Last Updated: Aug 2026

 

1. About This Policy and Legal Entities

This Privacy Policy is provided by Calyx Technology, Inc. DBA Calyx Software and its related entities, including all legal entities operating under the Calyx name (collectively “Calyx,” “we,” “us,” or “our”). This Policy explains how Calyx collects, uses, shares, and protects personal information in connection with our websites, software products, and related services, including Path, Point, PointCentral, and Zenly (collectively, the “Services”).

 

Calyx is committed to protecting the privacy of individuals who interact with our company and our Services. This Policy is intended to meet our obligations under applicable U.S. federal and state privacy laws, including the Gramm-Leach-Bliley Act (GLBA), and similar laws where applicable.

 

California Residents: If you are a California resident, please see our separate California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) Disclosure, available at, www.calyxsoftware.com/california-consumer-privacy-act-disclosure for a full description of your rights and our obligations under California law.

 

2. Who This Policy Covers

Calyx operates as a business-to-business (B2B) software vendor. Our products and services are designed for and marketed to mortgage lenders, brokers, servicers, and other licensed financial services professionals — not individual consumers. This Policy applies to personal information we collect about:

 

  • Business Contacts: Employees, administrators, loan officers, and other authorized representatives of Calyx’s business clients who access or use our software products and services.
  • Website Visitors: Individuals who visit www.calyxsoftware.com and related Calyx web properties, including prospective clients and their representatives.
  • Sales and Support Contacts: Individuals who contact Calyx for sales inquiries, technical support, training, or customer service.
  • Full name, job title, and employer or company name
  • Business mailing address, email address, and telephone number
  • Username, password, and security credentials for account access
  • Account preferences and communication settings
  • Billing contact information and subscription details
  • Internet Protocol (IP) address or device identifier
  • Browser type, version, and language settings
  • Operating system and device type
  • Referring URL and pages visited on our sites
  • Date, time, and duration of visits
  • Clickstream data and features used within the Services
  • Cookies, web beacons, pixel tags, and similar tracking technologies (see Section 8)
  • Records of your communications with us, including emails, chat transcripts, and support tickets
  • Information you provide to describe a problem or request
  • Call recordings, where permitted by law and with required notice
  • Survey responses and product feedback
  • Public records and business information providers for account verification
  • Our business clients, when they provide authorized user information to provision access to the Services
  • Marketing and lead generation partners for prospective client outreach
  • Integrated technology vendors connected to our platform where you have authorized such integrations
  • Creating and managing user accounts and software licenses
  • Delivering, maintaining, and improving our software products
  • Processing subscription payments and managing billing
  • Providing technical support, training, and customer service
  • Responding to inquiries and communicating about your account
  • Sending product updates, release notes, and service announcements
  • Analyzing usage patterns to improve product functionality and user experience
  • Conducting internal research and development
  • Measuring the effectiveness of our marketing programs
  • Generating aggregated and de-identified analytics reports
  • Protecting against unauthorized access, misuse, or abuse of our systems
  • Detecting and investigating potential security incidents
  • Verifying the identity of account holders and authorized users
  • Complying with applicable laws, regulations, and legal process
  • Enforcing our Terms of Service and other contractual agreements
  • Responding to lawful government or regulatory requests
  • Establishing, exercising, or defending legal claims
  • Sending information about Calyx products, services, and industry events where you have not opted out
  • Personalizing marketing communications based on your role and industry
  • Conducting surveys and collecting feedback to improve our offerings
  • Confirm whether Calyx is processing your personal information and access that information
  • Request correction of inaccurate personal information
  • Request deletion of your personal information, subject to applicable exceptions
  • Opt out of the sale of your personal information or its use for targeted advertising
  • Obtain a portable copy of your personal information

 

This Policy does not govern the collection or use of personal information that Calyx processes on behalf of its business clients as a service provider or data processor. When a Calyx client uses our software to process mortgage applications or related loan data, that client is the data controller responsible for its own privacy practices. Calyx’s role in processing that data is governed by our contractual agreements with those clients, not this Policy.

 

Note: Calyx does not collect Social Security Numbers, government identification numbers, credit scores, income data, or other sensitive financial information directly from consumers as part of its B2B software business. Such information may flow through our software platforms on behalf of and under the control of our lender and broker clients. In that context, Calyx acts as a service provider, not as the data controller.

