Privacy Policy

Last updated: May 10, 2026

This Chrome extension does not collect, transmit, or sell any user data to third parties.

What we store, locally in your browser only

Arive AEP credentials (clientId, clientSecret, apiKey) you enter on the Options page. Stored in chrome.storage.local; readable only by this extension on this device. They never sync to your Google account, and they never leave the local machine.
Cached Arive auth token in chrome.storage.session. Lifetime is bounded to four minutes and clears automatically when you close Chrome.
UI preferences — the "Preview before fill" and "Auto-search after fill" toggles, in chrome.storage.local.

What we transmit, only when you click Fill

When the loan officer clicks the Fill LoanSifter button (or presses Enter in the loan-ID field), the extension makes:

An HTTPS authentication request to https://gwapiconnect.myarive.com using the credentials you provided.
An HTTPS request to https://gwapiconnect.myarive.com to fetch the specific loan record you requested.
Reads from and writes to the LoanSifter PPE tab (https://loansifternow.optimalblue.com) you currently have open.

That is the entire network footprint. There is no other server.

What we do not do

No analytics. The extension does not include Google Analytics, Mixpanel, Sentry, or any other telemetry SDK.
No tracking pixels.
No data sharing. We do not share, sell, or rent your data to anyone, and we never will. Loan data flows from Arive directly into your LoanSifter session and stays there.
No third-party servers. Apart from Arive (your own AEP account) and LoanSifter (the page you're operating in), the extension never opens a network connection.

Permissions we request, and why

Permission	Reason
`storage`	Persist your Arive credentials and UI preferences locally on this device.
`sidePanel`	The extension's UI is a side panel that opens next to LoanSifter.
`scripting`	Read and write LoanSifter form fields. Scoped to the LoanSifter origin.
`activeTab`	Address the active LoanSifter tab to fill its form.
`alarms`	A 25-second heartbeat keeps the background service worker responsive between fills.
Host: `https://loansifternow.optimalblue.com/*`	Required to fill LoanSifter PPE — the extension's primary purpose.
Host: `https://gwapiconnect.myarive.com/*`	Required to fetch your loan record from your own Arive AEP account.

Uninstalling

If you uninstall the extension, Chrome automatically removes everything stored above. We do not retain anything off-device, so there is nothing else to delete.

Source code

The extension is closed source for distribution but available for security audit on request. Contact below.

Contact

Questions or concerns about this policy: [email protected]

Home