Back to Land Gorilla

Effective Date: 07/15/2026 Last Updated: 07/15/2026

LAND GORILLA, INC. (“us,” “our,” “we,” or “Land Gorilla”) appreciates interest in and use of our services. Our services are business-to-business based and we collect consumer related information related to such services. This Privacy Policy covers our collection, use and disclosure of information we collect through our website, www.LandGorilla.com, and associated sites, including onesiteapp.com (the “Site”), and in association with the use of our SAAS applications Land Gorilla, OneSite (including OneSite self-inspections), and Land Gorilla for Inspectors, whether web or mobile based (collectively, “Digital Property”). Users may be referred to herein as Business Affiliates or as You/Yours. If You access or use the Digital Property on behalf of a legal entity, references to You refer to both the individual user and such entity.

This policy may be updated at any time by replacement or updates, which may be without prior notification. Please refer to the Last Updated date from time to time for updates.

1. Scope and Our Roles

We use Non-PII and PII collected incident to the services we provide under contract with lenders, loan managers, and associated vendors (“Business Affiliates”). We also use information collected to coordinate with Business Affiliates to provide such services. We are provided PII by Business Affiliates and we disclose or share PII with Business Affiliates as provided in this privacy policy.

One policy for all Land Gorilla platforms. This Policy applies to all Land Gorilla Digital Property and user populations, including: visitors to the Site; Client Users of the Land Gorilla application; OneSite users such as borrowers, builders, contractors, and title providers, including users of OneSite self-inspections; and vendors, inspectors, and their personnel providing services through Land Gorilla for Inspectors (“Vendors”). Where a practice applies only to a particular platform or population, this Policy says so. Nothing in this Policy limits, amends, or replaces the confidentiality, data-protection, or other obligations of any Vendor under the Vendor Agreement, which remain in full force.

Our two roles. Under applicable state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”), the Colorado Privacy Act, the Connecticut Data Privacy Act, and similar laws in other states (including Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia), Land Gorilla acts in two distinct capacities:

• As a service provider or processor with respect to personal information we collect and process under the direction of our Lender/Client Subscribers (such as borrower and loan information, including borrower self-inspection records collected through OneSite at a lender’s direction). Our processing of that information is limited to providing the Services to our Clients. Individuals seeking to exercise privacy rights regarding that information should contact the lender or business with which they have a relationship; we support our Clients in responding as required by law and our agreements.
• As a business or controller with respect to personal information we collect for our own purposes, such as information about Site visitors, individual users of our Digital Property, vendor and service-provider personnel, job applicants and contractors, and marketing contacts. The rights and choices described in this Policy apply to information we process in this capacity.

We do not sell or share personal information as those terms are defined under applicable state privacy laws. Disclosures to service providers, processors, and contractors operating under written contracts to provide the Services on our behalf are not sales or shares. Any internal use of data for product improvement is restricted to aggregated, de-identified, or anonymized information that does not qualify as personal information.

Related terms. This Privacy Policy should be read in conjunction with all terms applicable to services, which may include terms imposed by Your employer’s Master Terms, terms agreed to through our End User Agreement (“EUA”) Terms, and, for Vendors, the Vendor Agreement. Consent to the EUA Terms, the Master Terms, or the Vendor Agreement will constitute agreement with these privacy policies.

2. The Information We Collect

We collect both PII and Non-PII information (defined below) through our Site. Business Affiliates should reference any agreements with us to confirm how information is procured and handled independent of use of our Site or our Digital Property.

Non-Personally Identifiable Information (“Non-PII”) means data that cannot be used on its own to trace or identify a person. Examples of non-PII include, but are not limited to: (1) aggregated statistics on the use of the Site and Digital Property, including the number of unique visitors to our site, the frequency of visits and authorization and access to Digital Property; (2) partially or fully masked Internet Protocol (IP) addresses, or public IP addresses; (3) browser type and basic device information; (4) referring or exit pages and URLs related to traffic, landing pages, and pages viewed. Non-PII is reviewed as an anonymized summary, not on an individualized basis, and the data is not combined with identifiers that could be easily linked to You. We gather this data to facilitate and improve the site and Digital Property function. Non-PII data helps us improve our products and business.

