Keep the borrower
at the center.
Keep client details and relationship history together, with the context to make your next conversation count.
kaskadeflowComing Soon!kaskadeflowComing Soon!Not just another generalized CRM. Kaskadeflow brings client relationships, pipeline management, and communications together in software built around the mortgage business.
Meet your next workspaceFrom the first conversation to the next opportunity, keep the people and details that matter connected.
Keep client details and relationship history together, with the context to make your next conversation count.
Bring your mortgage opportunities into focus and stay close to the next step in each relationship.
Calling and messaging built around your client relationships, within the same focused workspace.
A funded loan. A change of plans. A borrower who needs more time. Every outcome is part of a longer relationship—and every relationship has a next chapter.
Kaskadeflow is being built around a simple idea: connect each outcome to the next stage of the journey. Keep the history, carry the relationship forward, and bring it back into focus when the timing is right to reconnect.
Whether the next opportunity is a new purchase, a refinance, or simply a conversation, the philosophy stays the same: help you be there for what comes next.
Closed, paused, or plans changed.
The context moves with the relationship.
A reason to reconnect. A new chapter.
14 years of mortgage experience—and still active in mortgage banking today. Experience across leading direct lenders and brokerages, combined with hands-on knowledge of systems and CRM development, shapes Kaskadeflow from the inside out.
The story behind the platformFrom the details behind a borrower to the next opportunity in your book. Explore the tools being built into Kaskadeflow.
COMING SOONConnect any pipeline status to an automation. From the first conversation to a renewed opportunity, keep the next touchpoint connected to the journey.
Connect revenue, lead sources, and outreach activity to understand where your business is growing.
The conversations, the follow-through, the details that keep your day moving. There’s more to explore inside Kaskadeflow.
Get Early AccessMore possibilities. One connected workspace.
The story behind Kaskadeflow starts inside the industry it was created to serve.
Kaskadeflow founder Derek Shayne brings 14 years of mortgage industry experience to the platform. He began as a mortgage banker in 2012, worked at leading direct lenders and brokerages, and remains active in mortgage banking today. The relationships, responsibilities, and day-to-day demands of the business continue to shape his perspective.
His career also spans technology, with experience in systems and CRM development. That combination connects the practical needs of mortgage professionals with an understanding of how to build the software that supports them.
Kaskadeflow brings those perspectives together: deep mortgage experience, a current connection to the industry, and the technical understanding to build around its needs. It is a CRM being developed for mortgage brokers and their teams by someone who still works in their world.
Connect with Kaskadeflow Inc. for product questions, business inquiries, or concerns about platform use.
Questions about the platform, early access, or the upcoming launch.
Partnerships and company inquiries.
business@kaskadeflow.com
Get help with the platform or report suspected misuse, unwanted communications, or violations of our Terms of Use.
The terms for using Kaskadeflow’s website and CRM service.
These Terms govern the Kaskadeflow website and, when accepted as part of an order or account enrollment, the Kaskadeflow customer relationship management service (the “Service”). The agreement is between Kaskadeflow Inc. (“Kaskadeflow,” “we,” or “us”) and the business or individual identified in the applicable order (“Customer” or “you”). A person accepting for a business must have authority to bind that business. Service users must be at least 18 and authorized to use the relevant workspace.
An “Order” is a mutually accepted subscription or service order identifying the purchased service, authorized users, fees, and term. A signed agreement controls over conflicting general Terms; an applicable data processing addendum controls for its subject matter. Our Privacy Policy describes personal-information practices. It does not replace the customer’s own privacy notices or establish consent to marketing communications.
Website examples use illustrative records to explain workflows; they are not promises of loan outcomes, revenue, conversion rates, or future functionality. Registering interest does not purchase a subscription or guarantee access, a launch date, or pricing. Signing up for early access records your interest; it does not create a CRM account.
We may offer trial or evaluation access under identified limits. Features described as experimental or unavailable should not be relied upon for production use. Specific trial duration, conversion to paid access, and data-handling arrangements must be disclosed before enrollment. No automatic paid conversion occurs solely because someone joins a waitlist.
During an active subscription, we permit authorized users to use the purchased Service for the Customer’s legitimate internal business purposes, subject to these Terms and the Order. Customers must provide accurate business and user information, safeguard credentials, use individual accounts, and promptly report suspected unauthorized access to support@kaskadeflow.com.
