PRIVACY

Privacy Policy

Effective October 11, 2026

This policy explains what personal information HappyMLO collects when you create an account, buy a course and learn with us. It also explains who can see it, who we share it with and how long we keep it.

Who we are

HappyMLO is the education brand of Molluso Holdings, LLC. In this policy, “we” and “us” mean Molluso Holdings, LLC. We sell and deliver online prelicensing education for Mortgage Loan Originators (MLOs).

What we collect and why

Your account

Your name and email address, so you can sign in and so we can send account emails such as email confirmation and password reset links.
Your password. It is handled by our sign-in service. Our course records do not contain it.
If you choose “Continue with Google”, Google confirms who you are and shares basic account details with our sign-in service, such as your name and email address.
Optional profile details you add in My profile: your NMLS ID, an avatar color and a profile photo. If you sign in with Google, your Google profile photo is copied in as your starting photo. We resize a photo and keep it in private storage. When you replace or remove a photo, the old file is deleted.

Your identity for course credit

Before you start a course, we ask for your legal name and your individual NMLS ID, and we ask you to accept the Rules of Conduct. We save the name, the NMLS ID, the exact rules you accepted and the date and time. We use this record to tie your coursework to you, to issue your certificate and to report your completion.

Your purchases

The courses you order, the price, the state and licensing agency you chose, the order status and the date.
Reference numbers from our payment processor for your checkout and payment, so we can confirm payment and handle refunds.
You enter your card details on a checkout page hosted by our payment processor, Stripe. We do not receive or store your card number.

Your learning records

Course providers have to show that each learner did the work and spent the required time. To do that, we record:

The time you are active in each lesson. Our server logs it in short intervals using its own clock, along with a random ID for your browser session.
Your answers and scores on lesson questions.
When you start and finish each video clip, and your answer to the multiple-choice checkpoint after it, where the clip has one.
Each end-of-course exam attempt: the questions you were given, your answers, your score and the start and finish times.
Your assignment and workshop responses, and the review and feedback your instructor gives.
Your written answers to the module questions, your questions and replies, and the messages you and your instructor exchange in “Ask your instructor”.
The review of your completion and your certificate, which shows your legal name, NMLS ID, course, education hours and issue date.
Requests you send us, such as a retake request, a complaint, a refund or cancellation request, or course feedback.

Pilot testers

If we invite you to test a course before it is released, we record a tester code, how long each item takes you, your practice answers and your workshop responses. Notes you take in the pilot tools are saved in your own browser until you export them.

Technical information

Our hosting providers process technical details such as your IP address and browser type in order to deliver the site. We use your IP address for a short time to limit repeated sign-in attempts. The site does not load advertising trackers or analytics trackers.

Who can see your work

You take this course on your own. No other learner can see your name, your answers, your questions or any of your work.
Your written answer to a module question, and any reply to it, is seen only by you, your instructors and our administrators.
Your conversation in “Ask your instructor” is seen only by you, your instructors and our administrators.
While you have that conversation open during your course, we note the time every few seconds. Once you have sent a message, your instructors and our administrators can see that you are there, and you can see when your instructor has a class page open. We keep only the latest time for each account, not a history. It is not part of your education records, and it stays until a newer time replaces it or your account is deleted.
Your instructors and our administrators can see your coursework. This includes your answers to the module questions, your questions, your conversation with your instructor, assignments, workshop responses, time records, exam results and certificate.

Please do not put real borrower information or other people’s personal details in your answers or coursework.

We share personal information with the parties listed here.

Companies that run the service for us

Supabase (database, sign-in and file storage). It holds your account, your course records, your profile photo and our course videos.
Email delivery. Account emails, such as confirmation and password reset links, are sent to your email address through our sign-in service.
Vercel (website hosting). It delivers the site and runs our application.
Stripe (payments). We send Stripe your account and order reference numbers and the names and prices of the courses you are buying. Stripe collects your payment details directly from you.
Google (optional sign-in). This applies only if you choose “Continue with Google”.
OpenRouter or OpenAI (AI assistance). See “AI assistance” below.
Slack (internal staff alerts). When an account is created, a purchase is confirmed, a course or lesson is completed or work is waiting for review, our team gets an alert. The alert contains internal reference numbers and a time. It does not contain your name, your email address or your answers.