Personally Identifiable Information (“PII”) means: (1) personally identifiable information that would be considered “nonpublic personal information” under the Gramm-Leach-Bliley Act of 1999 (Public Law 106-102, 113 Stat. 1338), as may be amended from time to time (“GLBA”); (2) information concerning an individual that is protected from disclosure by other applicable federal or state laws and regulations; and (3) any nonpublic information that can be used, directly or indirectly, to identify an individual, such as a social security number, driver’s license number, date of birth, email address, and physical, mental, economic or cultural data. The term “Personally Identifiable Information” does not include publicly available information or lawfully obtained, truthful information that is a matter of public concern, consumer information that is deidentified, or aggregate consumer information. “Personal Information” as used in this Policy has the meaning given under applicable state privacy laws, which may include broader definitions than PII above. Where state laws provide additional rights or requirements, we comply accordingly.

We use the following methods, procedures and technologies to collect information:

• Log Information and IP Addresses: An IP address is the unique numeric identifier assigned to each computer browser accessing the Internet. We collect traffic data by tracking user IP addresses. An IP address, by itself, cannot identify You personally. Though when combined with other information provided by Your Internet service provider, Your IP address can be used to identify the computer originating a message, we do not use them as a source of probabilistic identifiers for any reason. When You use our site or Digital Property or view content provided by us on our Site, we automatically collect and store certain information in our server logs. We may track details of how and what Digital Property is accessed, date and time of access, IP address information described above, web pages that have been viewed, domain type, device event information such as crashes, system activity, hardware, settings, browser type, browser language, and referral URL.
• Cookies: We use cookies to, among other things, identify Your computer during a particular visit to our site and Digital Property to analyze behavior during a visit. Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. When you visit our websites, we may collect information from you automatically through cookies or similar technology. If You elect to decline or to regulate cookies, this may impact the use of our site and Digital Products. Cookies are classified as: strictly necessary, performance, function, and targeting. You can opt out of each category, other than those strictly necessary, by clicking on “Cookie Settings.” For information about Do Not Track signals, the Global Privacy Control, and other opt-out preference signals, see Section 7 below.
• Pixel Tags (Beacons): Pixel tags, also known as beacons or clear GIFs, are tiny graphics with a unique identifier, similar in function to cookies, and are used to track the online movements of web users. Pixel tags help manage our Digital Property by allowing us to determine effective content. Unlike cookies, which are stored on a user’s device, pixel tags are embedded invisibly on web pages.
• Log-in Data: When You use our site, we may create an online account for You through which You log in to access services. In order to log in, You are required to provide a username and password. Name and password data is mandatory both for processing and to verify identity, account, and to ensure secure transactions.
• Vendor and Inspector Data (Land Gorilla for Inspectors): When You provide vendor services through our Digital Property as a Business Affiliate (e.g., title company, inspector, appraiser or other vendor), we collect: account and registration data (name, business name, email address, physical and mailing addresses, phone numbers, role, and service coverage areas); business credentials and qualifications (business licenses or business tax registrations, professional licenses and certifications, trade qualifications, and references); a completed IRS Form W-9, which includes a taxpayer identification number (an Employer Identification Number or, for some Vendors, a Social Security number), legal name, entity classification, and payment mailing address (a completed and accurate W-9 is mandatory to process payments); insurance certificates and details, including automobile and, where applicable, workers’ compensation coverage; due-diligence information You provide or authorize us to obtain, which may include credit reports, reference checks, background checks, and operating-history information (see Section 13); order and assignment data, including orders offered, accepted, declined, negotiated, modified, or canceled, fee and rate information, scheduling information, assignment requirements, and status changes, including the date/time stamps recorded in the platform, which are used to administer orders, payment, and the cancellation policy under the Vendor Agreement; and communications with us through the platform, email, SMS/text message, or phone, including records of order offers and acceptances transmitted through those channels. If You provide Personal Information about Your employees, subcontractors, or other individuals (for example, to authorize their platform access or document their qualifications or insurance), You represent that You have the authority to provide it and have given any notices and obtained any consents required by applicable law.
