Loan MonsterTECHNOLOGIESSign in

BRIDGEWOOD CONSULTING LLC · LOAN MONSTER TECHNOLOGIES

Privacy Policy

Effective October 27, 2026. Loan Monster Technologies (LMT) is software operated by Bridgewood Consulting LLC. This policy covers the LMT website and application, including optional Google and Microsoft connectors.

Who handles your information

Bridgewood Consulting LLC operates LMT. For privacy questions or requests, contact [email protected] or write to Bridgewood Consulting LLC, 2384 Orange Street, Bellmore, NY 11710, United States.

LMT is a business workspace. When an employer or customer organization supplies CRM records, that organization determines the business purpose and authorized users. Please also contact that organization about its records, retention requirements and instructions. This policy describes our handling of information; it does not replace your organization's notices or agreements.

Information LMT processes

  • Account and workspace information: identity, business contact details, organization membership, roles, preferences and authentication/session information.
  • Information supplied through the product: authorized CRM contacts, communications, tasks, appointments, files, borrower-associated documents and instructions you or your organization provide.
  • Website inquiries: your name, business email, team and current-system details, and inquiry message. Do not put borrower information, account credentials or loan documents in public inquiries.
  • Technical and operational information: request and security logs, timestamps, service errors, device/browser information, and audit records of supported actions. Hosting and delivery providers also receive connection information such as IP addresses.

We use this information to provide the requested workspace, authenticate users, enforce permissions, deliver support, troubleshoot failures, protect accounts, keep action history and meet applicable obligations.

Optional Google and Microsoft connections

You choose whether to connect an account and which supported capabilities to authorize. Google and Microsoft show their own permission screens. LMT receives account identity, granted permissions and OAuth tokens; the connector does not ask for your mailbox password. Offline permission allows background synchronization while you are away.

  • Email: permitted access includes mailbox identifiers and message metadata such as sender, recipients, dates and thread/message IDs. For client-email ingestion, LMT first matches participants against CRM contacts you are authorized to access, then retrieves the subject and a bounded message preview for an authorized match. The current ingestion feature does not import attachments or a complete mailbox archive. This Gmail connector is for read-only email ingestion. Microsoft permissions may also include sending access for separately authorized email features; this sync feature does not itself send messages.
  • Calendar: LMT discovers available calendars and reads the event information needed for selected calendar display, synchronization and availability checks, including identifiers, titles, start/end times, status and supported event details. You select synchronization destinations and which other calendars block busy time. Conflict-only calendars are used for availability checking. Authorized creation, edits and cancellations are sent back to the selected provider calendar.
  • Tasks: LMT discovers task lists and synchronizes selected lists and supported fields, such as titles, notes, due dates and completion state. Authorized task creation, edits and completion changes can be written back to the selected provider list.

We retain connection settings, encrypted tokens, synchronization identifiers/checkpoints, selected record copies and action/audit records needed for those features. Supported fields and provider behavior can differ. Automatic CRM export is limited to supported task and appointment fields; it does not automatically send your CRM notes, borrower files or guest invitations.

Google API data and Limited Use

LMT's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Google account data is used to provide the user-facing email, calendar, task and scheduling features you authorize. We do not sell Google user data, use it for advertising, or use it to train generalized AI or machine-learning models. Google user data is not used to determine creditworthiness, lending eligibility, mortgage underwriting or other lending decisions.

AI scheduling may use the requested appointment details, availability results and your booking preferences to assist with a booking. It does not authorize broader use of mailbox information. Transfers of Google data are limited to providing or improving the appropriate user-facing features, your specific instructions, security purposes, applicable legal requirements, or other circumstances permitted by Google's policy. Human access is restricted to the circumstances permitted by that policy, such as your affirmative agreement to inspect specific information for support, security investigation, legal obligations, or permitted aggregated internal operations.

Providers and disclosures

We use service providers to operate the product, including hosting/network delivery, database/authentication and storage, email delivery, connected-account APIs and configured AI services. They process the information needed for their service. Google and Microsoft receive changes you authorize to their services. Public website inquiry messages are delivered to our business operator through our email delivery provider.

CRM information is available to users according to workspace permissions and authorized sharing. A connected account is associated with its user and organization; connecting it is not a grant to every other customer. We may disclose information when required by law, to address fraud or security incidents, to protect rights, or as part of a business transaction subject to applicable obligations. We do not sell personal information or share it for cross-context behavioral advertising.

AI processing depends on the feature and deployment configuration and may use a local model or an external provider. Review the applicable configuration with your organization before submitting sensitive information. Google API data remains subject to the narrower limits described above.

Your controls, retention and deletion

You can change supported sync settings and disconnect a provider in LMT Settings. Disconnect disables the connection and clears LMT's stored refresh credential for that connection. You can also revoke access directly in Google account connections or your Microsoft account/organization's application-access controls. Provider revocation and LMT disconnection are separate actions.

Disconnection stops future authorized use through that connection; it does not automatically erase existing CRM records, copies already synchronized, provider-side records or audit history. Deleting or canceling an item can propagate through enabled sync, so review its destination before making a change.

We retain information while needed for the service, your organization's instructions, support, security, legitimate recordkeeping or legal obligations. Retention varies by record type; backup and audit copies may persist after an operational record is removed. We do not promise an automatic fixed deletion period for all records.

To request access, correction, export or deletion of your information or connected-account data, email [email protected]. Identify the account and request without sending passwords or tokens. We may verify your identity and coordinate with the organization responsible for a business record. Applicable rights and required retention can affect what can be deleted.

Security, location and website technology

LMT uses authenticated access, server-side authorization and encrypted storage for connector tokens. No system can guarantee absolute security. Keep your account secure and report suspected unauthorized access promptly.

LMT is operated from the United States. Providers may process information in other locations, subject to their service arrangements and applicable safeguards. The website and application use technology necessary for authentication, security and operation. The public website also loads fonts from Google Fonts, which receives the connection information needed to deliver them. This policy does not claim that every third-party service has the same practices; review the relevant provider's notice.

Audience and changes

LMT is intended for adult business users, not children. We do not knowingly offer connected-account services to children under 13.

We will update this page when practices change and revise the effective date. Where a change introduces a new use of connected-account data, we will provide the required notice and obtain consent before that new use. Contact us using the address above with questions.