NMLS

When you complete a course for credit, we report the completion to NMLS so the credit can be recorded for you. The report uses your NMLS ID, your legal name and the details of the course you completed.

ORM LevelUp and your sponsoring company

ORM LevelUp is a separate service with its own account. Connecting it to HappyMLO is optional. You start the connection in LevelUp and confirm it on a HappyMLO screen. If you connect:

We store your LevelUp account ID and the account label LevelUp sends us.
LevelUp can show you your course schedule, progress, assignments, workshop work, instructor feedback, class questions and your own private questions, including your conversation in “Ask your instructor”. It loads them from us on your behalf.
We send LevelUp education status updates: a purchase, a course start, progress, a completed lesson, a verified completion or a completion that was withdrawn. These updates include your LevelUp account ID, the course, lesson counts, recorded time and dates. They do not include your email address, your answers or your payment details.

We do not send your records to your sponsoring company ourselves. Whether your sponsoring company sees your education status is controlled by the sharing settings you choose in LevelUp. Connecting your accounts does not by itself turn on sponsor updates.

Legal and regulatory requests

We may provide education records to a regulator or another party with legal authority to request them. We check who is asking and record the request.

AI assistance

We use an AI service to help instructors review workshop responses. This is the only coursework we send to an AI service.

What is sent: the text and numbers you submit for a workshop stage, the case materials and review guide for that stage, and a reference number for the submission. We do not send your name, email address or NMLS ID. Anything you type into your answer is sent, so please do not include personal details.
Where it goes: to OpenRouter, which passes it to an AI model provider such as OpenAI, or to OpenAI directly. Our request is set so that the content is not kept by the AI provider for its own use.
Who sees the result: the AI writes draft feedback that only your instructor can see. Your instructor reviews it and decides what feedback you receive.
Who decides: a person does. AI does not grade your work, accept or reject it, decide whether you completed the course or award credit.

Cookies and browser storage

Sign-in cookies. These keep you signed in. The site does not work without them.
A LevelUp connection cookie. If you connect a LevelUp account, a cookie that lasts up to one hour carries that connection through checkout.
Browser storage. Your browser remembers your light or dark theme, the state and course plan you picked while shopping, and your progress in demos and pilot tools. This stays in your browser.

We do not set advertising or analytics cookies. Stripe’s checkout page is on Stripe’s own site and uses Stripe’s own cookies.

How long we keep records

We keep education records for at least five years after your course offering ends. We keep them longer if there is a later correction, an open records request or a hold.
We do not delete education records automatically when that period ends.
We keep your account and profile details while your account is open.

Some records cannot be deleted on request. Course providers are expected to keep education records and to produce them when a regulator asks. For that reason our system blocks deletion of your identity acknowledgment, time records, answers, exam attempts, assignments, answers to module questions, questions and replies, your conversation with your instructor, completion reviews, certificates and reporting history.

Your choices and rights

See your information. You can see your profile, coursework, feedback and certificates when you are signed in. You can ask us for a copy of the records we hold about you.
Correct it. You can change your display name, NMLS ID and photo in My profile. You cannot edit the legal name and NMLS ID you confirmed for a course. Ask us instead. An administrator records the correction and the reason, and the original entry is kept. If a certificate was already issued, it has to be withdrawn and issued again.
Ask us to delete it. You can ask us to close your account and delete your information. We review each request. We cannot delete education records that we have to keep, as explained above. We will tell you what we removed and what we kept.
Control sponsor sharing. Use your sharing settings in LevelUp.

You may have other rights under the law where you live. To make a request, use the contact details below.

Children

Our courses are for adults who are seeking an MLO license. The site is not directed to anyone under 18. If you believe someone under 18 has created an account, please contact us.

Security

We limit access to learner records by role: learners see their own records, instructors see the courses they are assigned to, and administrators see what they need to run the school. The site is served over an encrypted connection. Profile photos and course videos are kept in private storage. Card payments are handled on Stripe’s page.

No system is perfectly secure, and we cannot promise that your information will never be accessed without permission.

Changes to this policy

When we change this policy, we will post the new version on this page and update the effective date at the top.

How to contact us

For privacy questions or requests, contact Molluso Holdings, LLC, doing business as HappyMLO.