Access is limited by the Service’s established role, workspace, assignment, and ownership rules. Leadership status does not grant unrestricted access to every borrower record, private workspace, integration credential, or communication. Kaskadeflow Admin controls account provisioning and telephone-number assignment. Customer leadership and workspace-owner roles do not obtain platform administrator powers under these Terms.
Each provisioned user is intended to receive an assigned number supporting voice, SMS, and MMS as standard capabilities. Actual availability depends on completed provisioning, provider readiness, and lawful use. There is no separate customer SMS-activation entitlement. These Terms do not promise that an unfinished provider integration is operational.
Kaskadeflow provides software for borrower relationships, pipeline workflows, communications, scheduling, and reporting. Through this Service, Kaskadeflow does not make credit decisions, originate or fund loans, supply legal advice, or determine whether a borrower qualifies for a financial product.
Customers remain responsible for licensing, required disclosures, fair-lending obligations, advertising, underwriting, recordkeeping, and the suitability and legality of their own mortgage activities. Pipeline statuses, rate-watch signals, revenue estimates, and other reports depend on supplied information and assumptions. They do not establish eligibility, a guaranteed savings opportunity, a rate commitment, or earned revenue. Review generated exports, including MISMO starter files, before submitting them to another system; a starter export is not a completed or validated loan application.
“Customer Data” includes borrower and contact records, notes, loan and property information, communications, uploaded media, automation content, and other information submitted by or for the Customer. As between the parties, Customer retains its rights in Customer Data. Individuals’ privacy rights and applicable law remain unaffected.
Customer authorizes us to process Customer Data only as needed to provide, secure, support, and administer the Service, carry out lawful documented instructions, or meet legal obligations, subject to the applicable data processing agreement. This is not permission to sell borrower records, use their contents for unrelated advertising, or train general-purpose AI models on them.
Each party will protect the other’s confidential information with reasonable care, restrict access to people and providers who need it for the agreed purposes and are bound by confidentiality obligations, and avoid unauthorized disclosure. Exceptions cover information lawfully public, already known without restriction, independently developed, or lawfully received from another source. Legally compelled disclosure will be limited to what is required, with notice when permitted.
Customer must have authority to provide data, give required notices, obtain necessary permissions, and correct inaccurate information. Do not place passwords, payment-card security codes, or unrelated sensitive records in notes or messages. Submit sensitive borrower information only through features intended and authorized for that purpose, not through public website forms or general inquiry email.
Customer determines the recipients, purpose, content, timing, and instructions for calls, SMS/MMS, email, ringless voicemail, broadcasts, and automated reminders. Customer must establish and retain any consent required for each channel and purpose, identify itself accurately, honor revocations and suppression requests, observe applicable calling hours and Do Not Call restrictions, and comply with relevant communications, advertising, and privacy laws and carrier rules.
Purchasing a lead, possessing a telephone number, importing a consent reference, or selecting a CRM acknowledgment does not independently prove lawful consent. Customer must verify the underlying evidence. Prerecorded and ringless voicemail outreach is not exempt from consent requirements merely because a telephone does not ring. Required commercial-email identification, mailing information, and unsubscribe mechanisms remain the sender’s responsibility.
Do not evade opt-outs by changing numbers, channels, records, or workspaces. Review automation triggers, variants, schedules, recipient time zones, status changes, and end-of-journey actions before enabling them. Automated tools can assist with workflows but do not guarantee legal compliance or detect every restriction. Customer must review results and stop inappropriate activity.
Obtain legally required notices and permissions before recording or uploading another person’s voice or other media. A feature for creating voicemail audio does not mean all live calls are recorded. Availability of recording or transcription must be expressly identified in the Service.
Telecommunications and mailbox providers may filter, delay, reject, or interrupt communications. Accepted or submitted status does not necessarily establish delivery, receipt, or reading. The Service is not an emergency calling service; do not use it to contact emergency services. Number assignment, removal, reassignment, and any permitted porting are handled through Kaskadeflow and the provider’s applicable process.
