Privacy notice.
What is collected, why, who sees it, and how to have it removed.
Last revised 21 September 2026.
The short version
We hold what an application needs. Funders are shown it, because a price cannot be put on an unread file. Retention runs as long as the rules governing funding oblige, and nothing is sold. The detail is below.
Information we hold
An application supplies the entity's registered name and EIN, how it is constituted, the trade it operates in, when it began, the premises and the applicant's residence, a band for monthly income, the sum sought and its intended use, and any facility presently being serviced. It also supplies the applicant's name, date of birth, share of ownership, telephone number, email address, a credit band and - where identity has to be established - a Social Security Number.
Uploads supply whatever appears within the bank statements sent to us. Our servers additionally record the network address an application arrived from, the moment each stage was completed, and unremarkable details of the browser used; that material evidences completion and helps us notice misuse.
What we do with it
Four things. We assess the file. We put it to funders. We prepare whatever agreement follows. We keep the records that funding rules and anti-fraud obligations oblige us to keep. Contacting you about your own file follows from the first three. None of it feeds advertising.
Who else sees it
Funders see the file, statements included, because a file nobody reads cannot be priced. Suppliers see the narrow slice their task requires - a host stores it, a mail service delivers a message, a signature service carries a document, an identity service confirms a person - and each acts on our instruction rather than its own. A court, a regulator or a law-enforcement body sees what a lawful demand entitles it to see. Nobody else does. We do not sell applicant information and we do not hand it to companies wanting to market their own products.
How long we keep it
Stalled files stay only while resumption looks realistic, and are removed after that. Funded files outlast the funding itself, since the rules require records to stand for some years past the closing payment. Statements go when the file they belong to closes and its retention period expires.
Security
Encrypted on the wire and encrypted at rest. Statements live in storage that cannot be browsed and are reached through links that expire shortly after they are issued. Only people working a file can open it. We are not going to tell you that makes it impossible to breach; it makes it considerably harder.
Requests you can make
Ask what we hold and we will tell you. Ask for a correction and we will make it. Ask for removal and we will remove whatever we are not obliged to retain. Ask us to stop writing to you about a file and we will stop. Requests go to the address on the contact page, and we will establish who you are before acting on one - the alternative would be handing a stranger a business's bank statements on request.
Not for under-18s
This is a service for trading businesses. Nothing here is addressed to children and we do not knowingly gather anything from them.
Revisions
The date at the head of this page moves when the notice does. Anything of substance will be pointed out here rather than slipped in.