Privacy Policy

Last updated: September 2, 2026 · Applies to paolavaldez.com and its subdomains

Who we are

Paola Sharleen Valdez operates in two separate capacities: as a Loan Officer with New Priority Lending Corp. for mortgage services and as a licensed insurance producer for life insurance. New Priority Lending Corp. does not offer or guarantee insurance. For privacy matters, email hello@paolavaldez.com.

What information we collect

• Information you provide: your name, phone number or email, state of residence or property, goal and message, plus the choice and version of each consent.
• Communications: text messages, emails, chat requests and audio from AI calls when you participate after the recording and monitoring notice.
• Technical information: IP address, locally derived approximate state, browser, referring page and security logs. We do not use that location to make eligibility decisions.
• Anti-abuse security: Cloudflare Turnstile processes technical browser, device and network signals, including the IP address, to verify that forms and chat messages are not automated. We validate every token on the server and do not store the token or secret key. See Cloudflare's Turnstile Privacy Addendum.
• Advertising measurement: we use Meta Pixel and Google and Meta conversion measurement to understand which ads lead to inquiries. We do not show a notice that interrupts navigation. You can turn measurement off at any time under Privacy choices; we also honor Global Privacy Control. When measurement is active, depending on the platform, we send hashed contact identifiers, click identifiers, the public source page and conversion milestones. We do not send documents, free text, Social Security or ITIN numbers, health information, or application or financial-file fields.

Sensitive information and secure channels

Do not send full Social Security or ITIN numbers, full dates of birth, health information, credentials, bank account information or card numbers/CVV through forms, chat, text message or email. Submit such information only through the lender's or carrier's approved secure portal. We do not accept authorization forms that send card numbers by email or to the CRM.

Artificial intelligence assistants

Chat, text messages and phone calls may use an AI assistant that identifies itself as such. Its responses are educational and may contain errors; it does not decide consent, eligibility, approval, price, coverage or suitability. You may request human review. During calls, no audio is transmitted or transcribed until the caller accepts the prior notice; if the caller declines, email is offered as an alternative channel.

Calls you accept may be recorded to address your inquiry and improve service. Audio is stored privately for 90 days and only authorized staff can listen through the CRM. Sensitive or unverified segments may be muted. You may ask to stop recording; the AI call then ends and you can contact us through the form. Transcription needed to handle the conversation is processed in Google Cloud. We also keep a text version of the call, minimized before it is written: identifiers are masked and turns touching sensitive categories — health, immigration or citizenship status, race, religion or sexual orientation — are not stored at all but replaced by a marker. That text lives under the same 90-day window as the audio, is visible only to authorized staff through the CRM, is used solely to follow up on your inquiry, and is deleted if you request erasure of your information.

Text messaging (SMS) program

• There are separate programs for mortgage follow-up and life-insurance inquiries. The text-message checkbox is optional, separate from calls and email, and is not a condition of purchase.
• Message frequency varies. Message and data rates from your carrier may apply.
• Reply STOP, STOP ALL, CANCEL or any reasonable revocation request. Reply HELP/AYUDA for assistance and START to reactivate.
• Your messaging consent and mobile phone number are not shared with third parties or affiliates for marketing purposes.
• Carriers are not responsible for delayed or undelivered messages. Also review the Terms of Use.

How we use it

• To answer your inquiry and follow up on the services you requested (mortgages or life insurance).
• To manage our relationship with you in our internal client management system.
• Measure advertising and send conversion signals to Google or Meta only when measurement has not been turned off.
• To comply with legal and regulatory obligations of the mortgage and insurance industries.

Who we share it with

• We do not sell your information.
• Service providers that operate infrastructure, anti-abuse security, email and telecommunications, including Google Cloud, Cloudflare Turnstile and Telnyx, limited to providing those services.
• In the loan process: with the lender, title company and other necessary participants, with your authorization.
• Google and Meta for optional advertising measurement, limited to the identifiers and conversion signals described above; we do not share documents or sensitive application fields with these platforms.
• Authorities when required by law.

Your rights and choices

Depending on applicable law, you may request access, correction, deletion or portability; learn categories of third parties; withdraw consent; and opt out of sale, targeted advertising or profiling with significant effects. We do not sell personal information. You can change measurement under Privacy choices, use GPC, reply STOP or email hello@paolavaldez.com.

We will verify a request before responding. An authorized agent may submit a request with proof of authority. If we deny a request, you may appeal by replying to the same email with the subject “Privacy appeal.” You may also file a complaint with the appropriate authority. Certain sector-specific duties and exceptions, including GLBA and regulatory recordkeeping, may limit some requests.

Security and retention

We use restricted access, audit logs and security controls in Google Cloud. We retain each category under a published schedule by record class, not for as long as happens to suit us: your file and its follow-up history, 2 years from last use; AI assistant decisions and message records, 2 years; advertising measurement, 400 days; evidence of your consent, 5 years. A valid legal hold suspends any deletion. No system is completely secure.

If you ask us to delete your information, we delete your file, your notes and everything attached to it. One thing survives on purpose: your request not to be contacted, which we keep along with your number for 5 years, because federal law requires honoring it for that long (47 CFR 64.1200(d)(6)) and because suppressing a number requires keeping it. We also keep the minimum fingerprint of the permission you previously gave — the version of the text, the date and its digital signature — with nothing that says who you were. Deleting your file can never be the reason you start getting calls again.

Minors

This site is not directed at children under 18 and we do not knowingly collect their information.

Changes

If we change this policy, we will publish the new version on this same page with its update date.