• Mobile Applications, Device Permissions, and Inspection Capture Data: Certain Digital Property includes inspection capabilities designed to verify photo authenticity and prevent tampering, including the Land Gorilla for Inspectors mobile application and OneSite self-inspections. To use these capabilities, You will be prompted to grant device permissions, which may include camera, precise geolocation, photo access, and notifications. With Your permission, we collect the photos and other media You capture in the application, Your device’s precise location at the time of capture, and embedded and system metadata such as GPS coordinates, capture date and time, and device information. We use this information to verify that captured media is authentic and untampered and that the inspection or service was performed at the correct property, and we include it in the inspection record provided to the lender or Client associated with the loan or project. You can manage or revoke permissions at any time in Your device settings; declining or revoking permissions may prevent the inspection features from functioning.
• Work Product and Site Data: Inspection reports, forms, notes, photographs, and other media submitted through our Digital Property are used to provide services to our Clients and for quality-control review against assignment requirements. Vendor work product is governed by the Vendor Agreement, under which such work is assigned to Land Gorilla or subject to a royalty-free, irrevocable license, and Vendors may retain copies for their business records. Deliverables may incidentally include images of individuals or personal property present at a site; users should capture site documentation professionally, consistent with assignment requirements, safety directives, and applicable law.
• Information Related to Data Collected for our Lender/Client Subscriber: We provide business-to-business services that are accessible by consumers using associated services. For the purpose of our services the following definitions apply. Lender/Client Subscriber means the business or entity purchasing a Subscription through a Master Terms (“Master Terms”). Customer means the businesses or individuals purchasing products and services through Lender/Client Subscriber from Land Gorilla.
• Service Provider Collection and Use: Land Gorilla collects information under the direction of its Lender/Client Subscriber and has no direct relationship with the individuals whose personal data it processes or obtains through that service. This information is not collected through our site, but is used by us in providing services. When vetting service providers (e.g., based on financial risk using sources like LexisNexis and state record filings), we ensure compliance with third-party terms and limit use to B2B purposes only, without creating or furnishing consumer reports under FCRA. See Section 13 for more on consumer reports.
• 3rd Party Service Providers to Land Gorilla: We may disclose Non-PII and PII to third parties that help us provide our services to Lender/Client Subscribers and the associated business which service them. Disclosure to these third parties is covered by this policy regarding notice and choice and the service agreements with our Lender/Client Subscriber. Disclosure of PII and Non-PII is on a need to know basis only to allow users to obtain benefits of the business service from providers who contract with Land Gorilla to process a portion of a user’s required services.
• Job Applicants and Contractors: When applying for a position or a contract with us, we also collect Personal Information necessary for us to perform functions related to recruitment, hiring and contract management. The PII we collect may include that information already listed above as well as education history, qualifications, previous employers, citizenship status, membership of professional organizations and reference contact details. Depending on Your advancement in the recruitment process we may also collect PII from you in job interviews or telephone conversations and from your referees or from our own suppliers, including to verify your citizenship status, visa details, qualifications, references, criminal history and other PII You provide us. Where You are being engaged as a consultant or contractor to Land Gorilla, we may also collect additional Personal Information such as Your professional or business license or applicable country business number and professional and/or public liability insurance details. Where the consultant or contractor is an entity, we may also collect additional PII about its directors, managers, or contact persons which could include names, job titles, business and contract addresses and phone numbers. Additional workforce privacy information may be provided in a separate notice at the time of application or engagement.

3. Automated Technologies, AI, and Analytics

Automated Decision-Making Technology (ADMT) and Profiling. We may use automated decision-making technology, including algorithms or machine learning, to facilitate risk management functions such as risk scoring for construction projects (e.g., identifying budget variances or stalled progress) and photo authenticity and tamper-detection checks on inspection media. These tools substantially facilitate operational decisions but do not replace human decision-making in significant matters affecting consumers, such as creditworthiness, employment, housing, or healthcare. Under the CCPA/CPRA and similar laws, these B2B tools do not constitute consumer profiling that triggers opt-out rights, as they are not used for decisions producing legal or similarly significant effects on individuals. However, if ADMT is used in a qualifying manner, we provide pre-use notices, opt-out options, and access rights as required by law. We conduct data protection assessments for high-risk processing activities as required by applicable laws. All AI outputs require human review and are not final decisions. We do not train AI models on user-specific personal information; any model improvement relies only on aggregated, de-identified, or anonymized data.

