DRAFT — pending counsel review
This page is a working draft. Our attorneys have not reviewed it yet, and it may change before it is final.
Legal
Privacy policy
Effective November 2, 2026
Corin Commercial, Inc. (“Corin,” “we,” “us”) is a California real estate broker that arranges commercial real estate loans. This policy explains what personal information we collect on corincommercial.com and kubera.loans, and in our work with borrowers, partners, and lenders, how we use and share it, how long we keep it, and the choices and rights you have.
The short version
- We collect what you give us to review and arrange financing, plus basic device and usage data that keeps the site secure.
- We share your loan package with lenders and report providers only to arrange the financing you ask for.
- We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use advertising cookies.
- You can ask to know, correct, or delete your personal information by emailing privacy@corincommercial.com.
Notice at collection
This section is our notice at collection under the California Consumer Privacy Act (CCPA). The table lists each category of personal information we collect, examples, whether it is sensitive, and how long we keep it. We collect it for the purposes listed in How we use personal information. We do not sell or share any category for cross-context behavioral advertising.
| Category | Examples | Sensitive | Collected on our forms |
|---|---|---|---|
| IdentifiersCCPA: Identifiers | Name, email address, phone number, IP address, and the reference ID we assign to your request. | No | Yes |
| Contact and customer recordsCCPA: Personal information described in Civ. Code §1798.80(e) | Mailing address, company name, and the contact details you give us for co-borrowers or principals. | No | Yes |
| Professional informationCCPA: Professional or employment-related information | Job title, organization, license type and number, markets served, services offered, and lending criteria. | No | Yes |
| Loan request and property detailsCCPA: Commercial information | Property type, location, loan amount, income and occupancy figures, timing, and the notes you write. | No | Yes |
| Financial documentsCCPA: Financial information and sensitive personal information | Operating statements, rent rolls, census and STR reports, personal financial statements, and anything those files contain, such as account numbers or government ID numbers. | Yes | Yes |
| CommunicationsCCPA: Audio, electronic, or similar information | Emails, text messages, call notes, recordings and transcripts of calls we tell you are recorded, and questions you sent through our website's former Ask feature. | No | In our work with you |
| Consent recordsCCPA: Commercial information | The consent text you agreed to, when you agreed, the page, IP address, and browser, and any opt-out. | No | Yes |
| Device and usage dataCCPA: Internet or other electronic network activity | Browser type, device type, pages viewed, referring page, and security logs. We do not use advertising cookies. | No | Yes |
| Program-fit assessmentsCCPA: Inferences | Our internal view of which loan programs may fit your request and how quickly an advisor should follow up. | No | Yes |
Where it comes from
- From you, when you use the deal qualifier, the loan sizer, or other tools on our sites, the partner portal, the document vault, or the newsletter signup, or when you email, call, or text us.
- From people you authorize, such as your referring broker, co-borrowers, accountants, and attorneys.
- From lenders and third-party report providers working on your loan, such as appraisers, title companies, and escrow companies.
- From public sources, such as property records and license lookups.
- Automatically from your browser or device when you visit our sites.
How we use personal information
- Respond to your request and have a licensed advisor review it.
- Arrange financing as a real estate broker, including sharing your loan package with lenders and third-party report providers you ask us to work with.
- Prepare required disclosures, such as the Mortgage Loan Disclosure Statement, and keep records the California Department of Real Estate requires.
- Contact you by email, phone, or text when you have agreed to it.
- Send the newsletter you subscribe to, and keep a record of your consent and any unsubscribe.
- Review partner registrations and manage partner relationships.
- Use automated tools for sizing estimates, program fit, follow-up priority, document reading, email sorting, and summaries of calls and call notes, with an advisor reviewing the results.
- Protect our sites and users, prevent fraud, and fix errors.
- Comply with law, respond to lawful requests, and enforce our terms.
We use sensitive personal information only to provide the services you request, to keep our systems secure, and to meet legal duties. We do not use it to infer characteristics about you, so the CCPA right to limit its use does not apply. We do not use your personal information for any purpose that is materially different from those listed here without telling you first.
Automated tools
We use automated tools to help our advisors work quickly and accurately. They estimate loan sizing and which programs may fit your request, suggest how soon an advisor should follow up, read figures from documents you upload, summarize call recordings and call notes for an advisor, and sort and draft correspondence for an advisor to review. Some of these tools are provided by the service providers listed below, under contracts that do not allow them to use your information to train their products.
- A licensed Corin advisor reviews every engagement. No automated tool writes and sends a message on its own: a message a tool drafts goes out only after an advisor approves it. Messages sent automatically, such as the confirmation after you send a request, a first follow-up to a new request, and reminders about documents or conditions still open, use fixed templates a licensed broker approved in advance. Nothing goes to a lender without an advisor’s approval.
- We call you with an automated or artificial voice only if you have given separate consent to those calls. Each such call says at the start that it is automated, and you can withdraw that consent at any time. Before a call is recorded we tell you, and we do not record if you object.
- No automated tool makes a credit decision. Lenders make all credit decisions.
- Before information is sent to these tools, we remove Social Security numbers, dates of birth, and bank, card, and account numbers, or we do not send it. The exception is a document you upload, which a tool reads so an advisor can check its figures.
- Tools that summarize public market news and rates never receive information about you or your loan.
- Advisor-only handling. You can ask that an advisor handle your requests personally, without automated scoring and without sending your personal information to these tools. Use the request form below. It takes effect as soon as we receive it and does not affect how we treat you or your request.
