Last updated: February 4, 2026

This Privacy Policy describes our policies and procedures on the collection, use, and disclosure of your information when you use the Service and tells you about your privacy rights and how the law protects you.

We use your Personal Data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

Words with capitalized initial letters have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or plural.

Definitions

For the purposes of this Privacy Policy:

• You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable. Under GDPR, You may be referred to as the Data Subject or User.
• Company (referred to as “the Company,” “We,” “Us,” or “Our”) refers to MaxClass LLC. For the purposes of GDPR, the Company is the Data Controller.
• Affiliate means an entity that controls, is controlled by, or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote.
• Account means a unique account created for you to access the Service or parts of the Service.
• Website refers to MaxClass, accessible from www.maxclass.com.
• Service refers to the Website and related online services.
• Country refers to: United States.
• Service Provider means any natural or legal person who processes data on behalf of the Company, including third-party companies or individuals employed by the Company to facilitate the Service, provide the Service, perform services related to the Service, or assist in analyzing how the Service is used. Under GDPR, Service Providers are Data Processors.
• Third-party Social Media Service refers to any website or social network through which a user can log in or create an account to use the Service.
• Personal Data is any information that relates to an identified or identifiable individual. Under GDPR, Personal Data includes information such as a name, identification number, location data, online identifier, or factors specific to identity. Under CCPA, Personal Data includes information that identifies, relates to, describes, or could reasonably be linked to you.
• Cookies are small files placed on your device that store details of your browsing history and other uses.
• Device means any device that can access the Service such as a computer, cellphone, or tablet.
• Usage Data refers to data collected automatically, either generated by use of the Service or from the Service infrastructure.
• Data Controller (GDPR) refers to the Company as the legal person which alone or jointly determines the purposes and means of processing Personal Data.
• Do Not Track (DNT) is a concept promoted by U.S. regulators for a mechanism that allows internet users to control tracking across websites.
• Business (CCPA) refers to the Company as the legal entity that collects consumers’ personal information and determines the purposes and means of processing.
• Consumer (CCPA) means a natural person who is a California resident.
• Sale (CCPA) means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating a consumer’s personal information to another business or third party for monetary or other valuable consideration.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using our Service, we may ask you to provide certain personally identifiable information that can be used to contact or identify you. This may include, but is not limited to:

• Email address
• First name and last name
• Address, State, Province, ZIP/Postal code, City
• NMLS ID Number
• Phone number (including mobile number), if provided

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as your device’s IP address, browser type, browser version, pages visited, time and date of visits, time spent on pages, unique device identifiers, and other diagnostic data.

When you access the Service via a mobile device, we may collect certain information automatically, including the type of mobile device, unique device ID, IP address, operating system, and browser type.

We may also collect information that your browser sends whenever you visit the Service.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies (e.g., beacons, tags, and scripts) to track activity on our Service and store certain information to improve and analyze the Service.

You can instruct your browser to refuse all Cookies or to indicate when a Cookie is being sent. If you do not accept Cookies, you may not be able to use some parts of our Service.

Cookies can be Persistent or Session Cookies. Persistent Cookies remain on your device when you go offline; Session Cookies are deleted when you close your browser.

We use Cookies for purposes including:

• Necessary / Essential Cookies (Session) – required for core website functionality
• Notice Acceptance Cookies (Persistent) – remember cookie consent choices
• Functionality Cookies (Persistent) – remember preferences
• Tracking and Performance Cookies (Persistent) – measure traffic and performance (may be administered by third parties)

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

• To provide and maintain the Service, including monitoring usage
• To manage your Account
• For performance of a contract (registrations, purchases, course services)
• To contact you by email, telephone, SMS/text message, or other electronic communications regarding updates, service notices, and course-related information
• To provide news, special offers, and general information about other services we offer similar to those you have purchased or inquired about, unless you opt out
• To manage your requests

SMS/Text Messaging (Mobile Communications)

If you provide your mobile number, you understand that we may send you transactional and service-related text messages (for example: class reminders, schedule changes, login/technical support details, and important course notices). With your consent where required, we may also send marketing texts about MaxClass courses and offerings.

• Message and data rates may apply.
• Message frequency varies.
• You can opt out at any time by replying STOP to any message.
• For help, reply HELP or contact info@maxclass.com.

Consent to receive marketing text messages is not a condition of purchase.
If you opt out of SMS, we may still contact you via email or phone for transactional or service-related purposes where permitted by law.