Document Processing. Our use of technology, including machine learning or optical character recognition (OCR) such as AWS Textract for document digitization, is limited to automated document processing and does not involve training generative AI models with user data. This processing does not constitute a “sale” or “sharing” of personal information under applicable privacy laws.

AI Interaction Notice. Where we offer AI-driven features such as chatbots or virtual assistants, we will disclose that You are interacting with an AI system and not a human.

Platform Usage and Performance Analytics. We may generate analytics regarding use of the Digital Property (for example, task completion times and accuracy rates) for operational, quality, security, and product-improvement purposes. Such analytics are not used as the sole basis for decisions that produce legal or similarly significant effects concerning an individual. Analytics concerning our own personnel are governed by our internal workforce privacy notice.

Risk Scoring and X-Ray Construction Risk Analysis. Our “Risk Scoring” and “X-Ray Construction Risk Analysis” features are for B2B risk management only and do not constitute consumer reports under the Fair Credit Reporting Act (“FCRA”) or determinations of creditworthiness. These metrics shall not be used for consumer-related purposes. Our opinions or reports on builder qualifications or similar reports are strictly B2B assessments based on aggregated data from sources like LexisNexis and state record filings, and are not consumer reports under FCRA. Use of such outputs for any FCRA-regulated purpose is prohibited under our agreements, including the EUA and Master Terms, and we disclaim all liability for misuse.

4. How We Use Information

By submitting PII to Land Gorilla, You agree we may use the information in accordance with this policy, which includes, without limitation, the following:

• Operating our Site and subscription plans and for performing services. We use your PII to verify your identity, to check your qualifications, your affiliated Client/Customer and subscription plan, or to follow up with transactions initiated on the Site; and to maintain and secure our Site and Digital Property. We may also use your contact information to inform you of any changes to the Site, or to send you additional information about our Company and new services, and for general customer services (e.g., respond to questions, inquiries, comments and instructions). We use financial information to verify your qualifications for certain products or services and to process payments.
• Vendor onboarding and administration. We use Vendor information to onboard Vendor organizations and their personnel; verify identity, licensure, insurance, and qualifications; conduct the due-diligence review authorized under the Vendor Agreement; offer, assign, schedule, and administer orders, including negotiating and recording fees, tracking status changes, and applying the cancellation policy; process payments and maintain accurate payment records; and satisfy tax and information-reporting obligations (for example, IRS Form 1099 reporting).
• Inspection integrity. We use inspection capture data, including precise geolocation and embedded metadata, to verify that captured media is authentic and untampered and that inspections and services were performed at the correct property, and to deliver verified inspection records and work product to Clients, including quality-control review against assignment requirements.
• Safety and compliance. We use information to monitor, investigate, and enforce compliance with the Vendor Agreement, the EUA Terms, the Master Terms, assignment requirements, and applicable law, including safety requirements; and to detect, prevent, and respond to fraud, security incidents, and other malicious, deceptive, or illegal activity.
• Traffic data. We use traffic data to analyze our Site traffic, but we do not examine this information for individually identifying information. In addition, we may use IP addresses to help diagnose problems with our server, or to administer the Site and the services.
• Use of cookies. We may use cookies and other tracking technologies to deliver specific content, to save your password so you don’t have to re-enter it each time you visit our Site, or for other purposes. You can set your browser not to accept cookies. However, in a few cases, some of our website features may not function as a result.

We collect and process only the personal information necessary for providing Services and comply with data minimization principles under applicable laws.