Do not use the Service to send spam, harass or deceive people, impersonate another sender, facilitate unlawful discrimination, infringe intellectual property, distribute malware, obtain unauthorized access, bypass access or rate limits, or interfere with another customer’s service. Do not scrape restricted information, share accounts, resell access without written permission, or attempt to recover private data from another workspace. Reverse engineering is prohibited except where applicable law expressly permits it.
We may investigate credible misuse reports and request relevant consent or authorization evidence. Any access to customer information for an investigation must remain proportionate and subject to confidentiality and applicable law. Report concerns to support@kaskadeflow.com.
Connecting an external account authorizes the access described in its permission screen and the Privacy Policy. Customers must have authority over connected accounts and comply with applicable third-party terms. Disconnecting an integration stops future authorized access through it, subject to processing already in progress and lawful retained records; it does not recall messages already sent.
Some service functions depend on external infrastructure, identity, telecommunications, voicemail, or mailbox providers. Provider changes may require us to alter an integration. We remain responsible for our own contractual obligations; a provider dependency does not eliminate duties that cannot lawfully be excluded.
An accepted Order must specify fees, taxes, billing frequency, term, renewal arrangements, cancellation method, usage allowances, and applicable additional charges before payment. Fees and renewal arrangements must be disclosed and accepted before purchase.
Tokens are service-usage accounting units, not currency, securities, or a stored-value bank account. Applicable consumption rules and balances must be disclosed in the Service or Order. Any purchased-token expiration, rollover, refunds, transfers, and treatment upon cancellation must be disclosed before purchase. Internal leadership allocations remain limited to approved product permissions.
We may maintain and improve the Service and make changes required for security, law, or provider compatibility. Material changes to paid functionality or these Terms require appropriate advance notice and any legally required consent. Changes will not retroactively alter an existing dispute.
We may restrict access where reasonably necessary to address a security threat, unlawful activity, material breach, or legally required restriction. When practicable, we will explain the reason and provide an opportunity to resolve it; urgent protective action may precede notice. Restrictions should be no broader or longer than reasonably needed.
Cancellation, termination for breach, any cure periods, refunds, and the availability of data after termination will follow the applicable Order and data processing agreement. Ending access does not transfer ownership of Customer Data to Kaskadeflow. Confidentiality, accrued payment obligations, and provisions intended to survive termination remain applicable.
We and our licensors retain rights in the Service, software, visual assets, documentation, and brand. No ownership transfers except as expressly stated. Customer retains its content and grants only the permissions necessary under these Terms. Feedback may be used to improve the Service without compensation, but this does not authorize disclosure of confidential Customer Data. Use of a customer’s name or logo in marketing requires separate permission.
We will use reasonable care in providing the Service. Customers must report reproducible problems so they can be investigated. Except for express commitments in an accepted agreement and rights that cannot be excluded, the Service is provided without a guarantee of uninterrupted availability, error-free operation, regulatory compliance, or a particular business outcome. No service-level percentage or recovery-time commitment is created by a marketing statement or illustration.
Parties should first contact the other in good faith to seek resolution, without restricting urgent relief or statutory rights.
Neither party may assign this agreement in a way that reduces the other’s rights without consent, except to a successor to substantially all relevant business assets that assumes the obligations. Neither party is responsible for delays genuinely beyond reasonable control, but must take reasonable mitigating steps; this does not excuse accrued payments or nonwaivable duties. Invalid provisions will be limited or severed as permitted; the remaining agreement continues. Failure to enforce a provision is not a waiver. The agreement and incorporated documents constitute the parties’ agreement on their subject matter.
Kaskadeflow Inc. — business@kaskadeflow.com for contractual inquiries; support@kaskadeflow.com for service, security, privacy, and misuse concerns.
How information is handled across Kaskadeflow’s website, accounts, and customer-directed workflows.
Kaskadeflow Inc. (“Kaskadeflow,” “we,” or “us”) provides a mortgage-focused customer relationship management platform. This Policy explains our handling of personal information in connection with our website, business inquiries, account administration, support, and Service.
We determine the purposes of processing our own business-contact, account, and service-administration information. When a mortgage business uses Kaskadeflow to manage borrower or contact information, that business generally determines why it is collected and how it is used. For that Customer Data, we operate on the business’s behalf under its lawful instructions and the applicable service and data processing agreement. The mortgage business’s privacy notice also applies. These roles depend on the actual processing and applicable law, not just the labels used here.
