Effective Date: January 22, 2026
This Privacy Policy describes how M4 Labs LLC ("VisionXLab," "we," "us," or "our") collects, uses, and discloses your Personal Information when you visit our website at https://www.visionxlab.com (the "Website") or otherwise interact with us.
How We Handle Your Information: VisionXLab is a lead generation company. When you submit a mortgage inquiry, we deliver it to one licensed mortgage professional so that they can contact you about it, and they pay us a fee for that delivery. Under the California Consumer Privacy Act, a delivery made for payment is a "sale" of Personal Information, and Section 5 discloses it as one. We do not sell your information to data brokers, we do not disclose it to anyone unrelated to the inquiry you submitted, and we do not resell the same inquiry to a list of buyers. You can opt out at any time on our Do Not Sell or Share My Personal Information page.
1. Information We Collect
A. Information You Provide Directly
When you voluntarily submit a form on our Website, we may collect the following types of Personal Information:
- Names (first and last)
- Email addresses
- Telephone numbers
- Mailing addresses
- Estimated credit scores
- Loan amounts sought
- Property values
- Property types
B. Information Collected Automatically
When you visit our Website, we may automatically collect certain technical and usage information, including:
- Technical Data: IP addresses, browser types, operating systems, and device types.
- Activity Data: Pages visited, time spent on pages, referring URLs, and click patterns.
We use cookies, pixels, and web beacons to analyze traffic, prevent fraud, and improve user experience.
2. How We Use Your Information
We use the Personal Information we collect for the following purposes:
- To deliver the mortgage inquiry you submitted to a licensed mortgage professional, who pays us a fee for it. See Section 5.
- To communicate directly with you regarding the services you requested.
- To provide customer service and respond to your inquiries.
- For internal analytics to improve our website performance and user experience.
- To comply with applicable laws and regulations (including GDPR and US state privacy laws).
- To detect and prevent fraud or other unauthorized activities.
3. Disclosure of Information
We do not sell your Personal Information to data brokers, and we do not disclose it to anyone unrelated to the inquiry you submitted. We do deliver mortgage inquiries to licensed mortgage professionals in exchange for a fee, which is a "sale" under the California Consumer Privacy Act and comparable US state laws. Section 5 describes that delivery in full and explains how to opt out of it.
Apart from that delivery, we may share your Personal Information only in the following limited circumstances:
- Service Providers: We share data with trusted service providers (e.g., CRM systems, email delivery platforms, data hosting, IT support) who are bound by confidentiality agreements and process data solely on our behalf.
- Affiliates and Lead Generation Partners: We may share Personal Information with our corporate affiliates and with lead generation partners, and only to the extent needed to provide, deliver, and support the services you requested. These parties are bound by written confidentiality obligations, process the information solely on our behalf and for the purpose it was disclosed to them, and may not use it for their own marketing or promotional purposes.
- Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your Personal Information may be transferred as part of that transaction.
Mobile Information: No mobile information will be shared with third parties or affiliates for marketing purposes. Text messaging originator opt-in data will not be shared with any third parties. This exclusion applies to every category of sharing described above, including sharing with affiliates and lead generation partners.
4. GDPR Rights (EU/EEA Compliance)
If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR).
Data Controller
M4 Labs LLC
30 N Gould St Ste R
Sheridan, WY 82801, United States
Email: legal@visionxlab.com
Legal Basis for Processing
We process your Personal Information based on one or more of the following legal bases:
- Consent: You have given consent by voluntarily submitting your information through our forms.
- Legitimate Interest: Processing is necessary for our legitimate interests, such as direct marketing, fraud prevention, and network security, provided these interests do not override your fundamental rights.
- Contract: Processing is necessary for the performance of a contract or to take pre-contractual steps at your request.
Data Retention
We retain your Personal Information generally for a period of five (5) years from your last interaction with us, unless a longer period is required by law or necessary for legitimate business purposes.
Your Rights
Under the GDPR, you have the right to:
- Access your Personal Information.
