JunctoraLast updated: October 28, 2026
1. Scope and the Junctora service
Junctora provides a public marketing website at www.junctora.com and a separately hosted mortgage customer relationship management application at app.junctora.com (together, the “Services”). This Privacy Policy describes how Junctora handles information through the website, the CRM, user accounts, communications and optional integrations, including connections to Google Gmail and Google Workspace.
Individuals and mortgage organizations using the CRM decide what borrower, client, referral-partner, loan-workflow and other business records to enter into their workspaces. Junctora processes those customer-controlled records to operate the CRM on their behalf, subject to applicable law and any applicable customer agreement. The organization controlling a record remains responsible for its collection, permitted use, disclosures and any notices or permissions required by law. This policy does not substitute for a customer's own privacy notice to borrowers or consumers.
2. Information submitted through the public website
If you request access or plan information, the form asks for your full name, email address, professional category (such as independent originator or mortgage team), optional preferred plan, and an optional message. Please do not enter Social Security numbers, loan files, financial-account information, borrower details, or other sensitive personal information in this form.
Hosting and mail infrastructure may also process technical information required to operate the website, such as IP addresses, browser requests, timestamps and error records. The form uses a session-based rate limit to discourage repeated submissions; submitting the form can set a session cookie in your browser.
3. CRM accounts, organizations and customer-controlled records
When you use the CRM, we may process account and business contact details, sign-in and verification information, organization memberships and permissions, subscription and administrative information, and operational/security records. Depending on what customers add, their workspaces may contain borrowers' and contacts' names, email addresses, telephone numbers, referral relationships, loan and lead status information, notes, tasks, campaign settings, communication activity, or other information supplied by the customer. Some customer-controlled content may be sensitive personal or financial information.
We use this information to authenticate users; provide organization-isolated CRM workspaces; support contact, loan, task and campaign functionality; deliver requested communications; assist with support; maintain the Services; prevent abuse; and meet applicable legal obligations. A customer's authorized administrators or members may be able to access information according to their organization's permissions. Junctora does not make lending or underwriting decisions on behalf of its customers.
3.1 Subscription billing through Stripe
Junctora offers subscription billing for approved CRM accounts through a separate secure Stripe checkout and customer billing portal. As of this update, public self-service registration is not yet open. Our public access-request form does not collect payment details, create a CRM account, initiate a trial or authorize a charge.
Stripe provides the hosted checkout and subscription billing tools used for eligible accounts. Stripe may collect payment-card details, billing address, and payment-method information directly. Junctora receives the information needed to provision and administer a subscription, which may include billing email and contact details, Stripe customer and subscription identifiers, selected plan, invoice and payment status, billing-cycle and trial dates, and limited transaction records. We do not ask for payment-card details through the public website inquiry form. Stripe processes payment information under its own terms and privacy policies.
4. Optional Google account and Gmail integration
Connecting Gmail is optional. You can use other available Junctora CRM functions without connecting a Google account. When you choose to connect Gmail or Google Workspace, Google presents an OAuth authorization screen showing the permissions requested. Junctora's Gmail-sending integration currently requests openid, email and https://www.googleapis.com/auth/gmail.send.
What we access and store. To associate the correct Google account with your Junctora user profile, we obtain identifying information provided through the authorized Google sign-in flow, including the connected email address and available account information. We process the permissions granted and OAuth credentials; the application stores connection details and an encrypted refresh token so it can request short-lived access tokens when needed. To send email on your instruction, Junctora processes the intended recipients, subject, message body and any content you choose to send, together with related sending and activity information. CRM communication records may be retained separately from the Google authorization credentials.
How the Gmail permission is used. The gmail.send scope allows Junctora to transmit email from the connected user's Gmail account when that user initiates an email, or has specifically configured and enabled a supported automated email campaign. Such sends remain subject to available controls, recipient opt-outs and Google sending limits. Junctora does not request permission to read or synchronize your Gmail inbox, list your existing messages, modify existing mailbox messages, view Google Contacts or delete Gmail messages. It is not an inbox-monitoring or mailbox-sync service.
Google API Limited Use. Junctora's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy and the Google Workspace User Data and Developer Policy, including their Limited Use requirements. We use Google API information only to provide or improve the user-facing features for which a user granted access. We do not sell this information, share it with data brokers or advertising networks, use it for targeted advertising, or use it to train general-purpose artificial intelligence models. In particular, information received through Google APIs is not used to determine creditworthiness, evaluate loan eligibility, underwrite loans, or make lending decisions. Information entered independently into the CRM by a customer is distinct from information received through Google APIs.