If your mortgage professional uses Kaskadeflow, contact that business about its records and outreach. You may also contact us for help identifying the appropriate request route or reporting a concern. We do not treat borrower records as a public contact database.
The categories below depend on the functions actually used. We do not collect every category from every person.
| Category | Examples and sources | Purpose |
|---|---|---|
| Business inquiries and registration information | Name, work email, company, role, and messages supplied by you | Respond to inquiries, manage requested early access, and send permitted updates |
| User and account information | Identity-provider identifiers, verified email, profile details, optional avatar, company/workspace membership, roles, preferences, assigned number | Authenticate users, provision authorized access, maintain accounts, and support users |
| Borrower and contact records | Names, phone numbers, email, mailing/property addresses, employment details, property values, loan amounts and rates, loan dates, lead sources and consent references supplied by customers | Provide customer-directed record, pipeline, relationship, and reporting functions |
| Workflow and financial activity | Status changes, notes, appointments, assignments, loan terms, funding information, revenue/acquisition-cost entries, automation steps and history | Execute workflows, maintain history, and produce authorized reports |
| Communications and media | SMS content, email content composed in the Service, communication metadata, call events, voicemail/greeting audio and images uploaded through available features; attachments where supported | Deliver, display, route, or reconcile customer-directed communications and support follow-up |
| Connected-account information | Google account identifiers, authorization credentials, Gmail message identifiers and headers/labels used for permitted functions | Enable authorized Gmail sending and metadata-based reply detection |
| Technical and security information | Session identifiers, request/network information such as IP addresses, browser/device details where logged, timestamps, errors, access and security events | Operate, troubleshoot, secure, and prevent misuse of the Service |
| Billing and usage records | Subscription/order details when billing is enabled, usage totals and token ledger activity | Administer agreed services and usage charges |
Customers may include sensitive information in financial records, free text, or uploaded content. They must limit submissions to information they are authorized to process and that is appropriate for the feature. Do not send passwords, Social Security numbers, borrower documents, or payment-card security codes through general inquiry email or public forms.
Information comes from you, your business’s authorized users, connected identity/mailbox services, communications providers, and people responding to customer communications. Customers may import lead or business information they obtained elsewhere. We also process technical information as browsers and systems interact with the Service. A consent reference supplied by a customer is not independent verification of the underlying permission.
When you submit the early-access form, we collect your name, work email, company, role, and registration time. We store this information in our Azure-hosted database and use Resend to send a notification to Kaskadeflow’s internal inbox, hosted by Google Workspace. The form does not send an automatic confirmation email to you. We use the information to manage early-access interest and provide the launch and product updates you request. You may withdraw from these updates or request deletion by contacting support@kaskadeflow.com. The public counter shows an aggregate registration total, not individual registration details.
We process information to provide authorized features; maintain accounts and access boundaries; store and display records; send or route customer-directed communications; schedule reminders; track permitted engagement; calculate reports; answer requests; reconcile usage; prevent fraud, spam, and unauthorized access; investigate incidents; comply with legal duties; and establish or defend legal claims.
Our own launch or promotional messages are separate from customer-directed borrower communications. Signing up for product updates is not consent to unrelated calls, texts, or mortgage solicitations. You can stop our promotional emails through their unsubscribe mechanism or by contacting us. Necessary account, security, and contractual notices may continue.
We may use non-content operational measurements to maintain and improve performance. These purposes do not authorize repurposing borrower records for unrelated marketing, selling personal information, or using communications and records to train general-purpose AI models.
Connecting Gmail is optional. The Gmail integration requests identity/email information, permission to send mail, and permission to access Gmail metadata. It uses message identifiers, selected headers and labels, and arrival information to associate replies with customer records and coordinate follow-up. It does not use the metadata permission to retrieve incoming email bodies or attachments. Outgoing message content composed in Kaskadeflow is processed to send that message.
Authorization credentials are held server-side in encrypted form. Users can disconnect the integration in the Service or revoke access through their Google account. Disconnecting does not erase customer communication history already lawfully stored, or remove messages from recipients’ mailboxes; retention and deletion requests are handled separately.
