This Privacy Policy explains how Blueoak Capital LLC, doing business as “Origari” (“Origari,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information when you visit origari.com, use our web and mobile applications, submit a loan inquiry or application, upload documents, connect a financial account, or otherwise interact with our services (collectively, the “Services”).
Origari operates a technology platform that connects consumers and businesses seeking financing with mortgage brokers, lenders, and capital providers, and that provides document intake, verification, and pre-underwriting tools. Depending on the transaction, Origari may act as a “financial institution” under the federal Gramm-Leach-Bliley Act (“GLBA”). Where GLBA applies, the financial privacy notice in Section 9 governs our handling of your nonpublic personal financial information.
By using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Services.
We collect the categories of information below. Not every category applies to every user — what we collect depends on how you use the Services and how far you proceed in the loan process.
Some of what we collect is “sensitive” under applicable law — for example, your Social Security number, financial account information, and government identifiers. We collect and use sensitive information only for the purposes described in this policy (principally to provide, underwrite, and secure the Services and to comply with law) and we apply heightened safeguards to it.
We obtain personal information (a) directly from you; (b) automatically through your use of the Services; and (c) from third parties, including Plaid, consumer-reporting agencies, property-data and public-records providers, identity-verification and fraud-prevention services, lending partners, and referral sources, as described in Section 2.
We use personal information to:
To streamline the loan process, Origari uses automated tools and artificial-intelligence services to read and extract information from the documents you upload, to check whether a document matches the type requested, to compare document data against the information you provided, and to produce a preliminary, rules-based underwriting assessment. Document contents may be processed by a third-party AI provider acting as our service provider under contractual confidentiality and security obligations, solely to perform these functions on our behalf.
These tools are decision aids. Preliminary assessments generated by the platform are not final credit decisions and are not a commitment to lend. A lender makes the actual credit decision, and you have the right to request human review of, and to contest, any assessment, and to provide additional information. Where a decision that produces a legal or similarly significant effect is made about you, we will honor the rights described in Section 14, including any right to opt out of certain profiling and to obtain meaningful information about the logic involved.
We share personal information only as described here:
We require our service providers to protect personal information and to use it only for the purposes we authorize.
Origari does not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act (as amended by the CPRA) and similar state laws. We have not sold or “shared” personal information in the preceding twelve months, and we do not sell the sensitive or financial information of any consumer. We also do not use or disclose sensitive personal information for purposes other than those permitted under applicable law.
If you choose to link a financial account, you will do so through Plaid Inc. (“Plaid”). By using the Plaid connection, you authorize Origari and Plaid to access and transmit the account information you permit. Plaid will collect and use your information in accordance with its own privacy policy, and you acknowledge and agree that your information will be treated in accordance with the Plaid End User Privacy Policy, available at https://plaid.com/legal. Origari does not receive or store your online-banking username or password; those credentials are handled by Plaid and the financial institution. We use the account information you connect only for the purposes described in this policy, such as verifying assets, income, balances, and account ownership.
This section is the notice required of financial institutions under the federal Gramm-Leach-Bliley Act. It describes what nonpublic personal financial information (“financial information”) we collect and share.
Why? Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information.
What? The types of financial information we collect and share depend on the product or service you have with us. This information can include: Social Security number and income; account balances and transaction history; credit history and credit scores; assets and payment history; and employment information.
How? All financial companies need to share customers’ personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers’ personal information, the reasons Origari chooses to share, and whether you can limit that sharing.
| Reasons we can share your financial information | Does Origari share? | Can you limit this sharing? |
|---|---|---|
| For our everyday business purposes — to process your transactions, maintain your account(s), respond to court orders and legal investigations, report to credit bureaus, and match you with lenders you ask us to work with | Yes | No |
| For our marketing purposes — to offer our products and services to you | Yes | No |
| For joint marketing with other financial companies | No | Not applicable |
| For our affiliates’ everyday business purposes — information about your transactions and experiences | No | Not applicable |
| For our affiliates’ everyday business purposes — information about your creditworthiness | No | Not applicable |
| For our affiliates to market to you | No | Not applicable |
| For nonaffiliates to market to you | No | Not applicable |
| To sell your information | No | Not applicable |
How does Origari protect my financial information? To protect your personal information from unauthorized access and use, we use security measures that comply with applicable federal and state law. These measures include computer safeguards, encryption of sensitive data, access controls, and secured files and buildings. See Section 13.
How does Origari collect my financial information? We collect your financial information, for example, when you apply for financing or a loan, give us your income or account information, provide your contact information or employment information, or authorize us to obtain a credit report or connect an account. We also collect your financial information from others, such as credit bureaus, affiliates, or other companies.
Questions? Contact us as described in Section 22.
With your authorization, we obtain consumer reports (credit reports) to evaluate your application. We use and disclose consumer-report information consistent with the federal Fair Credit Reporting Act (“FCRA”) and applicable state law. If a lender takes an adverse action based in whole or in part on information in a consumer report, you have rights under the FCRA, including the right to obtain a free copy of the report from the reporting agency and to dispute inaccurate or incomplete information. You may request the identity of any consumer-reporting agency that provided a report used in connection with your application.
We and our service providers use cookies, pixels, local storage, and similar technologies to operate and secure the Services, remember your preferences, understand usage, and measure performance. Some cookies are strictly necessary for the Services to function; others help us analyze and improve them. You can control cookies through your browser settings, though disabling some cookies may affect functionality. We honor browser-based opt-out preference signals, including the Global Privacy Control (GPC), where required by law, and treat a valid GPC signal as a request to opt out of any “sale” or “sharing” for the relevant browser or device (noting that, as stated above, we do not sell or share personal information for cross-context behavioral advertising).
