Effective Date: January 2, 2023
This Rocket Family of Companies Privacy Policy describes how the Rocket Family of Companies (as defined in "Who We Are" below) process information collected on our websites and applications (including mobile) or through your online interactions with us (collectively, our "Services").
In some circumstances, we may provide you with additional or supplemental privacy notices to the extent they apply to you because of the products and services you obtain from us or different laws that may apply to you. If you are a resident of California, Colorado, Connecticut, Utah, Virginia, or another state that may provide additional privacy rights, please refer to the Additional Information Regarding Your State Privacy Rights section.
By using any of our Services, you acknowledge the privacy practices we describe in this Rocket Family of Companies Privacy Policy. You also acknowledge that you have read this policy and other policies described.
When we say "Rocket Family of Companies," we mean companies that are controlled by RKT Holdings, LLC and share the Rocket name or are on the Rocket platform. A reference to "Rocket", "we" or "us" is a reference to the relevant Rocket Company in the Rocket Family of Companies that is involved in the processing activity. This policy does not apply to Rocket affiliates that aren't in the Rocket Family of Companies ("Affiliates"), and the data practices of Affiliates are governed by their own privacy policies.
The Rocket Family of Companies includes:
We collect information you provide to us. For example, we collect information from you when you create a Rocket account, fill out a form or otherwise submit content through our Services, are referred to us via one of our third-party professional partner relationships, make a purchase, communicate with us via third-party platforms, participate in a contest, promotion or survey, request customer support or information about our Services, or otherwise communicate with us.
The specific information we collect depends on the context in which you provide it, and could include:
We automatically collect certain information about your interactions with us or our Services, including:
Transactional Information: When you make a purchase or complete a transaction, we collect information about the transaction, such as product or service details, financial details and the date and location of the transaction.
Device and Usage Information: We collect information about how you access our Services, including data about the device and network you use, such as hardware model, operating system version, mobile network, IP address, unique device identifiers and device regional and language settings, browser type, and app version. We also collect information about your activity on our Services, such as access times, pages viewed, links clicked, products and services considered, and the page you visited before navigating to our Services.
Your Content: As you allow through your device or application, we may collect information and content stored on your device, such as photos.
Location Information: In accordance with your device permissions, we may collect information about the precise location of your device. You may stop the collection of precise location information at any time (see the Your Choices section below for details).
Information Collected by Cookies and Similar Tracking Technologies: We (and those who perform work for us) use tracking technologies, such as cookies and web beacons, to collect information about your interactions with the Services.
Cookies are small data files stored on your hard drive or in device memory that help us improve our Services and your experience, see which areas and features of our Services are popular and which emails and advertisements you view, authenticate users, reconstruct or observe activity relating to a session or by a user for troubleshooting, issue resolution, and other purposes, and count visits to our websites.
Web beacons (also known as "pixel tags" or "clear GIFs") are electronic images that we use on our Services and in our emails to help deliver cookies, count visits, and understand usage and campaign effectiveness. In our mobile apps, we may also use technologies that are not browser-based like cookies.
For example, our apps may include software development kits (known as SDKs) which are code that sends information about your use to a server. These SDKs allow us to track our conversions, bring you advertising both on and off the Service, and provide you additional functionality. For more information about these tracking technologies and how to disable them, see the Advertising and Analytics section below.
We obtain information from third-party sources in certain situations. For example, we may collect information about you from identity or other verification services, credit bureaus (including your credit report), advertising networks, mailing list providers, service providers and data brokers. Our Services also may allow or require you to integrate or connect your Rocket account with third-party services through service providers (such as Plaid).
The information we receive from such third parties varies depending on the information made available by those entities. Examples of the types of information we receive include financial account information, information about account balance, information about credit accounts, information about loan accounts, information about investment accounts, identifiers and information about account owners, information about account transactions and employment information.
Additionally, if you create or log into your Rocket account through a third-party platform, such as Facebook or Google, we'll have access to certain information from that platform, such as your name, birthday, and profile picture, in accordance with the authorization procedures determined by such platform.
We may derive information or draw inferences about you based on the information we collect. For example, we may make inferences about your location based on your IP address or city or postal code or infer that you are looking to purchase certain products based on information you provide to us and your browsing behavior and past purchases.
Rocket enables you to use Plaid Technologies, Inc. to gather data from financial institutions. By using the Services, you acknowledge and agree that your information will be processed in accordance with the Plaid Privacy Policy and you grant Rocket and Plaid the same rights, power and authority as specified therein.
We use the information we collect to provide our Services to you.
We also use the information we collect to:
We share personal information to allow others to provide analytics services and serve advertisements across the web and in mobile apps. These entities may use cookies, web beacons, device identifiers and other technologies to collect information about your use of our Services and other websites and applications, including your IP address, web browser, mobile network information, pages viewed, time spent on pages or in mobile apps, links clicked and conversion information.
This information may be used by Rocket and others to, among other things, analyze and track data, reconstruct or observe activity relating to a session, determine the popularity of certain content, deliver advertising and content targeted to your interests on our Services and other websites, and better understand your online activity.
For more information about interest-based ads, or to opt out of having your web browsing information used for behavioral advertising purposes, please visit www.aboutads.info/choices. Your device may also include a feature ("Limit Ad Tracking" on iOS or "Opt Out of Interest-Based Ads" or "Opt Out of Ads Personalization" on Android) that allows you to opt out of having certain information collected through mobile apps used for behavioral advertising purposes.
We also share personal information to work with third parties to serve ads to you as part of customized campaigns on third-party platforms (such as Facebook). As part of these ad campaigns, we or the third-party platforms may convert information about you, such as your email address or phone number, into a unique value that can be matched with a user account on these platforms to allow us to learn about your interests and serve you advertising that is customized to your interests. Note that third-party platforms may offer you choices about whether you see these types of customized ads.
Rocket products are not intended for children. We don't direct our Services to children under 16, or knowingly attempt to solicit or receive information from children.
Back to TopCalifornia law permits residents of California to request certain details about how their information is shared with third parties for direct marketing purposes. If you're a California resident and would like to make such a request, please call us at 888-444-7492.
Back to TopRocket is headquartered in the United States, and the Rocket Family of Companies offers goods and services to consumers in the United States. We have operations and vendors in the United States and other countries. Therefore, we and those that perform work for us may transfer your personal information to, or store or access it in, jurisdictions that may not provide levels of data protection that are equivalent to those of your home jurisdiction.
Back to TopYou may update and correct certain account information, or delete your account, by logging into your account or calling us at 888-444-7492. Please note that we may retain certain information as required by law or for our legitimate business purposes.
When you first launch any of our mobile apps that collect precise location information, you'll be asked to consent to the app's collection of this information. If you initially consent to our collection of such location information, you can subsequently stop the collection of this information at any time by changing the preferences on your mobile device. You may also stop our collection of this location information by following the standard uninstall process to remove our mobile apps from your device.
You may be using an Internet browser that can communicate your privacy preferences to the website, including requests not to track your usage and browsing history. Currently, our websites do not respond to these signals. Rocket may track your activity on these websites and use that information as provided in this policy.
We may change this Rocket Family of Companies Privacy Policy from time to time. If we make changes, we'll notify you by revising the date at the top of this policy and, in some cases, we may provide you with additional notice, such as adding a statement to our website or sending you a notification. We encourage you to review this policy regularly to stay informed about our information practices and the choices available to you.
Back to TopIf you have questions regarding this Rocket Family of Companies Privacy Policy, our information practices or other aspects of privacy relating to our Services, call us at 888-444-7492.
Back to TopCertain states, including California, Colorado, Connecticut, Utah, and Virginia, require that we provide additional information regarding our privacy practices and your privacy rights. If you are a resident of those states, we provide you additional notices about our privacy practices and consumer rights relating to your information. Some of the companies within the Rocket Family of Companies are financial institutions subject to other regulatory privacy frameworks, such as the Gramm Leach Bliley Act (GLBA), and the privacy disclosure and rights described in this section may not apply.
In the preceding 12 months, we have collected the following categories of personal information:
Category | Examples |
---|---|
Identifiers | Name, alias, postal address, online identifier (including IP address), email address, Social Security number, driver's license number, or other similar identifiers. |
Client Records | Employer name, employment history, bank account number, credit card number, debit card number, and other financial information (including credit report, salary, and net worth). |
Protected Classification Characteristics Under State Or Federal Law | Age, gender, military status and marital status. |
Commercial Information | Records of property, products or services purchased. |
Internet Or Other Similar Network Activity | Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. |
Geolocation Data | Physical location or movements. |
Sensory Data | Audio (such as call recordings) or the contents of videos you choose to upload. |
Professional Or Employment-Related Information | Current employer or employment status. |
Inferences Drawn From Other Personal Information | Preferences, characteristics and approximate location. |
Sensitive Personal Information | Social Security Number, driver’s license, state identification card, or passport number; account log-In, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation; racial or ethnic origin, religious or philosophical beliefs, or union membership; the contents of a consumer’s mail, email and text messages, unless the business is the intended recipient of the communication. |
For details about the precise data points we collect and the categories of sources of such collection, please see the Information We Collect section. We collect personal information for the business and commercial purposes described in the How We Use Your Information section.
In the preceding 12 months, we've disclosed the following categories of personal information for business or commercial purposes to the following categories of recipients:
Category of Personal Information | Categories of Recipients |
---|---|
Identifiers | Partners (such as mortgage partners or car dealerships, depending on the Services), advertising networks, and service providers (such as internet service providers, data analytics providers, email service providers, data storage providers, customer support providers, account management providers, operating systems and platforms). |
Client Records | Partners (such as mortgage partners or car dealerships, depending on the Services), advertising networks, and service providers (such as internet service providers, data analytics providers, email service providers, data storage providers, customer support providers, account management providers, operating systems and platforms). |
Protected Classification Characteristics | Service providers, Affiliates, mortgage partners, and partner companies. |
Commercial Information | Partners (such as mortgage partners or car dealerships, depending on the Services), advertising networks, and service providers (such as internet service providers, data analytics providers, email service providers, data storage providers, customer support providers, account management providers, operating systems and platforms). |
Internet Or Other Network Activity | Advertising networks and service providers (such as internet service providers, data analytics providers, data storage providers, operating systems and platforms). |
Geolocation Data | Partners and service providers. |
Sensory Data | Partners. |
Professional Or Employment-Related Information | Service providers and partners. |
Inferences Drawn From Other Personal Information | Partners, advertising networks, and service providers (such as internet service providers, data analytics providers, email service providers, data storage providers, customer support providers, account management providers, operating systems and platforms). |
Sensitive Personal Information | Partners (such as mortgage partners or car dealerships, depending on the Services), advertising networks, service providers (such as internet service providers, data analytics providers, email service providers, data storage providers, customer support providers, account management providers, operating systems and platforms), affiliates, and partner companies. |
In California, you have the right to limit our processing of your Sensitive Personal Information to only uses which are necessary to perform the services or provide the goods reasonably expected by an average consumer who requests such goods or services. When we collect your Sensitive Personal Information, we collect and use that information to perform the services or provide the goods for which that information is necessary and as reasonably expected by you.
California, Colorado, Connecticut, Utah, and Virginia law require certain disclosures for companies that "sell" personal information persuant to the respective state's privacy law. Each state defines the "sale" of data differently. In California, the "sale" of data means certain scenarios in which Rocket has shared personal information with third parties or Affiliates, in exchange for valuable consideration. Colorado, Connecticut, Utah, and Virginia define the "sale" of data as Rocket exchanging personal information for monetary consideration with a non-affiliated third party.