5. How We Disclose Information

We may disclose personal information that you provide via the Site or Digital Property to the following third parties and for the following purposes:

• To third party organizations, such as builders, financial institutions, lenders, borrowers, contractors, vendors, service providers, and inspectors for the purpose of providing You the Digital Property, services contracted for with us or our third-party partners and associated vendors, and to meet legal, regulatory or contractual requirements relating to the Digital Property used;
• To the Client for whom an assignment or self-inspection is performed: Vendor identity, licensure, qualification, scheduling, and status information, and inspection records including photographs, work product, and verification metadata, to fulfill the contracted services and support the related loan or project. Vendors provide services directly to Land Gorilla; disclosure to Clients does not create a contractual relationship between any Vendor and any Client;
• To service providers that perform services on our behalf under written contracts with confidentiality and data-protection obligations, such as cloud hosting and storage, communications delivery (email, SMS, telephony, and push notifications), payment and check processing and mailing, identity verification, consumer reporting agencies and screening providers You have authorized, document processing, analytics, and customer support. These providers may use personal information only to perform services for us;
• To our affiliates, subsidiaries, and partners, in accordance with applicable federal or state law;
• If you agree, for limited marketing, training, or information purposes, such as to provide You with information or updates about our Digital Property or associated services that may be of interest to You. You may choose not to allow us to use or disclose Your PII for marketing and promotional purposes by contacting us at [email protected] or by clicking the “unsubscribe” button in any such email;
• To enforce or apply any agreement You or Your contracting entity has with Land Gorilla, including but not limited to the Master Terms, the EUA Terms, and the Vendor Agreement;
• As required by law, such as to comply with a subpoena, or similar legal process;
• To protect the rights, property, or safety of our business, our clients, customers, employees, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection, information security or infringement, and other related matters;
• In the event of a merger, acquisition, or any form of sale of some or all of our assets, in which case personal information we collect will be among the assets transferred to the buyer.

As stated in Section 1, we do not sell or share personal information as defined under applicable state privacy laws, and disclosures to service providers and processors under written contract are not sales or shares.

6. Consent, Communications, and Text Messaging

Consent. By submitting PII to Land Gorilla, You give us permission to receive it, review it, edit it, store it and use it as set forth herein. We will retain Your PII as described in Section 9, and Your consent will continue even after termination of Your use of Digital Property or the site for the purpose set forth herein.

Email and Service Communications. You are also consenting to general contact through the email address you provided upon registration. With regard to services, You may receive certain notices or contacts that are integrated into the Digital Property You use, which means You cannot unsubscribe to or necessarily block further notices. You can, however, discontinue use by discontinuing use of the applicable Digital Property used. Please contact us if You desire to stop any contact at: [email protected]. You can opt out of certain promotional or marketing e-mails from us by clicking on the “unsubscribe” link located within any message You receive from us or You may contact us at [email protected].

Text Messaging (SMS/MMS). Text messaging is optional, and email is the default channel for account and service notices. You will receive text messages from Land Gorilla only if you opt in to SMS in your account or notification settings or otherwise provide your express consent. By opting in, you consent to receive text messages related to your account and the Services, which may include order offers and assignment updates; inspection, scheduling, and status notices; and security alerts such as one-time passcodes. Message frequency varies based on your account activity. Message and data rates may apply. Consent to receive text messages is not a condition of any purchase. You may opt out at any time by replying STOP to any message (reply HELP for help), by updating your notification settings, or by contacting us at [email protected]; opting out may limit or delay time-sensitive communications such as order offers and security notices. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, excluding service providers acting on our behalf solely to deliver messages.

Program-specific SMS terms, such as the terms governing our two-factor authentication messaging program, are set forth in our End User Agreement.

Push Notifications. With Your consent through Your device settings, our mobile applications may send push notifications about orders, inspections, and account activity. You can disable push notifications at any time in Your device settings; doing so may delay time-sensitive notices such as order offers or inspection reminders.

Telephone. Where permitted by law and disclosed to You at the time, calls with our teams may be monitored or recorded for quality, training, and recordkeeping purposes.

7. Tracking Choices, Do Not Track, and Opt-Out Preference Signals

California law requires us to disclose how our site responds to Web browser “Do Not Track” (“DNT”) signals or other mechanisms that provide users with the ability to exercise choice regarding the collection of PII about such user’s online activities over time and across third-party Web sites or other online services, and whether other parties may collect PII about Your online activities over time and across different websites when You use our Website or services. Currently, we do not respond to browser “Do Not Track” signals. Most web browsers have Do Not Track options and you should review options available for Your browser of choice.

