Privacy Notice
Effective October 2, 2026 · Last updated October 2, 2026
PWR Holdings LLC ("we", "us") runs tpostack.com, including Kits by TPO Stack and TPO Today. This notice covers this website only. Our software products have their own notices.
Summary
- The tools run in your browser. What you enter isn't sent to us.
- Your name, NMLS ID and company stay in your browser and in links you copy.
- Our server logs, including IP addresses, are deleted after 30 days.
- No cookies, no advertising trackers, no analytics services. Every page loads only from tpostack.com. We don't sell or share personal information.
What the site collects
Request logs. Our hosting service records each request: IP address, date and time, the page requested (including anything after a "?" in the address), the referring page, and browser and device type. We use these logs to run and secure the site and to count visits.
Tool usage events. When you open a Kits tool, or share or print a result, the page sends one request naming the tool, the action and general choices such as loan purpose, state or a rounded loan-amount range. It contains no names, NMLS ID, borrower details or exact figures. These requests are kept in the request logs.
Your details on shared results. Your name, NMLS ID and company, if you add them, are stored in your browser on that device. They aren't sent to us. They appear on PDFs you print and in share links you copy.
Share links. A share link carries the tool's inputs, and your details if you added them, after the "#" in the address. That part isn't sent to our servers, but anyone with the link can see it. Share links only with people who should see the result.
Email. If you write to us, such as to request early access at sales@tpostack.com, we receive your email address and message and use them to reply.
What the tools don't ask for
The tools don't ask for a borrower's name, contact details, Social Security number, date of birth or account numbers. Don't enter them.
How long we keep it
- Request logs, including usage events: 30 days, then deleted.
- Email: as long as needed to respond and for any business relationship that follows.
- Your details in your browser: until you clear them or your browser's site data.
Who else is involved
- Amazon Web Services hosts the site and stores the request logs in the United States.
- Cloudflare provides the site's domain name service and forwards tpokit.com to tpostack.com.
- Email providers process and store messages sent to our email addresses.
- Linked sites. TPO Today and the tools link to agencies, regulators and other sites. Their privacy policies apply once you follow a link.
We don't sell personal information, share it for advertising or use it to build profiles.
Your choices and rights
You can use every tool without giving us anything. To clear your saved details, empty the fields in Settings or clear your browser's site data.
Depending on your state, you may have the right to know, access, correct or delete the personal information we keep. Email info@tpostack.com to make a request.
Do Not Track
We don't track visitors over time or across other websites and don't use advertising or analytics cookies, so the site doesn't respond differently to "Do Not Track" or similar browser signals.
Children
The site is for mortgage professionals. It isn't directed to children, and we don't knowingly collect information from anyone under 16.
Security
The site is served only over HTTPS. Access to the logs is limited to the people who run the site.
Changes
Before the site collects anything new, such as account details, we'll update this notice and the date at the top.
Contact
PWR Holdings LLC · info@tpostack.com