Privacy Policy

Last updated: January 2026

1. Introduction

MutuoItalia ("we," "our," or "us") is a subsidiary of Kaai Tech LLC and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

2. Information We Collect

We collect information you provide directly to us, including:

Personal identification information (name, email, phone number, address)
Financial information for mortgage applications (income, assets, liabilities)
Documents you upload for verification (ID, proof of income, bank statements)
Communication records between you and our team
Property preferences and search history
Quiz responses and eligibility assessments

We also automatically collect certain information when you use our services:

Device information (IP address, browser type, operating system)
Usage data (pages visited, time spent, clicks)
Cookies and similar tracking technologies
Location data (if you grant permission)

3. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

Consent: When you provide explicit consent for specific processing activities
Contract Performance: To fulfill our services and connect you with mortgage brokers
Legal Obligation: To comply with applicable laws and regulations
Legitimate Interests: To improve our services, prevent fraud, and ensure security

4. How We Use Your Information

We use the information we collect to:

Process and manage your mortgage applications
Connect you with licensed Italian mortgage brokers
Communicate with you about our services, updates, and important information
Provide educational resources and mortgage calculators
Comply with legal and regulatory requirements
Improve our services, user experience, and website functionality
Prevent fraud, abuse, and ensure platform security
Analyze usage patterns to optimize our platform

5. Data Sharing and Third Parties

We share your information with the following parties:

Mortgage Brokers: We share your application data with licensed Italian mortgage brokers to facilitate mortgage services
Service Providers: We use third-party services that process data on our behalf:
- Firebase (Google) - Data storage and authentication
- Vercel - Website hosting and infrastructure
- Apify - Property data scraping services
- OpenAI - AI-powered content generation (blog posts)
Legal Requirements: When required by law, court order, or government regulation
Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties for marketing purposes.

6. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States, where our service providers operate. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and adequacy decisions, to protect your data in accordance with GDPR requirements.

7. Data Retention

We retain your personal data for as long as necessary to:

Provide our services to you
Comply with legal obligations (typically 7 years for financial records)
Resolve disputes and enforce agreements
Maintain security and prevent fraud

When data is no longer needed, we securely delete or anonymize it in accordance with our retention policies.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

Remember your preferences and settings
Analyze website traffic and usage patterns
Provide personalized content and advertisements
Ensure website security and prevent fraud

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected users without undue delay, as required by GDPR.

11. Your Rights (GDPR)

Under GDPR and applicable privacy laws, you have the following rights:

Right to Access: Request a copy of your personal data we hold
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your data (subject to legal obligations)
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise these rights, please contact us at [email protected]. We will respond to your request within one month (may be extended to two months for complex requests).

12. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Data Protection Contact:
Email: [email protected]
Address: 1321 Upland Dr, Houston, Texas 77043, United States

MutuoItalia is a subsidiary of Kaai Tech LLC.