Privacy Policy
Last updated: February 2026
1. Information We Collect
Business Information
We collect business name, address, phone, email, EIN, type of business, years in operation, and revenue information.
Personal Information
For business owners and guarantors, we collect first name, last name, date of birth, Social Security Number (SSN), home address, phone number, and email address.
Financial Documents
We collect uploaded bank statements and other financial documents in PDF format.
Technical Information
We automatically collect IP address, device type, browser information, and referral source for security and analytics purposes.
2. How We Handle Social Security Numbers
We take the protection of Social Security Numbers extremely seriously:
- Encryption at Rest: SSNs are encrypted using PGP symmetric encryption (pgcrypto) immediately upon submission. The raw SSN is never stored.
- Limited Storage: Only the last 4 digits of your SSN are stored in plain text for identification purposes.
- Restricted Access: Encryption and decryption functions are restricted to authorized service accounts only.
- No Client-Side Storage: Your SSN is never stored in browser localStorage, cookies, or any client-side storage.
- Transmission Security: All data is transmitted over TLS 1.3 encrypted connections.
3. How We Use Your Information
- To process and evaluate your loan application
- To connect you with appropriate lending partners
- To communicate with you about your application status
- To verify your identity and prevent fraud
- To comply with legal and regulatory requirements
- To improve our services and user experience
4. Information Sharing
We share your information only with:
- Lending Partners: To process your application. Partners are contractually obligated to protect your data.
- Service Providers: Hosting, storage, and security providers who process data on our behalf.
- Legal Requirements: When required by law, court order, or regulatory authority.
We never sell your personal information to third parties for marketing purposes.
5. Data Storage and Security
- All data is stored in encrypted databases hosted in secure data centers
- Uploaded documents are stored in private, encrypted storage buckets
- Access to sensitive data is restricted and logged
- We use Row-Level Security (RLS) policies to prevent unauthorized data access
- Regular security audits are conducted
6. Data Retention
We retain your application data for the following periods:
- Active applications: Until funding is completed or application is withdrawn
- Completed applications: 7 years (to comply with financial regulations)
- Withdrawn/declined: 2 years, then securely deleted
- Uploaded documents: Deleted 90 days after application completion or withdrawal
7. Your Rights
You have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your personal data (subject to legal retention requirements)
- Withdrawal: Withdraw your application at any time before funding
- Portability: Request your data in a portable format
To exercise these rights, contact us through our contact page.
8. Cookies and Tracking
We use essential cookies for site functionality and localStorage for form draft saving (SSNs are never stored in localStorage). We do not use third-party advertising trackers.
9. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of our services constitutes acceptance of the updated policy.
11. Contact Us
For questions or concerns about this Privacy Policy, please contact us through our contact page.