Privacy Policy

This Privacy Policy explains how [COMPANY LEGAL NAME] ("CapitalBridge," "we," "us," or "our") collects, uses, and shares information about you when you use our website and services (the "Services"). CapitalBridge operates a loan marketplace that connects business owners with third-party lenders. We are not a lender and do not make credit decisions.

1. Information We Collect

When you submit an application or otherwise interact with our Services, we collect:

• Business information: legal business name, industry, state, and time in business.
• Financial information: monthly revenue range, requested funding amount, funding purpose, urgency, existing business debt, and self-reported credit indicators (estimated credit score and history of defaults, bankruptcies, or liens).
• Contact information: first and last name, email address, phone number, and any optional notes you provide.
• Technical information: device, browser, IP address, referral source, and aggregate usage data collected through our analytics provider (see Section 6).

We do not perform a hard credit inquiry through our Services. If you proceed with a matched lender, that lender may conduct its own credit review under its own privacy practices.

2. How We Use Your Information

We use the information we collect to:

• Match you with lenders in our network whose products fit your profile.
• Forward your application to those lenders so they can evaluate it and contact you with offers.
• Communicate with you about your application and our Services.
• Send marketing communications about funding products we believe may interest you, where permitted by law.
• Operate, secure, debug, and improve our Services.
• Comply with legal obligations and enforce our Terms of Service.

3. How We Share Your Information

We share your information with:

• Lender partners. When you submit an application, we forward it to one or more lenders in our network so they can evaluate you for funding offers. Once a lender receives your information, that lender's privacy practices govern its handling of that information.
• Service providers. Vendors who help us operate the Services (hosting, analytics, email/SMS delivery, fraud prevention) under contracts that limit their use of your information to the services they provide to us.
• Legal and protective disclosures. When required by law, subpoena, or other legal process, or to protect the rights, property, or safety of CapitalBridge, our users, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, your information may be transferred as part of the transaction.

We do not sell your personal information for money, and we do not share your personal information for cross-context behavioral advertising.

4. GLBA Notice — Financial Information

Because we collect financial information in connection with helping you obtain a financial product, we are subject to the federal Gramm-Leach-Bliley Act ("GLBA").

• We collect nonpublic personal information from you (e.g., revenue, funding needs, credit indicators) directly through your application.
• We disclose this information to lender partners and service providers as described in Section 3 in order to process the transaction you have requested, and otherwise as permitted by law or with your consent.
• We maintain physical, electronic, and procedural safeguards designed to protect your nonpublic personal information.
• Because we share your nonpublic personal information only to process the application you have requested or with parties acting on our behalf as service providers, the GLBA opt-out for "nonaffiliated third party" sharing does not apply. If you do not want your information forwarded to lenders, do not submit an application.

5. Data Retention

We retain your personal information for [RETENTION PERIOD] from the date of your last interaction with our Services, after which we delete or de-identify it, except where a longer retention period is required to comply with legal obligations, resolve disputes, prevent fraud, or enforce our agreements. Lenders to whom we have forwarded your application retain it under their own retention policies.

6. Cookies and Analytics

We use Plausible Analytics, a privacy-focused analytics service that does not use cookies and does not collect personally identifiable information. Plausible measures aggregate site usage (page views, referrers, country-level location). We may also use a small number of strictly necessary cookies or local-storage entries to operate the site (for example, to remember your application progress). We do not use third-party advertising or behavioral-targeting cookies.

7. Your Rights

You may:

• Access the information we hold about you.
• Correct inaccurate information.
• Delete your information, subject to legal exceptions.
• Opt out of marketing communications at any time by following the unsubscribe link in any marketing email, replying STOP to any marketing text, or emailing [PRIVACY EMAIL].
• Withdraw consent for further lender outreach by emailing [PRIVACY EMAIL]. We cannot retract information already disclosed to a lender; you must contact that lender directly to exercise rights against it.

To exercise these rights, email [PRIVACY EMAIL]. We will verify your identity before responding and will respond within the timeframes required by applicable law.

8. California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA").

Categories of personal information we collect. Identifiers; commercial information; financial information; internet/network activity; general (non-precise) geolocation; professional or employment-related information; and inferences. See Section 1 for specifics.

Sources. Directly from you (the application form and any communications with us) and automatically from your device (analytics).

Business purposes for collection. Matching you with lenders, communicating with you about your application, operating and securing the Services, and complying with law.

Categories of recipients. Lender partners (for the business purpose of fulfilling the application you submit) and service providers (hosting, analytics, communications, fraud prevention).

Sale or sharing. We do not sell your personal information and we do not share your personal information for cross-context behavioral advertising as those terms are defined under the CCPA. We disclose your personal information to lenders for the business purpose of processing the application you have requested; lenders are contractually limited in how they may use that information.

Your CCPA rights.

• Right to know what personal information we collect, use, and disclose.
• Right to delete personal information we have collected, subject to exceptions.
• Right to correct inaccurate personal information.
• Right to limit use and disclosure of sensitive personal information. We do not use sensitive personal information beyond the purposes permitted under CCPA Regulation §7027(m), so this right is not actionable against us in practice.
• Right to opt out of sale or sharing — not applicable, as we do not sell or share.
• Right to non-discrimination for exercising your rights.

To exercise your rights, email [PRIVACY EMAIL] with the subject line "California Privacy Request." You may designate an authorized agent to make a request on your behalf; we will require written proof of authorization and may verify directly with you.

9. Children's Privacy

Our Services are intended for adult business owners and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at [PRIVACY EMAIL] and we will delete it.

10. Security

We use commercially reasonable physical, administrative, and technical safeguards to protect your information, including encryption in transit. No system is perfectly secure, and we cannot guarantee the absolute security of your information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Effective Date" above. Material changes will be communicated through additional notice (for example, by email or a banner on the site).

12. Contact

Questions, requests, or complaints about this Privacy Policy: