Privacy Policy

Last updated: September 28, 2026

Claude for Compliance (“we,” operated by CF Synergies, LLC) provides an open library of U.S. mortgage-compliance materials, an MCP server that lets AI assistants look up that library, and optional email alerts when regulations change. We collect as little as possible and never sell your information. This policy explains what we collect and why.

What we collect

• Your email address — when you sign up for regulation-update alerts.
• An optional name — only if you choose to provide it.
• What you asked to follow — the regulation, bundle, or topic tied to your signup, and the page/URL where you signed up.
• A one-way hashed, salted IP address — we store a truncated cryptographic hash of your IP (not your IP itself) solely to detect signup abuse. We cannot recover your IP from it.
• A referral tag — if you arrived through a partner’s link, we record which partner referred you so we can credit them. Your contact information remains ours and is not handed to the partner.
• Share-button clicks — only if you opt in. This is off by default. If you turn it on (at signup or in your preferences), and only then, we record when you click a “Share on LinkedIn” button on the site, so we can credit you for sharing. We never see who you forward or share to — only that you clicked. If you do not opt in, your browser sends us no signal at all when you click those buttons, and nothing is recorded. You can turn this off anytime in your preferences.

Downloading any material from the site (regulations, kits, templates) does not require an account and is not tied to your identity.

The MCP server

If you connect an AI assistant (such as Claude or ChatGPT) to our MCP server, the assistant sends the server the requests it makes on your behalf: search terms, citations to look up, and passages to check against the regulator’s text. The server does not receive the rest of your conversation. It requires no account and stores no name, email address, IP address, or other identifier.

• Searches that find nothing — we keep the text of those searches, and nothing else about them, so we know which regulations to add.
• Aggregate daily counts — for example, how many sessions started (including whether the session started from the server link on our website), and how many times each tool was used, with its result type. These counts contain no search text and no identifiers.

Don’t put borrower information or other personal data in your questions. A search that finds nothing may be kept as written. Your conversation itself is handled by your AI provider under its own privacy policy, not ours.

How we use it

We use your email solely to send the regulation-update alerts you requested and to operate and secure the service. We use double opt-in: after you sign up, we email you a confirmation link, and we only send alerts after you confirm. We do not use your information for advertising.

Who we share it with

We do not sell or rent your information. We use a small number of service providers strictly to run the service, who process data on our behalf under their own terms:

• Cloudflare — website and MCP server hosting, our databases, and network security. To deliver traffic and enforce rate limits, Cloudflare processes network information such as IP addresses under its own terms; our server does not record them.
• Resend — sending the confirmation and alert emails.

We may disclose information if required by law or to protect the service from abuse.

Cookies & analytics

The site sets no advertising or cross-site tracking cookies. If you confirm a subscription or manage your preferences, we set a functional cookie that securely identifies you to the site so features like share-button crediting work; a second small cookie records whether you opted in to share-button crediting, so that if you did not, your browser never sends the signal. These are functional, first-party, and not used for advertising or cross-site tracking. If we use website analytics, we use a privacy-first, cookieless measurement tool that does not fingerprint you or track you across sites. We also count clicks on our install buttons (such as “Open in Claude,” “Open in ChatGPT,” and “Copy server URL”) as a daily total per button and page. These counts use no cookie and record no IP address or other identifier, and they are not tied to you. This is separate from share-button crediting, which is tied to your subscription and happens only if you opt in.

We also use your browser’s local storage to remember that you’ve already subscribed or dismissed a sign-up prompt, so we don’t ask you again. That flag stays on your device, is not sent to us, and is not used to track you. You can clear it anytime through your browser settings.

How long we keep it

We keep your subscription information until you unsubscribe, after which we delete it within 30 days, except where we must retain limited records to comply with law.

We keep the text of MCP searches that found nothing for as long as it helps us decide what to add to the library, and aggregate daily counts indefinitely. Neither is linked to you.

Your choices

You can unsubscribe at any time using the link in any alert email or by emailing us. You may also ask us to access or delete the information we hold about you. Email earl@cfsynergies.com and we’ll take care of it.

Security

Information is stored in parameterized databases, IPs are hashed, and we follow least-privilege practices. No method of transmission or storage is perfectly secure, but we work to protect the limited data we hold.

Children

The site is intended for compliance professionals and is not directed to anyone under 18. We do not knowingly collect information from children.

Changes

We may update this policy; the “last updated” date above reflects the current version.

Contact

CF Synergies, LLC
122 Wepawaug Drive, Milford, CT 06460
Email: earl@cfsynergies.com

Terms of Use