Privacy Policy
This policy explains what personal information [Brand] Capital collects when a business applies for funding or contacts us, why we collect it, who receives it, and the choices and rights you have. By using our website, requesting a call or submitting an application, you acknowledge this policy.
1. Who we are
[Brand] Capital is a trade name of [Legal entity name], a corporation based at [Street address], Montréal, Québec, Canada ("we," "us," "our").
- We are a commercial financing broker, not a lender or funder. We collect information about your business and its owners so we can match your request with independent funding partners and brokers who make their own decisions.
- Who this covers: visitors to our website and landing pages, people who call or text us, applicants (the business), and each owner, guarantor or officer named in an application.
- Business purpose only: our services are for businesses seeking commercial financing. We do not offer consumer, personal or household credit.
Person in charge of the protection of personal information (privacy officer): [Name, title], [privacy@domain.com], [phone]. Under Quebec's privacy law, our highest-ranking officer holds this role unless it has been delegated in writing; their title and contact details are published here.
2. What we collect and where it comes from
We collect only what funding partners need to review a request, verify it and meet their legal obligations.
| Category | Examples | Source |
|---|---|---|
| Business information | Legal and trade name, EIN, address, phone, industry, entity type, start date, website, revenue, landlord or mortgage details, existing advances or loans | You |
| Owner and guarantor information | Name, home address, date of birth, Social Security number, ownership percentage, contact details, photo ID | You |
| Bank account activity | Account and routing numbers, balances, deposits, withdrawals, transaction history, statements | Our bank-verification provider [DecisionLogic / Plaid], with your login and permission; or statements you upload |
| Documents | Bank statements, voided check, tax returns, ID, other files you upload | You |
| Verification and credit information | Identity and business verification results, public records, liens and judgments, credit reports | Verification providers [Sumsub / Middesk]; funding partners, who may obtain business and personal credit reports with your authorization |
| Signatures and consent records | Typed or electronic signature, the Terms version accepted, date and time, IP address, device and browser | Automatically, when you sign or consent |
| Calls and messages | Call recordings, notes, text messages, emails, call-back requests | You, during contact with us |
| Website and device data | IP address, approximate location, browser, pages viewed, referring ad or link, cookie identifiers | Automatically, via cookies and similar tools (section 6) |
| Referral information | Your contact details and the fact of a referral | A referral partner you authorized to introduce you |
We never ask for your online-banking password directly. Bank login runs inside the verification provider's secure window; we receive account data, not credentials.
If you provide information about another owner or guarantor, you confirm you have their permission to do so and to share this policy with them.
3. How we use it
- Match your request: review your file and present it to funding partners and brokers likely to make an offer.
- Contact you: call, text and email about your request, missing documents, offers and, if you agree, future funding options.
- Verify and prevent fraud: confirm identity, ownership and bank activity, and detect altered documents or false applications.
- Meet legal obligations: keep records, deliver required disclosures, answer regulators and courts, and enforce our Terms.
- Run and improve the site: security, analytics, measuring which ads bring in applications.
We do not use your information to make funding decisions. Each funding partner decides independently.
4. Who we share it with
| Recipient | Why | What they receive |
|---|---|---|
| Funding partners (lenders, funders, purchasers of future receivables) | To review your request and make an offer | Your application, documents, bank data, verification results |
| Other brokers and ISOs we work with | To place your file with additional funding partners | The same, as needed to place the file |
| Service providers | Hosting, bank verification, identity checks, phone and text, e-signature, email, analytics, security | Only what each needs to do its job, under contract |
| Referral partners | To confirm a referral and calculate their fee | Your business name and the status of your file, not your documents |
| Authorities and legal | Law, subpoena, court order, fraud prevention, protecting our rights | What the request requires |
| A buyer or successor | If our business is merged, sold or reorganized | Records transferred under this policy |
Funding partners and brokers may pay us a fee when we deliver an application or when a deal funds. Some US state privacy laws may treat that as a "sale" or "sharing" of personal information. You may opt out of future sharing at any time (section 8), though we cannot present your file to funding partners without sharing it.