 

3. Information We Collect

3.1 Contact and Account Information

When you or your organization establishes an account or engages with Calyx, we may collect:

  • Full name, job title, and employer or company name
  • Business mailing address, email address, and telephone number
  • Username, password, and security credentials for account access
  • Account preferences and communication settings
  • Billing contact information and subscription details

 

3.2 Browsing and Technical Information

When you visit our websites or use our web-based applications, we and our service providers may automatically collect:

  • Internet Protocol (IP) address or device identifier
  • Browser type, version, and language settings
  • Operating system and device type
  • Referring URL and pages visited on our sites
  • Date, time, and duration of visits
  • Clickstream data and features used within the Services
  • Cookies, web beacons, pixel tags, and similar tracking technologies (see Section 9)

This information is used to maintain and improve the Services, ensure security, diagnose technical issues, and understand aggregate usage patterns.

 

3.3 Customer Service and Communications Information

When you contact Calyx for support, training, or general inquiries, we may collect:

  • Records of your communications with us, including emails, chat transcripts, and support tickets
  • Information you provide to describe a problem or request
  • Call recordings, where permitted by law and with required notice
  • Survey responses and product feedback

 

3.4 Payment Information

When you or your organization subscribes to our Services, we collect payment information including credit card numbers, billing address, and related financial details. This information is processed by our PCI-compliant payment processors. Calyx does not store full payment card numbers on our systems.

 

3.5 Information from Third Parties

We may receive information about you or your organization from:

  • Public records and business information providers for account verification
  • Our business clients, when they provide authorized user information to provision access to the Services
  • Marketing and lead generation partners for prospective client outreach
  • Integrated technology vendors connected to our platform where you have authorized such integrations

 

4. How We Use Information

4.1 Providing and Supporting the Services

  • Creating and managing user accounts and software licenses
  • Delivering, maintaining, and improving our software products
  • Processing subscription payments and managing billing
  • Providing technical support, training, and customer service
  • Responding to inquiries and communicating about your account
  • Sending product updates, release notes, and service announcements

4.2 Business Operations and Analytics

  • Analyzing usage patterns to improve product functionality and user experience
  • Conducting internal research and development
  • Measuring the effectiveness of our marketing programs
  • Generating aggregated and de-identified analytics reports

4.3 Security and Fraud Prevention

  • Protecting against unauthorized access, misuse, or abuse of our systems
  • Detecting and investigating potential security incidents
  • Verifying the identity of account holders and authorized users

4.4 Legal and Compliance Purposes

  • Complying with applicable laws, regulations, and legal process
  • Enforcing our Terms of Service and other contractual agreements
  • Responding to lawful government or regulatory requests
  • Establishing, exercising, or defending legal claims

4.5 Marketing and Communications

  • Sending information about Calyx products, services, and industry events where you have not opted out
  • Personalizing marketing communications based on your role and industry
  • Conducting surveys and collecting feedback to improve our offerings

You may opt out of marketing communications at any time by following the unsubscribe instructions in any email we send or by contacting us at privacy.policy@calyxsoftware.com.

 

5. How We Share Information

Calyx does not sell, rent, or trade personal information to third parties for their own marketing purposes. We share personal information only in the following circumstances:

 

5.1 Service Providers and Vendors

We share personal information with trusted third-party service providers who perform functions on our behalf, including cloud hosting, payment processing, customer support software, email delivery, and analytics. These providers are contractually bound to use personal information only as necessary to perform services for Calyx and are not permitted to use it for their own independent purposes.

 

5.2 Integrated Vendors

Our software products integrate with third-party vendors to provide enhanced functionality such as compliance services, document management, and pricing engines. When you activate such an integration, limited information necessary to enable that integration may be shared with the relevant vendor. The privacy practices of those vendors are governed by their own privacy policies.

 

5.3 Legal Requirements and Safety

We may disclose personal information when we believe in good faith that disclosure is necessary to comply with applicable law or legal process, respond to a lawful request from law enforcement or regulatory authorities, or protect the rights, property, or safety of Calyx, our clients, or the public.

 

5.4 Business Transfers

If Calyx is involved in a merger, acquisition, asset sale, or similar corporate transaction, personal information may be transferred as part of that transaction. Any successor entity will be required to honor the privacy commitments made under this Policy, including existing opt-out preferences.

 

5.5 With Your Consent

We may share personal information with third parties in other circumstances where you have provided express consent.

 

6. We Do Not Sell Your Personal Information

Calyx does not sell personal information as defined under applicable state privacy laws. Calyx does not share personal information for cross-context behavioral advertising purposes. We do not sell personal information of minors under the age of 16.

