Privacy Policy — DRAFT

DRAFT FOR LEGAL REVIEW. Do not publish until a lawyer approves it.
Items in [brackets] must be filled in before launch.

Business MCA
Effective date: [Month Day, Year]
Website: businessmca.com

1. Who we are

Business MCA ("we", "us", "our") is operated by [Legal company name], a [State] [LLC / corporation]. We help businesses find funding, such as merchant cash advances and business loans. We are a broker. We are not a lender. We send your application to funding partners who may make you an offer.

This policy tells you what information we collect, how we use it, who we share it with, and what choices you have.

2. Information we collect

Information you give us on our application form:

• Amount of funding you want
• Purpose of the funding
• Business name
• Owner first name and last name
• Average monthly revenue
• Phone number
• Email address
• Bank statements (optional, only if you upload them)

Information we collect automatically when you use our website:

• IP address, browser type, and device type
• Pages you visit and the date and time of your visit
• The website or ad that sent you to us
• Cookies and similar technologies (see Section 7)

We do not ask for your Social Security number on our website.

3. How we use your information

We use your information to:

• Review your application and find funding options for your business
• Send your application to our funding partners
• Verify your phone number with a one-time code sent by text message (SMS)
• Contact you by phone, text message, and email about your application
• Answer your questions and give you support
• Improve our website and services
• Prevent fraud and keep our website secure
• Obey the law and protect our legal rights

4. Who we share your information with

Funding partners. We share your application and any bank statements you upload with lenders and funding companies in our network. We do this so they can review your request and make you an offer. Each funding partner uses your information under its own privacy policy. A funding partner may contact you directly. A funding partner may also check your business or personal credit if you continue with its offer.

Service providers. We use companies that help us run our website and business. They may only use your information to do work for us. These include:

• Website hosting (Netlify)
• Data storage (Google Workspace, including Google Sheets and Google Drive)
• Phone verification and text messages (Twilio)
• [Customer relationship management (CRM) system, when added]

Legal reasons. We may share your information if the law requires it, to answer a court order or government request, or to protect our rights, our users, or others.

Business transfers. If our business is sold or merged, your information may be transferred to the new owner.

We do not sell your personal information. We share your application with funding partners only because you ask us to find funding for you.

5. Phone calls and text messages

When you submit our form and check the consent box, you agree that Business MCA and our funding partners may contact you at the phone number you give us. We may contact you by call or text message, including by automated technology and prerecorded messages, about your funding request.

• Your consent is not a condition to get funding.
• Message frequency varies. Message and data rates may apply.
• Reply STOP to stop text messages. Reply HELP for help.
• We do not share your phone number or text message consent with third parties for their own marketing.

6. How long we keep your information

We keep your information as long as we need it to process your application, to obey the law, to settle disputes, and to enforce our agreements. When we no longer need it, we delete it or make it anonymous. [Set a retention period, for example: "We delete bank statements [12] months after you submit them."]

7. Cookies and tracking

We use cookies and similar tools to make our website work, to understand how visitors use it, and to measure our ads. [List the tools, for example Google Analytics, Meta Pixel.] You can block or delete cookies in your browser settings. Some parts of the website may not work if you block cookies.

8. How we protect your information

We use reasonable technical and organizational measures to protect your information. These include encrypted connections (HTTPS) and limited access to stored data. But no method of sending or storing data is 100% secure, so we cannot guarantee full security.

9. Your choices and rights

You can:

• Ask us what personal information we have about you
• Ask us to correct your information
• Ask us to delete your information
• Stop text messages by replying STOP
• Stop marketing emails with the "unsubscribe" link

Residents of some states, such as California, may have more rights under state law. These include the right to know, to delete, to correct, and to not be treated differently for using these rights. To make a request, contact us (see Section 12). We will verify your identity before we act on your request.

10. Children

Our services are for businesses and adults. We do not knowingly collect information from anyone under 18.

11. Changes to this policy

We may update this policy. We will post the new version on this page and change the effective date at the top.

12. Contact us

If you have questions about this policy or want to make a request, contact us:

• Email: [privacy email]
• Phone: [phone number]
• Mail: [mailing address]