- Correct inaccurate or incomplete data.
- Request deletion of your Personal Information.
- Object to or restrict certain types of processing.
- Data portability: receive your data in a structured, commonly used format.
- Withdraw consent at any time (where processing is based on consent).
To exercise any of these rights, please contact us at legal@visionxlab.com.
5. US State Privacy Rights
5.1 Sale of Personal Information for Lead Generation
Two different kinds of people give us information, and only one of them is described in this section. If you submitted a mortgage inquiry, this section is about you. If you are a mortgage professional who contacted us about buying our services, your business contact details are not sold or shared, and section 5.3 marks them accordingly.
When you submit a mortgage inquiry through one of our landing pages, forms or lead ads, we deliver the information from that submission to one licensed mortgage professional so that they can contact you about it. They pay us a fee for that delivery. From that point they hold your information independently and use it under their own privacy policy, which we encourage you to read.
Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and under comparable laws in other US states, disclosing Personal Information to a third party for monetary or other valuable consideration is a "sale." Delivering your inquiry to a mortgage professional who pays for it meets that definition, so we disclose it as a sale rather than describing it as something else. Sending advertising and conversion data to platforms such as Meta and Google may also count as "sharing" for cross-context behavioral advertising.
What that does not include: we do not sell your information to data brokers, we do not sell it to anyone unrelated to the inquiry you submitted, and we do not resell the same inquiry to a list of buyers. The purpose of the exchange is to connect you with one mortgage professional who can look at what you asked about.
5.2 Notice at Collection
We collect the categories of Personal Information described in Section 1, for the purposes described in Section 2. We sell the information from a mortgage inquiry to the mortgage professional who receives it, as described in section 5.1, and we share advertising and analytics identifiers with the platforms described in Section 3. We retain Personal Information for the period described in Section 4. We do not knowingly collect or sell the Personal Information of anyone under 18.
5.3 Categories We Collect, and What Is Sold or Shared
| CCPA category | What we collect | Source | Why | Sold or shared |
|---|---|---|---|---|
| A. Identifiers | Name, email address, telephone number, mailing address, IP address, online identifiers | You; our forms and lead ads; cookies and pixels | Routing your inquiry, communication, fraud prevention | Yes. Sold to the mortgage professional who receives your inquiry; online identifiers shared with advertising platforms |
| B. Customer records (Cal. Civ. Code § 1798.80(e)) | Name, telephone number, mailing address | You | Routing your inquiry, communication | Yes. Sold to the mortgage professional who receives your inquiry |
| C. Protected classifications | Not collected | Not applicable | Not applicable | No |
| D. Commercial information | Loan amount sought, property type, property value | You | Routing your inquiry | Yes. Sold to the mortgage professional who receives your inquiry |
| E. Biometric information | Not collected | Not applicable | Not applicable | No |
| F. Internet and network activity | Browser type, operating system, device type, pages visited, time on page, referring URLs, click patterns | Cookies, pixels and web beacons | Analytics, advertising measurement, fraud prevention | Yes. Shared with advertising and analytics platforms |
| G. Geolocation | Approximate location from your IP address and from the mailing address you give us. No precise GPS location | You; cookies | Routing your inquiry to a professional who serves your area; analytics | Yes. Sold to the mortgage professional who receives your inquiry |
| H. Audio, electronic and visual | Records of the calls and text messages described in Section 6 | Calls and SMS | Service quality, dispute resolution, proof of consent | No |
| I. Professional or employment | Business contact details and role, from mortgage professionals who contact us about our services | You | Responding to your business inquiry | No |
| J. Education | Not collected | Not applicable | Not applicable | No |
| K. Inferences | Whether the inquiry you submitted meets the criteria a mortgage professional has set | Derived internally from the categories above | Deciding which mortgage professional, if any, receives your inquiry | Yes, where it forms part of the record delivered |
| L. Sensitive Personal Information | Estimated credit score, loan amount sought and property value. We treat these as sensitive because several state laws treat financial information that way | You | Routing your inquiry | Yes. Sold to the mortgage professional who receives your inquiry. You may ask us to limit this; see 5.5 |
5.4 Your Rights
Depending on your state of residence, you may have the right to:
- Know what Personal Information we collect, use, disclose, and sell or share, including the categories, sources, purposes and recipients.
