taken) by Staircase in response to your request. We will inform you of any action we have taken in response to your request without delay and, in any event, within forty-five (45) days after we receive your request. To exercise your right to appeal, you may submit your appeal by emailing us at optout@staircase.co. If you are concerned with our response as a result of your appeal, you may submit a complaint to the state Attorney General here.
For additional information regarding how to exercise your rights, please see EXERCISING YOUR RIGHTS below.
C. Exercising your rights
To exercise your rights, as applicable, you may submit a request by contacting us toll free at +1 (888) 302-6409. To opt out of the sale or sharing of your personal information via cookies, please email us at optout@staircase.co. or utilize the opt out preference signal to instruct us to not sell or share any of your personal information collected online. The opt out preference signal will apply to the device, platform, or browser in which you utilize it. You can utilize the opt out preference signal by turning on the signal in your device, platform, or browser settings.
For requests submitted via email, you must provide us with sufficient information that allows us to reasonably verify you are the person about whom we collected the personal information (specifically, your name, address, email address, and telephone number) and describe your request with sufficient detail to allow us to properly evaluate and respond to it. In doing so, we will take steps to verify your request by matching information provided by you with the information we have in our records. If we are not able to verify your identity for access and deletion requests with the information provided, we may ask you for additional pieces of information.
Only you, or a person that you authorize to act on your behalf may make a request related to your personal information. If you are an authorized agent making a request on behalf of another individual, you must provide us with signed documentation that you are authorized to act on behalf of that individual.
D. Nevada Residents
If you are a consumer in the State of Nevada, you may request to opt-out of the current or future sale of your personal information. You can submit a request to opt-out of future sales by contacting us at admin@staircase.co. Please include “Opt-Out Request Under Nevada Law” in the subject line of your message.
7. DO NOT TRACK
We do not recognize “Do Not Track” requests for internet browsers. Do Not Track is a preference you can set to inform websites and applications that you do not want to be tracked.
8. SECURITY OF YOUR PERSONAL INFORMATION
We implement and maintain reasonable security measures to protect the personal information we collect and maintain from unauthorized access, destruction, use, modification, or disclosure. These security measures include encryption and access controls. However, no security measure or modality of data transmission over the Internet is 100% secure and we are unable to guarantee the absolute security of the personal information we have collected from you.
9. AGE RESTRICTION
The Services are not intended for individuals under the age of eighteen (18) years old. If we learn that we have collected or received personal information from a child under the age of eighteen (18) years old, we will delete that information. If you believe we might have information from or about a child under the age of eighteen (18) years old, please contact us at admin@staircase.co.
10. CHANGES TO THIS PRIVACY NOTICE
We may amend this Privacy Notice in our sole discretion at any time. If we do, we will post the changes to this page, and will indicate the date the changes go into effect. We encourage you to review our Privacy Notice to stay informed. If we make changes that materially affect your privacy rights, we will notify you by prominent posting on the Website and/or via email, and request your consent, if required.
11. CONTACT US
If you have any questions regarding this Privacy Notice, please contact us at admin@staircase.co.