What this website does not do
This site is a set of static files. It runs no JavaScript, sets no cookies, embeds no analytics or advertising tags, and carries no tracking pixel. There is no account and no login. We do not build a profile of you as you read, and could not if we wanted to.
Nothing reaches us unless you choose to send it: either the working-session form on the Evaluate page, or an ordinary email.
If you use the form
The form asks for your name and work email, which are required so we can reply, and optionally your organization, role, organization type, the application you are interested in, the kind of evaluation material you prefer, and a free-text message. We also record the date, the submitting IP address and the browser user-agent string, which is ordinary practice for a public form and is used to investigate abuse.
Where it goes. The submission is stored in an encrypted, private store inside our own cloud environment, and a copy is emailed to us so a person sees it. It is not sent to a third-party form service, a CRM, or a marketing platform.
How long we keep it. Enquiries are retained for 24 months and then deleted automatically. Ask us to delete yours sooner and we will.
What we do with it. We reply to you. That is the whole purpose. Submitting the form does not add you to a mailing list, and we do not sell or rent contact information to anyone for any purpose.
What our hosting provider records
Like any website, ours generates standard server logs, which our hosting provider retains for a limited period. We use them only to keep the site running and to investigate abuse. We do not combine them with other information or use them to identify individual visitors.
If you email us
We receive what you send: your name, your organization, your email address and your message. We use it to answer you and to carry on the conversation you started. We do not add you to a marketing list because you wrote to us, and we do not sell or rent contact information to anyone, for any purpose. Ask us to delete your correspondence and we will.
Borrower documents in the platform: the part that matters to a lender
This section describes the product, not this website. It is stated here because it is the question every prospective customer asks, and it should be answerable without a contract.
Your documents are not training data. Borrower documents you process through the platform, and the findings drawn from them, are not used to train any model, not ours, and not our model provider's. Any future mortgage-domain model would use customer data only under a separate, explicit, written agreement that you sign knowingly.
A third-party foundation model reads the documents. Document content is processed by a general-purpose vision-language model from an established provider, running inside our own cloud environment. We state this plainly because implying that we had built the model ourselves would be false. We will name the provider under a mutual NDA.
Data is scoped by tenant. The data model is tenant-aware throughout and login is token-based with session expiry. Enforced end-to-end isolation and role-based administration are on the roadmap rather than in place; we state this plainly rather than let a diligence questionnaire discover it.
Retention and deletion are contractual. Retention periods, deletion on request and destruction at end of term are set in your agreement rather than left to a default. Ask and we will send the current terms before a pilot, not after.
Vendor due diligence
If you are assessing us as a service provider, including under Fannie Mae Lender Letter LL-2026-04 or Freddie Mac Bulletin 2025-16, whose obligations extend to the AI your vendors use: we expect a written assessment and will answer it in writing.
Your choices
You may ask what we hold about you, ask us to correct it, or ask us to delete it. Use the contact form, or write to support@ritara.ai. Because this site sets no cookies, there is no consent banner to manage and nothing to opt out of.
Who is responsible for this information
The data controller for information collected through this website is riTara Inc, the legal entity that operates the platform. That name appears here to identify the responsible party and nowhere else on this site.
Where information is processed
We are based in the United States and process information there. If you contact us from elsewhere, your message is transferred to and processed in the United States.
Changes
We will post any updated policy on this page with a new effective date. This version supersedes the policy dated 8 September 2026, which described the same processing under the site's previous product name, and the policy dated 10 January 2026, which described cookies, analytics and a contact form used by an earlier website. None of those are present on this one.