=== Lenderd Mortgage Application ===
Contributors: 8blocks
Tags: mortgage application, 1003, mortgage, loan application, lender
Requires at least: 5.6
Tested up to: 7.1
Requires PHP: 7.4
Stable tag: 3.2.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

A mortgage application borrowers finish: one question per screen, their numbers first, autosave, English and Spanish, and a full URLA 1003.

== Description ==

Lenderd Mortgage Application puts a modern mortgage application on your own WordPress site. Borrowers answer one question at a time, see what they could qualify for before they hand over contact details, and never need an account.

* One question per screen, typed amounts, optional address suggestions, English and Spanish
* The borrower's numbers (loan amount, equity, loan-to-value, cash-out) before contact details
* Autosave from the first answer; borrowers resume in the same browser or from an emailed link
* A short application first, then an optional full URLA 1003 (residence history, employment, income, assets, debts, declarations, demographics, co-borrower)
* Email alerts to your loan officer, a receipt for the borrower, and reminders for borrowers who did not finish
* Any number of loan officers, each with their own shortcode, alerts and LO card on the form
* Funnel report and CSV export
* SSNs encrypted with AES-256-GCM and masked on screen; uploaded documents encrypted in a private folder and opened only by signed, expiring links; consent and access logs
* WordPress Multisite: network-level settings that each site can follow or override

= Premium =

1003 Mortgage Application Premium is a separate plugin sold on [mortgageapplicationplugin.com](https://mortgageapplicationplugin.com). It adds GoHighLevel, MISMO 3.4 and FNM 3.2 exports, a document upload page and webhooks. This plugin is complete without it.

== Installation ==

1. Install the plugin from Plugins > Add New, or upload the plugin folder to `/wp-content/plugins/`, and activate it.
2. Review Applications > Settings (email recipients and texts, colors) and Applications > Form & CRM (company details, alerts, reminders).
3. Put `[mortgage_application_form]` on a page. The site must use HTTPS.
4. Optional: add your loan officers under Applications > Loan Officers and use their shortcode, for example `[mortgage_application_form lo="jane-smith"]`.
5. Recommended before collecting SSNs: add `define( 'MAPP_ENCRYPTION_KEY', 'a long random string' );` to wp-config.php and keep it safe. Data encrypted with it cannot be read without it.

= Shortcode attributes =

* `lo`: loan officer slug or ID
* `purpose`: `purchase` or `refinance` to skip the first question
* `lang`: `en`, `es` or `auto` (default)

== Frequently Asked Questions ==

= Does it need SSL? =

Yes. The application collects personal and financial details, so the page must use HTTPS.

= Where is borrower data stored? =

On your own site. SSNs are encrypted, documents are encrypted in a private folder, and nothing is sent to 8blocks.

= Can I change the colors? =

Yes. The Button Color setting on the Settings page sets the form's brand color.

== Screenshots ==

1. One question per screen, in English or Spanish, with the loan officer's name and NMLS on every step.
2. The numbers screen: estimated equity, cash out and loan amount before the borrower gives contact details.
3. Applications list with stage, loan officer, source and start date.
4. An application: documents, answers, reminders and resume links in one place.
5. Funnel report: how far applications got and where borrowers stop, step by step.
6. Alerts and reminders: email the loan officer when contact details are saved and remind borrowers who did not finish.
7. Loan officer details shown on the form, with the shortcode for that loan officer's application.

== External services ==

The plugin contacts these services only when you turn them on:

* Google Maps Places API (address suggestions), when you enter a Google Places API key on the Settings page. The borrower's browser loads Google's script and sends what they type in address fields to Google. [Terms](https://cloud.google.com/maps-platform/terms), [privacy](https://policies.google.com/privacy).
* Cloudflare Turnstile (spam protection), when you enter Turnstile keys on Form & CRM. The borrower's browser loads Cloudflare's widget, and your site sends the widget's token and the visitor's IP address to Cloudflare to verify it. [Terms](https://www.cloudflare.com/website-terms/), [privacy](https://www.cloudflare.com/privacypolicy/).

== Changelog ==

= 3.2.0 =
* First release on WordPress.org.