Access and disclosures. Information is exchanged with Google to authenticate the connected account and send authorized messages. Infrastructure and service providers may process only information needed to support the authorized integration under appropriate controls. Human access to information received through Google APIs is restricted to the circumstances permitted by Google's Limited Use requirements, such as the user's documented consent to specific access, necessary security or abuse investigation, applicable law, or qualifying internal aggregate operations. We do not otherwise transfer Google API data for unrelated purposes.
Disconnecting. You may disconnect Gmail in your personal Junctora integration settings. This removes the stored connection in Junctora and attempts to revoke the authorization with Google. You can also revoke Junctora's access in your Google Account security settings. Disconnecting prevents future sends using that connection, but cannot recall messages already delivered, automatically erase separately retained CRM activity records or immediately remove copies in routine backups. If access is revoked directly with Google, Junctora's local connection status may not update until a later check.
5. Junctora system email and user-directed communications
Junctora uses its own email service for account verification, password resets, invitations and other system notices, including messages from notifications@junctora.com. These messages do not require a user to connect Gmail. When a user sends an email or activates an authorized campaign through a connected Gmail account, that communication is sent using the user's selected provider and remains subject to the provider's rules, recipient preferences and applicable law.
6. How information is used and disclosed
- To receive, review and reply to inquiries or launch-information requests, and provide the information you request about Junctora.
- To provision and administer CRM accounts and organizations, provide customer-requested features, and maintain business or operational records.
- To deliver authorized communications, process email preferences and protect against inappropriate or unauthorized sending.
- To operate, secure, diagnose and improve the Services and respond to legitimate support or security requests.
- To comply with applicable legal obligations or lawful requests, or address suspected fraud or abuse.
Submitting the access-request form does not itself enroll you in an ongoing marketing campaign, create a CRM account or create a paid subscription. In the current website implementation, form submissions are emailed to info@junctora.com; the public form handler does not write a separate website inquiry database. We may use hosting, email-delivery and infrastructure providers to operate the Services. We do not sell Google API data; any disclosures of that data are additionally limited by Section 4.
7. Cookies, logging and analytics
The current public landing-page source does not include third-party advertising pixels or analytics scripts. A session cookie may be set when you submit its launch-information form to limit repeated submissions. The CRM uses authentication/session mechanisms and may generate activity, access and security logs needed to provide and protect accounts. Hosting providers may process access and server logs. We will update this policy if materially different analytics or tracking technologies are introduced, and provide choices when required by law.
8. Data retention and security
Website access-request messages may remain in the receiving mailbox for correspondence, legitimate business records, abuse prevention and applicable legal obligations. CRM account and customer-controlled records may be retained while the relevant workspace is active and afterward as required for legitimate operational, backup, security, legal or contractual purposes. Retention periods depend on the type of information, available customer controls, backup cycles, and any applicable agreements or laws; no fixed universal retention period is represented here.
Google connection credentials are retained only while needed for an active connection, except where they may temporarily remain in routine backups or required security/legal records after disconnection. The Gmail refresh token is stored encrypted by the application. We take reasonable measures to restrict access and protect information in transit and at rest, but no service can guarantee absolute security. Customers are also responsible for safeguarding their users' accounts and appropriately managing access to their workspaces.
9. Your choices, access and privacy requests
You can choose not to connect Gmail and can disconnect it later using your personal integration settings or your Google Account security controls. You may ask about your information or request correction or deletion by contacting info@junctora.com. We will evaluate requests under applicable law and any necessary retention obligations. For information entered into a CRM workspace by a subscribing customer, we may need to direct you to the organization that controls the record or coordinate a request with that organization. Additional privacy rights may apply in certain jurisdictions.
10. Children's privacy and third-party services
The Junctora website and CRM are intended for adult professionals, not children. The Services may link to independent third-party sites and integrations, including Google services that have their own privacy practices and terms. Our use of data obtained from Google APIs remains subject to the restrictions described in Section 4.
11. Changes and contact
We may update this Privacy Policy as our Services, integrations or legal requirements change. Material changes will be communicated as required by law or applicable agreements. The current version and its date will appear on this page. For questions or privacy requests, contact info@junctora.com.