Information may be disclosed to:
- Authorized customer users within established workspace, assignment, and leadership permissions. A leadership role does not automatically grant unrestricted access to personal records or another user’s integration credentials.
- Providers that support hosting, storage, identity, communications delivery, connected email, and approved operational support, limited to the functions they perform.
- Recipients and services selected by the customer when sending communications or exporting information. Copies outside Kaskadeflow are subject to the recipient’s practices.
- Professional advisers or authorities when reasonably necessary for legal obligations, security investigations, or protecting legitimate rights, subject to applicable restrictions.
- A prospective or actual business successor in a merger, financing, or asset transfer, subject to appropriate protections and any required notice or consent.
The CRM uses session cookies to maintain authenticated access. Browser storage is used for preferences such as theme, workspace selection, and notification state. Browser microphone and desktop-notification permissions are requested for relevant functions and can be changed in browser settings. Disabling essential storage may prevent sign-in or affect features.
The public website does not contain an advertising-pixel or marketing-analytics integration. Hosting and network providers may still process request information. Before adding nonessential tracking, we will update disclosures and provide choices required by applicable law.
Retention depends on the information’s purpose, active service relationship, customer instructions, applicable legal duties, security needs, and disputes. Account administration, financial transactions, suppression records, and security evidence may require different periods from ordinary CRM content. Information will not be retained indefinitely merely because it could someday be useful.
Deleting an item from a screen, disconnecting an account, or ending a subscription does not necessarily immediately remove historical references, backups, provider copies, or records subject to a legal hold. Removing a media attachment can detach it from the current item while earlier versions still reference it. Suppression evidence may need to remain so an opt-out continues to be honored.
The public website uses HTTPS, server-side validation, restricted database access, and limits on form submissions and notification sending. To enforce abuse-prevention limits, we temporarily store a keyed hash derived from the network address, rather than the address itself, in application rate-limit records. Hosting providers may separately retain network and security logs.
We use administrative and technical measures intended to protect information, including access restrictions and safeguards appropriate to the service. Our safeguards include authenticated sessions, server-side authorization, workspace scoping, private-media access controls, and encryption of Gmail credentials. No security measure can guarantee that incidents cannot occur.
Customers should secure their devices and accounts, manage authorized access, and report suspected incidents promptly to support@kaskadeflow.com. Required incident notifications will be handled under applicable law and the agreed data processing terms.
Contact support@kaskadeflow.com with the subject “Privacy Request” to ask about access, correction, deletion, a copy of information, or an objection to processing. Describe the request without including unnecessary sensitive information. We may request proportionate verification or proof of an authorized agent’s authority. We will explain if legal exceptions or the customer’s role affect our response.
Where we process borrower information on a mortgage business’s behalf, we will route or assist with the request under that business’s instructions and applicable law. A request does not authorize us to disclose another person’s information or override workspace access rules.
Depending on your location and the law’s applicability, rights may include knowing categories, sources, purposes and recipients; accessing, correcting or deleting information; portability; opting out of sale/sharing or targeted advertising; limiting certain uses of sensitive information; and appealing a denied request. We will not unlawfully discriminate for exercising privacy rights. Appeals can be sent to the same address with “Privacy Appeal” in the subject. You may also contact the relevant regulator.
For California residents, applicable rights and exceptions depend on whether we act as a covered business or a service provider and on the information involved. Financial-sector or other exemptions are not assumed to cover every record or every activity.
The Service is intended for adult business users. It is not directed to children, and customers should not submit children’s information outside an expressly authorized business need. Contact us if you believe inappropriate child information has been submitted.
Our primary infrastructure is in the United States. Providers may process information in other locations; a U.S. server does not prove all processing remains in the United States. We do not claim EU-U.S. Data Privacy Framework certification.
Automations can schedule outreach and update workflow activity based on customer-defined rules and events. Kaskadeflow is not an automated credit-decision system; its reports do not determine loan approval or legal eligibility. Any future AI or materially different automated processing requires a separate review and updated disclosures.
We will date policy revisions and provide notice of material changes appropriate to their nature and as required by law. Where required, new processing will depend on consent or another lawful basis rather than notice alone.
Kaskadeflow Inc. — support@kaskadeflow.com, subject “Privacy Request.”