Once a funding partner receives your file, its own privacy policy governs its use of your information. We do not sell your information to unrelated marketers or data brokers.
5. Calls, texts and recordings
- Consent: when you request a call or submit an application, you agree that we and our funding partners may call and text the number you provide, including with automated technology or prerecorded or AI voices. Consent is not a condition of obtaining funding.
- Opting out: reply STOP to any text, tell us on a call, or email [privacy@domain.com]. We honor opt-outs within [10] business days and keep a record of them.
- Recording: calls may be recorded and transcribed for quality, training, accuracy and compliance. We tell you at the start of each call, and you may ask that a call not be recorded.
- AI assistants: some calls or messages may be handled by an AI assistant on our behalf. You can ask for a person at any time.
6. Cookies, ads and tracking
We use cookies and similar tools to keep the site secure, remember your progress in a form, measure traffic and see which ads lead to applications.
| Type | Purpose | Can you refuse? |
|---|---|---|
| Essential | Security, bot protection [Cloudflare Turnstile], form progress | No; the site cannot work without them |
| Analytics | Which pages are used and where visitors drop off | Yes |
| Advertising | Measuring ad results [Google Ads] and showing our ads elsewhere | Yes |
- Non-essential cookies stay off until you accept them in our cookie banner, and you can change your choice anytime from the "Cookie settings" link in the footer.
- We honor Global Privacy Control browser signals as an opt-out of advertising cookies and sharing.
- We never place personal information such as your name, phone or SSN in URLs, ad tags or analytics.
7. Where it's stored, how it's protected, how long we keep it
Storage outside Quebec. We are based in Quebec, and your information is stored and processed in the United States by our hosting and service providers [Supabase / Vercel / AWS region], and sent to funding partners in the United States. Before transferring information outside Quebec, we assess whether it will be adequately protected and put written agreements in place. Information held in another country may be accessible to that country's courts and authorities.
Security. We run a written information-security program modeled on the FTC Safeguards Rule, including:
- encryption in transit (TLS) and at rest, with SSNs, account numbers and documents encrypted again separately
- private file storage, opened only through short-lived links
- staff access limited by role, multi-factor sign-in, and a log of every access to a file
- vendor review and contracts with security obligations
- a written incident-response plan; we notify affected people and authorities when the law requires
No system is perfectly secure. If you believe your information has been exposed, contact us right away.
Retention. We keep information only as long as needed for the purposes above, then destroy it or anonymize it.
| Record | Kept for |
|---|---|
| Application file, documents and bank data for a funded deal | [5] years after funding ends |
| Application file that did not fund | [2] years after last activity |
| Call recordings | [2] years |
| Consent, signature and opt-out records | [5] years, to prove consent and honor opt-outs |
| Website analytics | [14] months |
We may keep records longer if a law, dispute or investigation requires it.
8. Your rights and choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you and learn how it is used and who received it
- Correct information that is inaccurate or incomplete
- Delete your information, subject to records we must keep by law
- Withdraw consent or opt out of calls, texts, marketing, advertising cookies and future sharing with funding partners
- Receive a copy in a structured, commonly used format
- Ask about automated decisions, if any are made about you, and have a person review them
- Appeal a refusal of your request
How to ask: email [privacy@domain.com] or call [phone]. We will verify your identity before acting and reply within 30 days. You may use an authorized agent with your written permission. We will not treat you differently for using your rights. A request to delete or stop sharing does not reach funding partners that already received your file; we will tell you which ones did so you can contact them.
9. Children
Our services are for businesses and their adult owners. We do not knowingly collect information from anyone under 18.
10. Changes to this policy
We will post any update here with a new effective date. If a change materially affects how we use information already collected, we will ask for your consent where the law requires.
11. Contact and complaints
Privacy officer: [Name, title] · [privacy@domain.com] · [phone] · [Legal entity name], [street address], Montréal, Québec [postal code], Canada.
If you are not satisfied with our answer, you may complain to the Commission d'accès à l'information du Québec or to the privacy regulator or attorney general of your state.
Effective date: [date] · Version: 1.0