27 ms·

Allow me to expound on @kojeovo's remark. Please take this as a constructive criticism to improve your success potential. Much of it is from a quick glance, a

Allow me to expound on @kojeovo's remark. Please take this as a constructive criticism to improve your success potential. Much of it is from a quick glance, and am sure there are many other facets to improve. A business is not just about the product. Your Privacy Policy. There is no default way to download it (see 9.), and since it is window-ed cannot print entire doc. That means I cannot keep a copy of it for myself. > We collect the following types of information: > Mortgage Documents: Loan Estimates and Closing Disclosures you upload for analysis. Okay, but > 4. Data Security > We implement industry-standard security measures to protect your information from unauthorized access, disclosure, alteration, and destruction. This means nothing. Are you ISO 27001:2022, NIST SP 800-53, CIS, CE+, Essential Eight, or something else? Have you been audited, and proof? Who is your ISP? What regs do you follow around data sovereignty? Terms of Service. Again, no default way of download. Overall, I would never agree to this ToS. It demands all kinds of requirements on the user, but takes no responsibility for anything - or as described above, explain how you will protect your customers. You have no reference anywhere where you are geographically. No address, no about us, no who you are. I would be very leery on uploading anything.

mmh0000 2y ago
Would it matter if they had a "perfect" privacy policy? I don't believe there's anything legally that enforces it. So they can promise the moon then turn around and sell your data. Maybe I'm wrong here, but, My mental model of privacy policies and the like has always been: This is a lie, the company will do whatever it wants with my data. And I will have no recourse. As such I've always acted accordingly. And very few websites have legit info on me.
- T4iga 2y ago
  I think acting 'as if' is the safe option here but encouraging change for the better in someone willing to engage in dialog is still better than not doing it. Maybe you didn't intend to make a counterpoint, i just wanted to point that out.
adamtaylor_13 2y ago
Legitimately curious, what’s the worst they could do with this data?
- b1ngb0n1 2y ago
  Aside from the personal details (name, address, etc), they can collect pricing info on houses, run analytics, and swoop the deal with a slightly better offer or better yet, sell it to wholesale buyers, reits, and whoever is interested in stealing the deal.
  - scottishbee 2y ago
    That...is not how mortgage servicing companies operate.
    - gruez 2y ago
      People aren't concerned about giving their details to a mortgage servicing company, they're concerned about giving their details to a random website called "closing.wtf", which promises to provide mortgage advice for free with no other obvious revenue source.
      - aaln 2y ago
        Lol no revenue source and a promise to never sell or share their data. Gotta figure this one out...
        baldeagle 2y ago
        At least put a patron link on there or something, so people can have a legitimate way to pay for the cost associated with running the website. Perhaps make a suggested amount of 10% of the savings. This gives you a obvious profit motive, and makes you seem more sketchy because you now have more skin in the game to keep it operating as a valid and useful business service
  - 2y ago
aaln 2y ago
Thanks for the constructive feedback. I just added a way to easily download the entire privacy policy and terms of service, also quickly added an about page with some info about me - https://closing.wtf/about https://closing.wtf/about Eventually I'm going to get a certification and will keep your other points in mind.
- doctorpangloss 2y ago
  I think based on your responses so far, it’s disappointing, but people should not upload these docs. There isn’t anything actionable in them. It seems like you are running some kind of scheme to collect these documents. And it’s not clear why you need them at all: you could provide the same advise to everyone regardless of their contents, which is to compare options, or to ask for more lender refunds.
- meowster 2y ago
  > industry-standard security measures The industry-standard is to get hacked and have your info leaked online. "Industry-standard" is like saying "military-grade"
- paulcole 2y ago
  Just replace the entire contents of the privacy policy with the word “None.” You’ll never ever please the privacy commenters on HN who are armchair security enthusiasts. They’re never going to use your product and they’re never going to stop complaining if you show your product to them. Normal people just don’t care. For a tiny side project spend your time on the thing that’s potentially useful to people not trying to appease the privacy crowd on HN.

mmh0000 2y ago

Would it matter if they had a "perfect" privacy policy? I don't believe there's anything legally that enforces it. So they can promise the moon then turn around and sell your data. Maybe I'm wrong here, but, My mental model of privacy policies and the like has always been: This is a lie, the company will do whatever it wants with my data. And I will have no recourse. As such I've always acted accordingly. And very few websites have legit info on me.

T4iga 2y ago
I think acting 'as if' is the safe option here but encouraging change for the better in someone willing to engage in dialog is still better than not doing it. Maybe you didn't intend to make a counterpoint, i just wanted to point that out.

adamtaylor_13 2y ago

Legitimately curious, what’s the worst they could do with this data?

b1ngb0n1 2y ago
Aside from the personal details (name, address, etc), they can collect pricing info on houses, run analytics, and swoop the deal with a slightly better offer or better yet, sell it to wholesale buyers, reits, and whoever is interested in stealing the deal.
- scottishbee 2y ago
  That...is not how mortgage servicing companies operate.
  - gruez 2y ago
    People aren't concerned about giving their details to a mortgage servicing company, they're concerned about giving their details to a random website called "closing.wtf", which promises to provide mortgage advice for free with no other obvious revenue source.
    - aaln 2y ago
      Lol no revenue source and a promise to never sell or share their data. Gotta figure this one out...
      - baldeagle 2y ago
        At least put a patron link on there or something, so people can have a legitimate way to pay for the cost associated with running the website. Perhaps make a suggested amount of 10% of the savings. This gives you a obvious profit motive, and makes you seem more sketchy because you now have more skin in the game to keep it operating as a valid and useful business service
- 2y ago

aaln 2y ago

Thanks for the constructive feedback. I just added a way to easily download the entire privacy policy and terms of service, also quickly added an about page with some info about me - https://closing.wtf/about https://closing.wtf/about Eventually I'm going to get a certification and will keep your other points in mind.

doctorpangloss 2y ago
I think based on your responses so far, it’s disappointing, but people should not upload these docs. There isn’t anything actionable in them. It seems like you are running some kind of scheme to collect these documents. And it’s not clear why you need them at all: you could provide the same advise to everyone regardless of their contents, which is to compare options, or to ask for more lender refunds.
meowster 2y ago
> industry-standard security measures The industry-standard is to get hacked and have your info leaked online. "Industry-standard" is like saying "military-grade"
paulcole 2y ago
Just replace the entire contents of the privacy policy with the word “None.” You’ll never ever please the privacy commenters on HN who are armchair security enthusiasts. They’re never going to use your product and they’re never going to stop complaining if you show your product to them. Normal people just don’t care. For a tiny side project spend your time on the thing that’s potentially useful to people not trying to appease the privacy crowd on HN.