Global Privacy Control and Universal Opt-Out Mechanisms. Separate from DNT, we honor Global Privacy Control (“GPC”) signals and other legally recognized universal opt-out mechanisms (“UOOMs”) as required by applicable laws, including those in California, Colorado, Connecticut, Delaware, and other states. When we detect a GPC signal, we treat it as a valid request to opt out of the sale or sharing of personal information or to limit the use of sensitive personal information, as applicable. Because we do not sell or share personal information as defined under these laws, such signals do not change our current practices, but we will honor them if our practices ever change, and You may also manage non-essential cookies through “Cookie Settings” as described in Section 2.

8. Data Security

We operate secure data networks and maintain administrative, technical, and physical safeguards designed to protect personal information. These measures include data encryption (in transit and at rest), network security firewalls, intrusion detection and prevention systems, and Virtual Private Networks (VPNs). Additionally we use secure data centers, provide ongoing and recurring employee training, perform security audits, employ 3rd party penetration testing firms, conduct business continuity and disaster recovery testing, perform vendor security assessments, and use Data Loss Prevention (DLP) tools. We restrict access to PII to our employees and contracted third party providers who need to know that information in order to process it for us and who are subject to contractual confidentiality and privacy obligations.

You are responsible for maintaining the confidentiality of Your credentials and for all activities that occur under Your account, and You agree to notify us immediately of any unauthorized use. Information submitted via the internet or via email is never entirely secure, and no method of transmission or storage can be guaranteed to be absolutely secure. We notify users of any data breach as required by law.

9. Data Retention

We maintain records of Personal Information for as long as is necessary to fulfill the purpose(s) for which it was collected and to comply with applicable laws. The criteria we use to determine retention periods include: the duration of the relationship and any active services or orders; payment, tax, and information-reporting requirements (for example, W-9 and Form 1099 records); records needed to administer order, cancellation, and payment terms and to resolve billing or payment questions; insurance, licensing, and due-diligence documentation requirements; legal, regulatory, audit, and insurance requirements; legal holds, disputes, and the dispute-resolution and arbitration procedures in our agreements; and information-security needs. We will destroy or de-identify PII if we no longer need it for any authorized purpose and are not required by law to retain it.

10. Access to and Ability to Correct or Delete Information

Upon request via postal mail, e-mail, or telephone, we will provide You a summary of Your PII retained by us. As allowed by law and consistent with our applicable partner agreements, You may modify, correct, change, or request deletion of or updates to any PII Land Gorilla collects from You through the site. You can do this by contacting us here: [email protected]. State-specific rights and request procedures are described in Sections 11 and 12.

11. California Privacy Rights

This section supplements this Policy for California residents and, together with Section 2, serves as our Notice at Collection under the CCPA/CPRA.

Categories of Personal Information. The table below lists the categories of Personal Information (as defined by the CCPA) we have collected in the preceding twelve (12) months in our capacity as a business, and the categories of recipients to whom each has been disclosed for a business purpose (service providers and contractors; Business Affiliates and Clients as needed to provide the Services; professional advisors; and authorities as required by law):

We collect these categories from the sources described in Section 2, use them for the purposes described in Sections 3 through 6, and retain them per the criteria in Section 9.

Sensitive Personal Information. We collect and use Sensitive Personal Information only for purposes reasonably necessary to provide the Services and as otherwise permitted by Cal. Civ. Code § 1798.121(a) and its regulations, such as verifying identity and qualifications, processing payments and tax reporting, verifying that inspections and services were performed at the correct property and that captured media is authentic, maintaining security, and complying with law. We do not use or disclose Sensitive Personal Information for the purpose of inferring characteristics about individuals.

No Sale or Sharing. We do not sell personal information, we do not share personal information for cross-context behavioral advertising, and we have no actual knowledge of selling or sharing the personal information of consumers under 16 years of age. We do not offer financial incentives in exchange for personal information.

