Privacy Policy

Effective date: March 11, 2026

This privacy policy describes how Atlantic Home Mortgage, LLC dba LendTrain (“LendTrain,” “we,” “us”) collects, uses, and protects information when you use the LendTrain mortgage refinance plugin for Claude Code (the “Plugin”) and the LendTrain Chat API (the “API”).

Information We Collect

Information you provide

When you use the Plugin or API to request a refinance quote, you may provide mortgage details such as:

  • Current loan balance, interest rate, and monthly payment
  • Estimated property value and property type
  • Property state and occupancy type
  • Estimated credit score range
  • Current loan type (Conventional, FHA, VA)
  • Refinance goals (lower payment, cash out, shorter term)

Information we never collect

The Plugin and API are designed to never collect the following, and will actively refuse if offered:

  • Social Security numbers (SSN)
  • Dates of birth
  • Bank account numbers or financial account credentials
  • Passwords or authentication tokens
  • Government-issued identification numbers (other than for loan application via secure portal)

Automatically collected information

The Chat API logs IP addresses for rate limiting purposes (20 requests per minute per IP). IP addresses are not associated with conversation content and are retained for a maximum of 30 days. The Plugin communicates with a mortgage pricing MCP server to retrieve rate quotes; these requests do not include personally identifiable information.

How We Use Your Information

Information you provide is used exclusively to:

  • Generate real-time mortgage refinance rate quotes
  • Calculate state-specific itemized closing costs
  • Perform savings analysis with breakeven timeline and recommendation scoring
  • Determine eligibility for FHA Streamline or VA IRRRL refinance programs
  • Provide compliant refinance recommendations per TRID, RESPA, TILA, and ECOA

Data Storage and Retention

Plugin (Claude Code)
The Plugin runs locally within your Claude Code session. Conversation data is managed by Anthropic's Claude Code platform according to their privacy policy. LendTrain does not store Plugin conversation content on its servers.
Chat API
The Chat API is stateless. Conversation history is sent with each request and is not persisted on LendTrain servers after the response is returned. Rate quotes are generated in real time and are not stored.
Pricing Engine
The MCP pricing server processes loan parameters to generate rate quotes. Loan parameters are not logged or stored. Only aggregated, anonymized usage metrics (request counts) are retained for operational monitoring.

Data Sharing

We do not sell, rent, or share your information with third parties for marketing purposes. Information may be shared only in the following circumstances:

  • Loan application: If you choose to apply for a mortgage through our secure application portal, the information you submit on that portal is governed by the loan origination system's separate privacy policy.
  • Legal requirements: We may disclose information if required by law, regulation, or legal process.
  • Service providers: We use Anthropic's Claude API to power the Chat API. Conversations processed through the Chat API are subject to Anthropic's data handling policies.

External Connections and MCP Scoping

The Plugin connects to one external service via the Model Context Protocol (MCP):

MCP Pricing Server
A read-only mortgage pricing engine that accepts loan parameters (balance, property value, credit score, state, loan type) and returns rate quotes. The server exposes three tools: calculate_pricing, calculate_all_pricing, and get_effective_date.
Connection security
All MCP communications are encrypted using TLS. The pricing server is stateless and does not retain loan parameters after generating a response. No authentication tokens, user credentials, or personally identifiable information are transmitted to the pricing server.
No other external connections
The Plugin does not connect to any other external services, APIs, databases, or third-party systems. It does not access Google Drive, Salesforce, or any other cloud services.

Plugin Permissions and Scope

The Plugin operates with minimal permissions and does not request or use elevated access:

  • Does not read, write, or modify files on the user's file system (except mortgage statement uploads processed in-memory by Claude)
  • Does not execute shell commands or spawn subprocesses
  • Does not install software or modify system configuration
  • Does not access environment variables, credentials, or secrets
  • Does not attempt to evade or bypass Claude Code safety guardrails
  • Does not override or modify Claude's default safety behaviors

The Plugin consists entirely of Markdown skill files and an MCP server configuration. It contains no executable code, hooks, or scripts.

Security

All communications with the Chat API and MCP pricing server are encrypted using TLS. The Plugin includes a dedicated security-guardrails skill that enforces:

  • Prompt injection defense for uploaded documents and conversational manipulation
  • System prompt and business logic disclosure protection
  • Social engineering and authority impersonation detection
  • Workflow phase enforcement to prevent skipping data collection steps
  • Rejection of requests for SSN, DOB, bank accounts, or passwords

Borrowers who wish to proceed with a loan application are directed to a secure, authenticated application portal. Sensitive personal information required for loan origination is collected only through that portal, not through the Plugin or API.

Children's Privacy

The Plugin and API are not directed to individuals under the age of 18. We do not knowingly collect information from children. Mortgage origination services are only available to individuals who have the legal capacity to enter into a binding contract.

Maintenance and Support

LendTrain is actively maintained by Nexus Digital Group LLC. We commit to promptly addressing security vulnerabilities, compatibility issues with Claude Code updates, and user-reported bugs. The Plugin source code is available at github.com/lendtrain/mortgage. To report issues, contact us at team@lendtrain.com or open an issue on GitHub.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the Plugin or API after changes constitutes acceptance of the updated policy.

Contact

Atlantic Home Mortgage, LLC dba LendTrain

12600 Deerfield Pkwy, Suite 100

Alpharetta, GA 30004

Phone: (888) 309-4643

Email: team@lendtrain.com

NMLS# 1844873 — Equal Housing Opportunity