Trust & Privacy

How we handle your information

This page is maintained by Jim Benincasa to answer common security and privacy questions about rlsbroker.com. It describes the controls and practices in place today and is not an independent certification.

Last updated June 17, 2026.

What we collect

When you submit the contact form on this site, you provide the loan program you're interested in, your name, email address, an optional phone number, and an optional short message. That submission is stored in our backend so we can follow up, and a notification email is sent to Jim. If you choose to start a loan application, you're handed off to our partner platform (my1003app.com), which collects the additional information needed for an application under its own terms and privacy practices.

How we use it

We use the information you submit only to respond to your inquiry, discuss loan options, and follow up on financing requests. We do not sell visitor information and we do not share it with third parties except where needed to deliver the service you asked for — for example, the email provider that delivers the notification to Jim, or the loan origination platform if you choose to apply.

Security controls in place

  • HTTPS/TLS for all traffic to and from the site.
  • Form submissions are validated server-side before anything is written to the database.
  • The backend database uses row-level security; privileged routines run with pinned, least-privilege execution paths and access is restricted to the service role.
  • Service credentials and email-provider keys are kept in protected server-side environment variables and are never sent to the browser.
  • Outbound email is rendered and queued server-side, with an unsubscribe token issued per recipient and an unsubscribe endpoint honored on every send.
  • Automated security scans (including Supabase configuration checks and Wiz/Aikido connector scans available through our build platform) currently show no outstanding findings on this project.

Hosting & subprocessors

The site is built with the Lovable platform and served from Cloudflare's edge network. Backend storage, authentication, and scheduled jobs are provided by Lovable Cloud (Supabase). Transactional email is delivered through our email provider configured at notify.www.rlsbroker.com. Loan applications are handled by American Mortgage Brokers' application platform. Each of these providers maintains its own security and privacy program.

Cookies & analytics

This site does not run third-party advertising or cross-site tracking. The only cookies set by the site itself are small functional cookies used to remember UI preferences (such as whether a sidebar is collapsed). Our hosting and backend providers may set short-lived cookies that are required for the site to operate securely.

Retention & your choices

Contact form submissions are retained while we're in active communication and for a reasonable follow-up period afterward. You can ask us at any time to access, correct, or delete the information you've sent, and you can unsubscribe from any email we send using the link included in that email or by replying to it.

Contact us about privacy or security

Questions about this page, requests about your information, or reports of a potential security issue can be sent to jimb@americanmortgagebrokers.com. We aim to respond within a few business days.

This page reflects our current practices and may be updated as the site evolves. It does not modify the loan disclosures and licensing notices shown elsewhere on the site.