 

7. Data Security

Calyx maintains physical, technical, and administrative safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, or destruction. These measures include encryption of data in transit and at rest, access controls, regular security assessments, employee training, and incident response procedures.

Calyx’s security practices are designed to be consistent with our obligations under applicable federal and state law, including the Gramm-Leach-Bliley Act Safeguards Rule as it applies to Calyx’s role as a technology service provider to financial institutions.

No security program is completely infallible. In the event of a security incident affecting your personal information, Calyx will notify affected individuals and relevant authorities as required by applicable law.

 

8. Data Retention

Calyx retains personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. Factors we consider include the duration of our business relationship, applicable legal and regulatory requirements, and the nature and sensitivity of the information. When personal information is no longer needed, we dispose of it securely.

 

9. Cookies and Tracking Technologies

Calyx’s websites use cookies and similar tracking technologies to operate and improve our online services:

 

Type

Purpose

Essential Cookies

Required for the website to function, including login sessions and security features. Cannot be disabled.

Functional Cookies

Remember your preferences and settings to improve your experience.

Analytics Cookies

Help us understand how visitors use our site in aggregate so we can improve performance and content.

Marketing Cookies

Used to measure the effectiveness of our own marketing campaigns only. Not used for third-party behavioral advertising.

 

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our websites. Calyx’s websites may also use web beacons in email communications to measure open rates and engagement. You may opt out by adjusting your email client settings or unsubscribing from our marketing emails.

 

10. Third-Party Websites and Links

Our websites and software products may contain links to or integrations with third-party websites, platforms, and services. Calyx is not responsible for the privacy practices, content, or security of any third-party website. We encourage you to review the privacy policies of any third-party site you access through links or integrations on our platforms. This Policy applies solely to information collected directly by Calyx.

 

11. State Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information. This section describes those rights for residents of states other than California. California residents should refer to our separate CCPA/CPRA Disclosure at www.calyxsoftware.com/california-privacy[BZ1] .

 

11.1 Covered States

The following states have enacted comprehensive consumer privacy laws that may apply to your personal information: Virginia, Colorado, Connecticut, Texas, Oregon, Delaware, Iowa, Indiana, Kentucky, and Rhode Island.

 

B2B Exemption Note: Several of these state laws include exemptions for data processed in a business-to-business context. To the extent Calyx processes your personal information as a B2B service provider and such data falls within a statutory exemption under your state’s law, those rights may not apply. Where they do apply, Calyx is committed to honoring them.

 

11.2 Your Rights

Where applicable under your state’s law, you may have the right to:

 

As noted in Section 6, Calyx does not sell personal information and does not engage in cross-context behavioral advertising, so no action is required to exercise opt-out rights in that regard.

 

11.3 Right to Appeal

Residents of Virginia, Colorado, Connecticut, Texas, and other states that provide an appeal right may appeal a denial of a privacy rights request. If Calyx denies your request in whole or in part, we will provide a written explanation of the basis for our decision. To appeal, contact us at privacy.policy@calyxsoftware.com with the subject line “Privacy Request Appeal.” We will respond within the timeframe required by applicable law.

 

11.4 How to Submit a Request

To submit a privacy rights request, please contact us using the information in Section 12. Include your name, contact information, state of residence, and a description of your request. We will use this information only to process your request and verify your identity.

 

12. Contact Us

If you have questions about this Privacy Policy, wish to submit a privacy rights request, or need to report a privacy concern, please contact us:

 

Contact Method

Details

Email

privacy.policy@calyxsoftware.com

Online Form

www.calyxsoftware.com/privacy-policy[BZ2]

Phone

1-844-684-1146

Mail

Calyx Technology, Inc. DBA Calyx Software Attn: Privacy Officer [Company Address]

 

13. Changes to This Policy

Calyx reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or Services. When we make material changes, we will update the “Last Updated” date at the top of this Policy and post the revised Policy at www.calyxsoftware.com/privacy-policy[BZ3] . We encourage you to review this Policy periodically. Your continued use of our Services after any modification constitutes your acknowledgment of the updated terms.

 

Previous versions of this Policy are available upon request by contacting us at privacy.policy@calyxsoftware.com.

 

This Privacy Policy was prepared for Calyx Technology, Inc. DBA Calyx Software and reflects applicable U.S. federal and state privacy law requirements as of June 2026. This document does not constitute legal advice. Calyx recommends periodic review with qualified legal counsel to ensure continued compliance.