Under Colorado, Connecticut, Utah, and Virginia law, we do not "sell" your personal information.
Under California's definition, we "sell" personal information to enable our Affiliates and certain third parties to use your information in accordance with their privacy policies. We "sell" the following categories of personal information to the following categories of third parties:
Category of Personal Information | Categories of Third Parties |
---|---|
Identifiers | Affiliates and non-affiliated third parties. |
Categories Of Personal Information Described In Subdivision (e) Of Section 1798.80 | Affiliates and non-affiliated third parties. |
Commercial Information | Affiliates and non-affiliated third parties. |
Internet Or Other Network Activity | Affiliates and non-affiliated third parties. |
Inferences Drawn From Other Personal Information | Affiliates and non-affiliated third parties. |
You have the right to opt out of the "sales" described above at any time by visiting our Do Not Sell My Personal Information webpage. We do not knowingly sell or share personal information about consumers under the age of 16.
California requires that we notify you if we “Share” your personal information with third parties. In California, “Sharing” means we make available or otherwise disclose your information to third parties for cross-context behavioral advertising. Further, “cross-context behavioral advertising” means targeting of advertising to you based on your personal information obtained from your activity across businesses, websites, apps, and services other than our Services.
Similarly, privacy laws in Colorado, Connecticut, Utah, and Virginia require we notify you if we use your information for Targeted Advertising. Targeted Advertising means displaying advertisements to you where the advertisement is selected based on personal information obtained from your activities over time and across nonaffiliated websites or online applications to predict your preferences or interests.
Accordingly, we "Share" and use your information for Targeted Advertising. Specifically, we share your identifiers and internet or other network activity with our advertising partners.
You have the right to opt out of "sharing" or Targeted Advertising by accessing our Do Not Sell My Personal Information webpage.
We will not retain your personal information for longer than is reasonably necessary to carry out the purposes we disclose in this policy.
Subject to certain limitations, you have the right to (1) request to know more about the categories and specific pieces of personal information we collect, use, disclose and sell, and to access your information, (2) request deletion of your personal information, (3) request correction of your personal information and (4) not be discriminated against for exercising these rights.
You may make these requests by starting a request online or calling 888-444-7492. We'll verify your request by asking you to provide information related to your recent interactions with us.
If we receive your request from an authorized agent, we may ask for evidence that you've provided such agent with a power of attorney, or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf. If you're an authorized agent seeking to make a request, please contact us as set out above.
California’s privacy law requires that we notify you if we provide you a program, benefit, or other offering, related to the collection, deletion, or sale of personal information, which it defines as a “financial incentive.” We may offer you certain financial incentives that may result in different prices, rates, or quality levels (for example, contests and referral programs). Through these offerings, consumers provide us with some personal information (e.g., names, emails, phone numbers) when they opt-in to our programs. There is no obligation to opt-in and consumers may opt-out at any time. The details of each program are contained in the program offering. We offer these programs, among other things, to enhance our relationship with you so you can enjoy more of our products/services at a lower price. We invest heavily in our marketing and brands, in part, so we can provide programs to our customers. Consumer data is valuable to our business only when it is combined with a sufficient number of other consumer data and after it is enhanced by our efforts herein described. The value to our business of any individual consumer's personal information is dependent on a number of factors, including, for example, whether and to what extent you take advantage of any offerings, whether and to what extent you opt out of any offerings, and whether we are able to enhance the data through our efforts herein described. Our ability to create any value from the programs is heavily based on our ability to leverage said intellectual properties. We do not calculate the value of consumer data in our accounting statements.
In 2021, we've received 917 verifiable consumer requests. This includes requests from people to know, access, delete their data or to opt out of data sharing.
Here's a breakdown of that number:
229 Right To Know/Access requests
688 Right To Delete requests
73,046 Data Sharing Opt-Out requests
It's taken us a median of 3 days to process and respond to each request.