Sharing of Your Personal Data

We may share your personal information in the following situations:

• With Service Providers: to monitor/analyze the Service, process payments, deliver courses, provide customer support, and send communications
• For business transfers: in connection with a merger, sale of assets, financing, or acquisition
• With Affiliates: in which case we require affiliates to honor this Privacy Policy
• With business partners: to offer certain products, services, or promotions
• With other users: if you choose to share information in public areas or via social media logins (where applicable)

SMS/Telephone Opt-In Data Protection
No mobile opt-in data (including SMS/text messaging opt-in information and consent records) will be shared with third parties or affiliates for their marketing or promotional purposes.

Retention of Your Personal Data

We retain Personal Data only as long as necessary for the purposes set out in this Privacy Policy, including compliance with legal obligations, dispute resolution, and enforcement of agreements.

Usage Data is generally retained for a shorter period, except when used to strengthen security or improve functionality, or when legally required.

Transfer of Your Personal Data

Your information may be processed at the Company’s operating offices and other locations where the parties involved in processing are located. This means your information may be transferred to — and maintained on — computers located outside your jurisdiction where data protection laws may differ.

We take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy.

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred.

Law enforcement

We may disclose Personal Data if required by law or in response to valid requests by public authorities.

Other legal requirements

We may disclose Personal Data in good faith where necessary to:

• comply with a legal obligation
• protect and defend the rights or property of the Company
• prevent wrongdoing related to the Service
• protect users or the public
• protect against legal liability

Security of Your Personal Data

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect Personal Data, we cannot guarantee absolute security.

Detailed Information on Processing

Analytics

We may use third-party analytics providers such as Google Analytics to monitor and analyze use of the Service. For more information on Google privacy practices, visit: https://policies.google.com/privacy

Email Marketing

We may use your Personal Data to contact you with newsletters, marketing, or promotional materials. You can opt out using unsubscribe links or by contacting us.

Payments

If we provide paid services, we may use third-party payment processors. We do not store your payment card details; they are provided directly to processors whose use is governed by their own policies (e.g., PCI-DSS compliant processors).

GDPR Privacy

Legal Basis for Processing

We may process Personal Data under: consent, contract performance, legal obligations, vital interests, public interests, and legitimate interests.

Your Rights under GDPR

Where applicable, you may request access, correction, deletion, objection to processing (including direct marketing), portability, and withdrawal of consent.

To exercise rights, contact us. We may request identity verification.

CCPA Privacy

Your Rights under the CCPA

California residents may have rights including notice, access, deletion, and non-discrimination, and the right to opt out of the sale of personal information.

Do Not Sell My Personal Information

We do not sell personal information. However, some Service Providers (such as advertising/analytics partners) may use technology that could be considered a “sale” under CCPA definitions. You may be able to opt out via cookie banners or device/browser settings.

“Do Not Track” (CalOPPA)

Our Service does not respond to Do Not Track signals. You can enable or disable DNT through your browser settings.

Children’s Privacy

Our Service does not address anyone under the age of 13, and we do not knowingly collect Personal Data from children under 13.

Links to Other Websites

Our Service may contain links to third-party websites not operated by us. We are not responsible for their content or privacy practices.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated Policy on this page and update the “Last updated” date.

Contact Us

If you have questions about this Privacy Policy, contact us:

Email: info@maxclass.com

Refund Policy

There are no refunds for cancelations on the part of the student. In the event a student needs to cancel, the amount paid will be applied to future classes, provided that a WRITTEN request is received in our office one business day prior to the start of the class. You can reschedule at no charge by notifying the office by email at info@maxclass.com at least one business day before the scheduled class.

Rescheduling

Students may reschedule at no charge by notifying the office by email at info@maxclass.com at least one business day before the scheduled class.

Cancellations

In the unlikely event that a course is canceled, for any reason including insufficient enrollment, you will be given a complete refund or the opportunity to transfer to another seminar at no charge.

No Shows

A "no show" is someone who does not show up for a registered class AND without any advance notice.  There are no refunds for "no shows."  

Certificates

Certificates will be hand delivered or emailed to students immediately upon successful completion of each class.  

Examinations

Students will be required to take and pass examinations, as mandated by NMLS rules.

Attendance

Per NMLS requirements for MLOs, latecomers will not be admitted after 10 minutes of the start of class. Attendees will be required to show proof of identity at check-in.

Student Rules of Conduct

All students will be provided a copy of the NMLS-approved Student Rules of Conduct in advance of the start of the course, and must sign and acknowledge receipt and acceptance upon signing in for the class. Instructors or course facilitators will also summarize and explain the Rules of Conduct at the beginning of each class. We will retain a signed copy of the ROCS for five (5) years.

Data Retention Policy & Attestation

We will retain and store all course materials, registration information, course sign-in documents, certificates of completion and any and all other required data or documents for a minimum of five (5) years from the last date the course is taught or administered. Such materials will be stored in the medium in which they were created, with backup files made available in the case of data systems that become outmoded (i.e., we’ll retain PDF versions of documents created in systems if such systems become obsolete.) The data and documents will be available at our company headquarters, and via any cloud storage systems, if available.