Your CCPA Rights. California residents have the right to: (1) know and access the personal information we collect, use, and disclose; (2) correct inaccurate personal information; (3) delete personal information, subject to legal exceptions; (4) receive personal information in a portable format; (5) opt out of sale or sharing (not applicable, as we do not sell or share); (6) limit the use and disclosure of Sensitive Personal Information (we use it only for permitted purposes as described above); and (7) not receive discriminatory treatment for exercising these rights. Rights relating to automated decision-making are addressed in Section 3.

Exercising Your Rights. Submit requests to [email protected] or by postal mail at the address in Section 19, with the subject line “Privacy Rights Request.” Please state your name, your relationship to Land Gorilla, your state of residence, and the right you wish to exercise. We will confirm receipt within 10 business days and respond within 45 calendar days, with a permitted extension of an additional 45 days where reasonably necessary with notice to you. We will verify your identity using information associated with your account or prior interactions, such as by matching identifying details you provide or requiring confirmation through your registered email address, and may request additional information where necessary. An authorized agent may submit a request on your behalf with proof of written authorization; we may still require you to verify your identity directly. If we cannot verify a request, we will handle it as permitted by the CCPA regulations. We do not charge a fee to process a request unless permitted by law.

Marketing Disclosures and “Shine the Light” (Cal. Civ. Code § 1798.83). Under California law, California residents may opt out of Land Gorilla disclosing PII to third parties for marketing purposes. We do not use Your PII for third-party marketing purposes, nor do we sell information. However, the company through which You access our services may do so, and You are encouraged to check the privacy policies of Your lender or other sites accessed through our system. Pursuant to Section 1798.83, residents of California have the right to request certain information with respect to the types of PII the business shares with third parties for direct marketing purposes and the identities of those third parties. To request a copy of such information, or if You do not want us to disclose Your PII to other companies for their marketing purposes, please contact us at [email protected]. If you are a resident user of any other state or country, you can also request an opt out by contacting us.

12. Other U.S. State Privacy Rights

If you reside in Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, or another state with a comprehensive privacy law, you may have the right, subject to the scope and exemptions of your state’s law, to: confirm whether we process your personal information and access it; correct inaccuracies; delete personal information; obtain a portable copy; and opt out of targeted advertising, sales, or profiling in furtherance of decisions that produce legal or similarly significant effects. We do not sell personal information, do not process personal information for targeted advertising, and do not engage in such profiling, so there is nothing to opt out of; if our practices change, we will update this Policy and provide required mechanisms first.

Please note that most of these laws apply to individuals acting in an individual or household context and exempt information about individuals acting in a commercial or employment context, and most exempt data and entities regulated under the GLBA and data regulated under the FCRA. Where an exemption applies, that data is protected under those federal frameworks and our contractual obligations rather than state privacy law.

Exercising Your Rights and Appeals. Submit requests as described in Section 11. We will respond within the time required by your state’s law (generally 45 days, with a permitted extension). If we decline to take action on your request, you may appeal by replying to our decision (or writing to the contact in Section 19) with the subject line “Privacy Appeal.” We will respond to appeals within the time required by applicable law. If your appeal is denied, you may contact your state Attorney General or other authority designated under your state’s law.

13. Consumer Reports and the FCRA

As described in Section 3, our analytics, risk-scoring, and vetting outputs are B2B assessments and are not consumer reports, and we do not act as a consumer reporting agency.

Separately, as described in the Vendor Agreement, Vendors consent to a due-diligence review of their operating history, which may include ordering credit reports, checking references, and background checks. Where any such review, or any employment-related screening, involves a “consumer report” or “investigative consumer report” under the FCRA or analogous state laws, we provide the separate, stand-alone disclosures and obtain the authorizations those laws require before the report is procured, and we follow required adverse-action procedures where applicable. Consumer reports are obtained from consumer reporting agencies, which maintain their own obligations under the FCRA, including dispute rights. Information from such reports is used solely for permissible purposes related to establishing and maintaining the relationship, is held confidentially, and is disclosed only as described in Section 5 or as required by law.