We retain personal information for as long as necessary to provide the Services, maintain your account, and fulfill the purposes described in this policy, and thereafter as required to comply with our legal, regulatory, lending, tax, accounting, and record-keeping obligations, to resolve disputes, and to enforce our agreements. Records associated with a loan inquiry or application are typically retained for the period required by applicable lending and financial-services recordkeeping laws. When information is no longer needed, we delete, de-identify, or securely dispose of it.
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These include encryption of sensitive data in transit and at rest, access controls and least-privilege permissions, authentication safeguards (including multi-factor authentication for platform accounts), network and application security controls, logging and monitoring, and vendor due diligence. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us promptly of any suspected unauthorized use.
Depending on where you live, you may have some or all of the following rights with respect to your personal information, subject to legal exceptions:
How to exercise your rights. Submit a request as described in Section 22. We will verify your identity before acting on a request, and we may need additional information to do so. You may use an authorized agent to submit a request on your behalf, subject to verification. We will respond within the timeframes required by applicable law.
Important note about financial data. Many state privacy laws, and portions of the CCPA, exempt information collected, processed, or disclosed under the Gramm-Leach-Bliley Act and the Fair Credit Reporting Act, or exempt financial institutions subject to those laws. As a result, some of the rights above may not apply to your GLBA- or FCRA-regulated financial information. We honor applicable rights for information that is not exempt, and we handle exempt financial information in accordance with GLBA, the FCRA, and this policy.
In addition to the rights in Section 14, California residents have the right to receive the categories of personal information we collected, the categories of sources, our business or commercial purposes for collecting it, and the categories of third parties to whom we disclosed it, as described throughout this policy. We do not sell or share personal information and do not offer financial incentives in exchange for personal information. California’s “Shine the Light” law permits California residents to request information about disclosures to third parties for their direct-marketing purposes; we do not make such disclosures. To exercise any of these rights, contact us as described below.
The Services are intended for adults and are not directed to children. We do not knowingly collect personal information from anyone under 18 years of age. If you believe a minor has provided us personal information, contact us and we will take appropriate steps to delete it.
The Services may link to or integrate third-party websites and services (including Plaid, lenders, and data providers) that we do not control. Their privacy practices are governed by their own policies, and we encourage you to review them. We are not responsible for the content or practices of third parties.
Origari provides the Services in the United States and is intended for U.S. residents. If you access the Services from outside the United States, you understand your information will be processed in the United States, where privacy laws may differ from those of your location.
The Services and any information, assessments, estimates, or materials provided through them are furnished “as is” and “as available,” without warranties of any kind, whether express, implied, or statutory, including any implied warranties of merchantability, fitness for a particular purpose, accuracy, and non-infringement, to the fullest extent permitted by law. Property valuations, payoff estimates, pre-underwriting assessments, rates, and similar outputs are estimates for informational purposes only, are not guarantees, offers, or commitments to lend, and may rely on third-party data that we do not independently verify.
To the fullest extent permitted by applicable law, in no event will Origari or its affiliates, officers, directors, employees, or service providers be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, data, goodwill, or other intangible losses, arising out of or relating to this Privacy Policy or the Services, even if advised of the possibility of such damages. Nothing in this policy limits liability that cannot be limited under applicable law. This section does not restrict any rights you have under GLBA, the FCRA, or applicable privacy laws.
Please read this section carefully. It affects how disputes are resolved and, where enforceable, requires individual arbitration and waives the right to a jury trial and to participate in a class action. It is subject to your rights under applicable law and to attorney review for enforceability in your jurisdiction.
Any dispute, claim, or controversy arising out of or relating to this Privacy Policy or your use of the Services (a “Dispute”) will be resolved by binding individual arbitration rather than in court, except that either party may bring an individual claim in small-claims court, and either party may seek injunctive or equitable relief in court to protect its intellectual property or confidential information. The arbitration will be administered by a recognized arbitration provider under its applicable rules, will take place in the State of New Jersey (or another mutually agreed location or by videoconference), and will be governed by the Federal Arbitration Act.
Class-action waiver. To the fullest extent permitted by law, you and Origari agree that each may bring Disputes against the other only in an individual capacity, and not as a plaintiff or class member in any purported class, collective, consolidated, or representative proceeding. The arbitrator may not consolidate more than one person’s claims and may not preside over any form of representative or class proceeding. If this class-action waiver is found unenforceable as to a particular claim, that claim (and only that claim) will be severed and may proceed in court.
Your right to opt out of arbitration. You may opt out of this arbitration agreement by sending written notice to privacy@origari.com within 30 days of first accepting this policy, stating your name and intent to opt out. Opting out will not affect any other part of this policy.
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where required by law or where changes are material, provide additional notice (such as by email or an in-product notice). Your continued use of the Services after an update takes effect constitutes acceptance of the revised policy.
To ask a question about this policy, to exercise a privacy right, or to make a GLBA or FCRA-related request, contact us:
This Privacy Policy is governed by the laws of the State of New Jersey, without regard to its conflict-of-laws principles, except to the extent federal law (including GLBA and the FCRA) or the privacy law of your state of residence applies.
© 2026 Blueoak Capital LLC (Origari). All rights reserved. This document is provided for general informational purposes and does not constitute legal advice. Origari handles data regulated by the Gramm-Leach-Bliley Act and the Fair Credit Reporting Act; you should obtain review by a licensed attorney before publishing or relying on this policy.