- Access the specific pieces of Personal Information we hold about you.
- Delete your Personal Information, subject to certain exceptions.
- Correct inaccurate Personal Information.
- Opt out of the sale or sharing of your Personal Information.
- Limit the use of Sensitive Personal Information to the purposes the CPRA permits.
- Obtain a portable copy of your Personal Information in a commonly used format.
- Appeal a decision, where your state's law provides for an appeal.
- Non-Discrimination for exercising your privacy rights. Exercising them does not change the price or quality of anything we provide to you.
5.5 How to Exercise Them
- Opt out of the sale or sharing of your information: use our Do Not Sell or Share My Personal Information page, or email legal@visionxlab.com with the subject "Do Not Sell My Personal Information".
- Limit the use of Sensitive Personal Information: email legal@visionxlab.com with the subject "Limit Sensitive Information".
- Any other right above: email legal@visionxlab.com and tell us which one you are exercising and which state you live in.
Please include the name, email address and telephone number you submitted, so that we can find your record. You may use an authorized agent, in which case we will ask for reasonable proof of their authorization. We act on opt-out requests within 15 business days, and we respond to other verifiable requests within 45 days, with one further 45-day extension where that is reasonably necessary and where we tell you about it.
5.6 Opt-Out Preference Signals and Browser Signals
Global Privacy Control (GPC). We treat a browser-based GPC signal as a valid request to opt out of the sale and sharing of personal information, and you do not need to email us as well. In practice, on a visit that sends the signal we do not load the Meta advertising pixel and we do not load Microsoft Clarity, so no advertising or session-recording data about that visit leaves us. We do continue to collect first-party analytics about the visit itself, which is not a sale and is not disclosed to anyone for payment.
A signal is read in your browser, so it applies to the visit rather than to a record we already hold. If you have already submitted an inquiry, send the request on our Do Not Sell or Share My Personal Information page so that we can find and mark that record.
We do not act on "Do Not Track" browser signals, because there is no agreed industry standard for what they mean.
5.7 One Thing an Opt-Out Cannot Do
Opting out stops future sale or sharing. It does not pull back an inquiry already delivered to a mortgage professional: once they hold it, they hold it under their own privacy policy, and you would need to ask them directly. Opting out of sale is also separate from asking us to stop contacting you; Section 6 covers that.
6. TCPA Consent & SMS/Text Messaging
By submitting your telephone number on our Website forms, you expressly authorize VisionXLab to contact you regarding your inquiry via telephone calls, SMS, or MMS text messages. You acknowledge and agree that:
- Such communications may be generated using an automated telephone dialing system (autodialer) or artificial voice.
- You consent to receive these communications even if your telephone number is listed on any corporate, state, or federal "Do Not Call" registry.
- Your consent is not a condition of purchase.
SMS Program Terms
- Message frequency varies based on your inquiry and interactions.
- Message and data rates may apply.
- Reply STOP to opt out of text messages at any time.
- Reply HELP for assistance or contact legal@visionxlab.com.
- Supported carriers include: AT&T, Verizon, T-Mobile, Sprint, and most major US carriers.
7. Children's Privacy
Our services are directed to individuals aged 18 and over. We do not knowingly collect Personal Information from children under the age of 18. If you believe a child has provided us with personal data, please contact us immediately at legal@visionxlab.com, and we will promptly delete such information.
8. Data Security
VisionXLab implements reasonable administrative, technical, and physical security measures (including SSL encryption) to protect your Personal Information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
9. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
M4 Labs LLC
30 N Gould St Ste R
Sheridan, WY 82801, United States
Email: legal@visionxlab.com
© 2025 VisionXLab · M4 Labs LLC. All rights reserved.