We hereby attest to having in place processes for the retention of data and documents associated with the delivery of NMLS approved courses for a period of five years. Further, we agree that NMLS retains the ability to audit Course Data, as needed, to ensure that we are properly administering courses and tracking student participation. We will make Course Data available to SRR within 14 calendar days of a written request from SRR.

Instructors

Instructors chosen for our classes will all have significant experience in the mortgage industry, either as an industry professional, as a federal or state regulator, or as an associated mortgage GSE professional. Instructors will have the teaching, communication and interpersonal skills to effectively lead a class, and be able to convey complex topics in understandable terms.

We will actively seek instructors who have verifiable industry experience and subject matter expertise. We will interview and vet the credentials of all instructors, ensuring that they meet all NMLS requirements. Our instructors shall be free of conflicts of interest (for example, we will not employ professionals to teach where such arrangements would have them teaching students from the same company, or affiliated company, from which they are employed).

‍

Facilitator Capacity Policy

Webinar courses have at least one facilitator. For larger groups of students, more facilitators will be present with a facilitator ratio of at least 1:50. The facilitator will assist with sign-in and sign-out, attendance tracking, and addressing tardiness and lack of student participation during the course.

Lack of Presence & Class Tardiness Policy 

All students must be on camera and visible from the shoulders up, for the entirety of the course, except during sanctioned breaks. Students must be engaged and actively participating during the webinar. Students cannot be on phone calls, texting, or otherwise distracted during the webinar. Students are required to participate in webinars from their laptops or desktop computers. The use of their cell phone is not permitted.

The facilitator has the authority to remove a student for lack of participation as follows:

1. If the student is off camera or is disengaged from the webinar for a cumulative 10 minutes or more of the course, they will be removed with the potential option to reschedule their webinar on another date at the provider's discretion/availability.
2. If the student answers less than 90% of the engagement activities (polls, quizzes, activities, etc.), they will not receive credit for the course and will need to take another course or webinar to receive credit.

The facilitator shall address tardiness as follows:

1. For a class that is 1 to 2 credit hours, if the student is 10 minutes or more late, the student will not be allowed to enter the class.
2. For a class that is 3 or more credit hours, if the student is 15 minutes or more late, the student will not be allowed to enter the class.

We reserve the right to remove a student for distracting or inappropriate behavior, including abusive or inappropriate language in the chat or on camera.

Registration, KBA, Attendance, Student Participation, Rules of Conduct, and Course Documents

Registrations and enrollment for webinars are conducted through MaxClass' website and our LMS (Moodle). Registration includes creating a unique username and password to access the webinar within the LMS. Acceptance of the Rules of Conduct, downloading course materials, accessing the Zoom meeting link, and receiving the course completion certificate after the webinar all take place within the webinar course housed within our LMS.

For identification verification purposes, both before and during the webinar, students will be required to complete Knowledge Based Authentication (KBA) questions based on a student questionnaire completed by the student prior to the start of the webinar. 

Additionally, we will verify attendance by keeping the course chat record and using an attendance tool available through Zoom.

The facilitator will also ensure that all students are participating through visual verification.

As soon as students complete the registration process, they will be provided with all course documents within the webinar course, accessible through our LMS. Downloading the course documents (including the textbook and syllabus) is mandatory, and students are encouraged to take notes throughout the course.

The Rules of Conduct must be accepted within our LMS by the student before they will receive access to the Zoom meeting link. A copy of the ROC is also provided on the second page of the course syllabus.

Certificates & Course Completion

Students will receive their certificate via the webinar course, accessed through our LMS, after the course. Course completion will be reported to the NMLS within seven (7) calendar days.

Attendance records will be retained for all webinars will be kept for five years.

Technical Requirements

MaxClass uses ZOOM as our webinar platform. If connection issues occur, students are expected to proactively communicate issues to the instructor or facilitator immediately.

Acceptable devices include:

• Desktop computers
• Laptops
• Tablets – must have all the same compatibility as a desktop and/or laptop (camera,  keyboard, etc.)

NOTE: Cell phones are not an acceptable device.

To effectively view video online or from a remote connection, students must have a high-speed (broadband) internet connection or video broadcast capability.  Zoom is compatible with all common internet browsers, including Google Chrome, Microsoft Edge, Mozilla Firefox, and Safari. If the student anticipates any issues with joining the webinar or has any technical questions related to Zoom, they will be encouraged to contact us before the day of the webinar so that we can assist them in navigating the potential issue. If a technical issue arises on the day of the webinar, we will do our best to assist the student, but if it keeps the student from entering the course on time, they may be asked to reschedule.