Privacy policy
Privacy approach
How this website handles planning data, sign-in, saved results, and contact requests.
Browser-only calculator activity
Calculators run in your browser. Entering values and viewing a calculation does not automatically submit those values to Jesse. Calculator PDFs are also generated in the browser. Saving a plan or Realtor scenario locally and intentionally sharing a result are separate actions described below.
Information saved in your browser
When you save a guest plan or research, browser localStorage on this device can hold planning information such as income, expenses, debts, savings, goals, ZIP codes, research labels and saved loan scenarios with their APR inputs. The Realtor Client Scenario Builder can also save optional client name, email, phone, property address, scenario label, Realtor profile, and the frozen calculation snapshot in this browser. Others who use this browser can access those entries. Your consent choices, version and timestamp are also stored locally when you save privacy preferences. Plan controls let you export, import or delete saved plan information; exports are files you control. These guest features do not create a synchronized online account.
Realtor sharing
The Realtor Client Scenario Builder does not automatically submit scenarios or client contact details to Jesse. Send / Share with Client opens your device's sharing options or copies a summary. If you enter a client email, Open email to client opens your mail app with a draft; this website does not send the email. You control whether to share that information. The existing /api/realtor-scenario validation endpoint remains inactive in this builder and cannot send production email.
Optional accounts and intentional saved results
Online saving operates only when the sign-in screen says it is available. Choosing Save My Results temporarily keeps the selected scenario in this tab while you sign in. After you confirm submission, the tab also keeps the submitted contact choices so a retry sends the same request. The draft expires after 30 minutes; expired drafts are cleared when the save panel is open or next accessed. The draft is also removed after a confirmed save, closing the save panel, or sign-out. It is not sent to the business merely because you choose the button or change calculator fields. Google sign-in requests basic identity, name and email through OpenID Connect. It does not request access to your Gmail, Drive, Sheets, contacts or calendar. Alternatively, a transactional email code verifies your email address. Sign-in alone creates no lead and grants no marketing permission. Successful sign-in stores an account identity (name, verified email and, for Google, an account identifier) and a session in Cloudflare D1 even if you do not subsequently save a scenario or request contact.
When you confirm Save or Send Contact Request, the website stores your verified email, name, phone if supplied, preferred contact method if selected, property ZIP, selected completed scenario, source page, action, and consent record. Cloudflare D1 holds the durable business record and saved results; a server credential separately writes a private Google Sheet controlled by the business. Your Google account is never used to access that Sheet. An email provider, Resend, processes requested verification emails and business notifications. Notifications may contain the information and selected planning summary you intentionally submitted. A Sheet or notification outage can delay business delivery after a result has been saved securely in D1.
Saving without a contact request is allowed. Selecting a preferred method or providing a phone number does not authorize follow-up. The separate unchecked permission requests contact through the selected method about that request only; it does not enroll you in marketing or automated messages or calls. Text and call requests require a mobile number and explicit permission. The permission wording, version, status, server timestamp, page and preference are recorded.
Account security and deletion
Necessary secure, HttpOnly cookies identify the sign-in session and help prevent forged requests. Sessions expire after seven days; sign-out revokes the current session. Verification challenges expire after ten minutes. Rate limits use keyed hashes of request identifiers, including the IP address supplied by Cloudflare; raw IP addresses are not stored in the lead database. Hosting providers may process their own request metadata under their service terms.
Account and saved business records remain until the business completes deletion under its approved retention requirements. The account page records authenticated deletion requests for manual review and sends an internal notice; it does not immediately erase business records or backups. Deletion must cover D1, the private Sheet and retained notification copies, subject to applicable retention obligations. Clearing browser storage alone does not delete online records. Contact Jesse for questions about retention or deletion. No external analytics receives mortgage or debt values.
Realtor email delivery
The separate Realtor scenario delivery endpoint still has no connected production email adapter. Opening your mail app is not confirmation that an email was sent or received.
External scheduling and optional features
This website links to external Google Calendar Appointment Schedule pages. Google handles availability and appointment booking; information you enter on Google's booking page is handled through that service. This website does not create the appointment. Text and call contact requests are separate from marketing subscriptions. The site itself does not enable external analytics or advertising tracking. Privacy Choices controls browser preferences and does not grant contact permission.
Optional mortgage market widget
When available, the National Mortgage Rate Averages section includes an optional Optimal Blue Mortgage Market Indices (OBMMI™) widget. It does not load until you choose “Show Optimal Blue rates.” Loading it connects your browser to Optimal Blue and may load third-party analytics, fonts, and cookies inside the widget. Your IP address and browser information may be shared with Optimal Blue and its providers. SeeOptimal Blue's privacy policy.
Sensitive information
Do not enter Social Security numbers, dates of birth, full account details, or loan documents into this marketing website. The approved external mortgage application handles actual loan information.
