Privacy Policy

RateMyLoan ("we", "us") runs a website and mobile app where home loan borrowers post a loan request and mortgage brokers bid for it. This policy explains how we handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Information we collect

• Account details: your name, email address, phone number if you provide it, your role (borrower or broker) and how you sign in, such as by email and password or with Google or Apple.
• Loan request details: the loan purpose, loan amount, property value, postcode and state, rate and repayment preferences, employment type, annual income, credit profile and any notes you write.
• Documents you upload: for example payslips, bank statements and identification.
• Broker details: company name, credit licence number, bio, website and the quotes you submit.
• Technical information: the platform you signed up on (web, iOS or Android) and records our systems keep when you use the service, such as server logs.

How we use it

We use your information to:

• create and secure your account
• run loan auctions and show quotes to borrowers
• check broker details and investigate misuse
• contact you about your account or a loan request
• operate, fix and improve the service, and meet our legal obligations

What brokers and borrowers can see

• Brokers using the marketplace can see the details of published loan requests, including income, credit profile and your notes. They do not see your name, email address or phone number, so please leave identifying details out of your notes.
• The broker whose quote you accept can read the documents you attach to that request. We may also give that broker your contact details so they can progress your loan. Once they hold your information, the broker's own privacy policy applies too.
• Borrowers can see the name, company and quote details of brokers who bid on their request.

Service providers and overseas storage

We use service providers to run RateMyLoan, including Google Firebase (sign-in), Neon (database), Cloudflare R2 (document storage) and our hosting providers. They may store or process information outside Australia, including in the United States. If you sign in with Google or Apple, that provider also handles your sign-in.

We do not sell your personal information. We may disclose it where the law requires us to, or to protect people or the service from harm or fraud.

Cookies and browser storage

We use browser storage to keep you signed in. We do not currently use advertising or third-party analytics trackers.

Security and retention

We take reasonable steps to protect your information, including restricting who can read documents. No online service is completely secure. If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by law.

We keep your information while your account is active and for as long as we need it for the purposes above or to meet legal obligations. To close your account and ask us to delete your information, email us.

Access, correction and complaints

You can ask to access or correct your personal information, or complain about how we have handled it, by emailing info@ratemyloan.com.au. We aim to respond within 30 days. If you are not satisfied with our response, you can complain to the OAIC at oaic.gov.au.

Changes to this policy

We may update this policy and will post the new version on this page. See also our Terms and Conditions.

Contact us

Email info@ratemyloan.com.au.