14. Children Under 16

Our site and Digital Property are not intended for use by persons under 16, and account registration and use of our Digital Property are limited to individuals who are at least 18 years of age. We do not knowingly collect any information from children under 16. If You become aware that a child is accessing or using the Land Gorilla site for any reason, please contact us at [email protected] and we will remove information identified as provided by any child under 16 from our systems or take other steps as required by law.

15. Third Party Sites and Social Media

Our site and Digital Property may contain links to other websites, including websites operated by Business Affiliates or non-affiliated or independent third parties. Please be aware that those sites may collect PII from or about You and Non-PII about Your visit. We do not endorse nor control collection of information by third parties accessed through links. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy. We disclaim all responsibility for the privacy policies, information collection practices, content, accuracy of the information, and/or quality of products or services provided by or advertised on these third-party websites. Please refer directly to linked website privacy policies prior to use.

Any information, communications, or material of any type or nature submitted to us on or linked from a social media platform or website such as LinkedIn®, Facebook®, Instagram® or X®, by email, posting, messaging, uploading, or downloading is at Your own risk. If You visit our site through a social media link, You are solely responsible for understanding the privacy policies of such platforms.

16. Non-U.S. Residents and International Users

Our site and Digital Property are located in the United States, and information we collect is stored and processed in the United States. If You are a Non-U.S. Resident, applicable law of Your residence may differ. However, we will normally collect Personal Information from You only where we have Your consent to do so, where we need the Personal Information to perform a contract with You or Your lender, or where the processing is in our legitimate interests and not overridden by Your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect Personal Information from You or may otherwise need the Personal Information to protect Your vital interests or those of another person.

If You are asked to provide personal information to us to comply with a legal requirement or to access our services, such as through our registration process, entering such information shall be deemed notice that entry is mandatory for use and that use will not be allowed without providing such information (You may contact Your lender if You would otherwise like to obtain information related to Your loan). If we collect and use Your personal information, we do so as a service to You to allow You to better process and track lender requirements related to a loan, whether to You as a user or You as a service provider in association with processing or supporting such loan.

Data Protection Rights for EEA, UK, and Similar Jurisdictions. If You are located in the European Economic Area, the United Kingdom, or another jurisdiction that provides these rights by law, You are entitled to: the right to access copies of your personal data (we may charge a small fee where the law allows); the right to rectification of inaccurate or incomplete information; the right to erasure, under certain conditions; the right to restrict processing, under certain conditions; the right to object to processing, under certain conditions; and the right to data portability, under certain conditions. If you make a request, we will respond within the time required by applicable law (one month where the GDPR applies). U.S. residents’ rights are described in Sections 11 and 12.

Additional Notice for EEA Residents: If You reside in the EEA and would like to exercise any data subject right available to You under the EU General Data Protection Regulation (GDPR), please contact [email protected], and we will advise you of the relevant representative responsible for controlling Your personal information.

17. Changes to This Policy

We may update or replace this Policy from time to time. The Last Updated date above shows when this Policy was most recently revised. Nothing in this Policy limits any rights You may have under applicable law, and where applicable law provides greater protections than those described in this Policy, we will comply with applicable law. Prior versions are available in our Privacy Policy Archive.

18. Acceptance of This Policy

By clicking or checking “I Agree” (or a similar mechanism), creating an account, accepting an order, or otherwise accessing or using the Site or Digital Property, You (for Yourself and, where applicable, on behalf of Your organization) acknowledge that You have read and understand this Policy and consent to the collection, use, and disclosure of information as described in it. This Policy should be read together with the EUA Terms, applicable Master Terms, and, for Vendors, the Vendor Agreement. If this Policy conflicts with the EUA Terms, the Vendor Agreement, or the Master Terms with respect to contractual obligations between the parties, those agreements control; with respect to Land Gorilla’s privacy practices, this Policy controls. Organizations shall ensure that their personnel who access the Digital Property are made aware of, and comply with, this Policy.

19. Privacy Contact Information

[email protected] or via postal mail at:

Land Gorilla, Inc. 1241 Johnson Ave. #154 San Luis Obispo, CA 93401

We encourage you to contact us with any concerns about use of PII at the earliest if you have questions or concerns.

This document was last updated on 7/15/2026

Previous Policies