How we share personal information
We disclose personal information for business purposes only to:
- Lenders and capital sources that you ask us to approach for your financing. Arranging your loan is the service you request, so we share your loan package with them at your direction. Each lender handles your information under its own privacy policy.
- Third-party report providers working on your loan, such as appraisers, environmental and property-condition consultants, title, and escrow, again at your direction.
- Service providers that process personal information for us under contracts that limit their use of it to the services they provide:
- Vercel: Website hosting
- Supabase: Database and encrypted document storage
- Twenty: Customer relationship management
- Anthropic: Automated document reading, call summaries, email sorting, and drafting tools used by our advisors
- Zoho: Business email and electronic signatures
- Resend: Transactional email and the newsletter
- Telnyx: Text messages and calls
- Cloudflare: Bot protection
- Sentry: Error monitoring, with personal details removed
- Regulators and others when the law requires it, including the California Department of Real Estate, courts, and law enforcement, or to protect our rights and the safety of others.
- A buyer or successor if we are involved in a merger, acquisition, or sale of assets, subject to this policy.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the past 12 months. We do not knowingly collect personal information from anyone under 16.
How long we keep it
We keep personal information only as long as we need it for the purposes above or as the law requires. The California Department of Real Estate requires brokers to keep loan records, including the Mortgage Loan Disclosure Statement, for at least three years. Records under a legal hold are kept until the hold ends. When a period ends, we delete or de-identify the information, including stored files.
| Category | How long we keep it |
|---|---|
| Identifiers | For the life of the relationship, then three years after our last contact with you. |
| Contact and customer records | Three years after our last contact with you, or three years after the related loan closes, whichever is later. |
| Professional information | While the partner relationship is active, then three years. |
| Loan request and property details | Three years after our last contact with you; for loans we arrange, three years after the loan closes or the file is withdrawn. |
| Financial documents | Three years after the related loan closes or the request is withdrawn, unless a lender or regulator requires longer. |
| Communications | Three years after our last contact with you. Questions sent through our website's former Ask feature are kept for up to one year unless they became part of a loan file. |
| Consent records | Five years after consent is withdrawn or the relationship ends, so we can prove consent and honor opt-outs. |
| Device and usage data | Up to 90 days for security and error logs; aggregated statistics without identifiers may be kept longer. |
| Program-fit assessments | Kept with the loan request it describes. |
Some records have their own periods within these categories:
| Record | How long we keep it |
|---|---|
| Emails you send to our deals, documents, lender, vendor, and closing mailboxes, with their attachments | Kept with your loan request and deleted with it. Email not tied to a request: three years after we receive it. Auto-replies, marketing, and spam: 90 days. |
| Text messages to and from us, including STOP, HELP, and START replies | Kept with your loan request and deleted with it; otherwise three years after the message. The record of an opt-out stays in your consent records. |
| Our log of the emails and texts we send you (address or number, message type, delivery status) | Kept with your loan request and deleted with it; otherwise three years after we send it. |
| Newsletter subscription | Until you unsubscribe, then 30 days. A signup you never confirm is deleted after 30 days. The record of your consent and unsubscribe is kept five years. |
| Questions sent through our website's former Ask feature (retired November 2026) | Up to one year after the question, unless it became part of a loan file. |
Your California privacy rights
If you are a California resident, you have the right to:
- Know and access the personal information we have collected about you, the categories of sources, the purposes, and the categories of recipients.
- Delete personal information we collected from you, subject to legal exceptions such as records the Department of Real Estate requires us to keep.
- Correct inaccurate personal information.
- Opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of, but you may still send the request.
- Not be discriminated against for using any of these rights.
How to make a request
You can make a request in any of these ways:
- Online form. Use the privacy request form on this page to ask for access, deletion, correction, or advisor-only handling, or to opt out.
- Email. privacy@corincommercial.com
Tell us which right you want to use and how we can reach you. We will confirm receipt within 10 business days and respond within 45 calendar days. If we need more time, we will tell you why and may take up to another 45 days.
To protect you, we verify your identity by matching information you give us with information we already have. You can ask an authorized agent to make a request for you; we will ask for your signed permission and may ask you to verify your identity directly.
Make a request online
Do Not Track and Global Privacy Control
We do not track you across other websites or allow third parties to do so on our sites. We treat a Global Privacy Control signal from your browser as a request to opt out of sale and sharing. Our sites do not otherwise change their behavior in response to Do Not Track signals.
Shine the Light
We do not disclose personal information to third parties for their own direct marketing purposes (Civ. Code §1798.83).
Email, text, and phone
We contact you by phone, text, or email only when you have agreed to it or when you have asked us to. Agreeing is never a condition of working with us. Reply STOP to any text to opt out, or HELP for help. Message and data rates may apply. You can unsubscribe from marketing email with the link in any message; we may still send messages about a loan request you have open.
Security
We protect personal information with encryption in transit and at rest (fields such as Social Security numbers and account numbers are also encrypted individually before they are stored), a private document vault with expiring upload links, access limited to the people who need it, and security monitoring. No system is perfectly secure. If a breach affects your personal information, we will notify you as California law requires.
Business borrowers
Most of our work involves loans to businesses. Personal information about owners, guarantors, and employees of a business is covered by this policy in the same way.
Changes to this policy
We will post any change on this page with a new effective date. If a change is material, we will also show a notice on our sites or tell you directly before it takes effect.
Contact us
Questions or requests: privacy@corincommercial.com. See also our terms of use and licensing and disclosures.