Privacy policy

What we collect

What you type into the application: your business details, its address, how much you need and what for, and your name, email and role. If you create an account, your password is stored only as a hash — we never see it.

What you upload: bank statements, company registration documents, and identity documents.

What we already held: if you came to us from our existing customer file, we already hold your trading history and current exposure. That is the point of the offer we make you.

What your browser tells us: pages you visited, roughly where you are from your IP address, and what device you used. We use PostHog and Amplitude for this.

Identity verification

An independent identity-verification provider checks your ID. It receives the photo of your ID and the selfie you take, compares them, and sends us the result. It holds them encrypted on its own servers in the European Union.

When the check passes, we keep a copy of the front and back of your ID on your file, because the funding partners we place applications with ask to see it. We do not keep the selfie. Your copy is stored encrypted with the rest of your file, seen only by authorized staff working your file and the funding partners your application is sent to, and kept for as long as the rest of your file (see How long we keep it).

Why we use it

To decide whether we can fund you, to verify you are who you say you are, to meet anti-money-laundering and record-keeping obligations, and to contact you about your application.

We do not sell your personal information. We do not use it to advertise to you.

Who else sees it

Our staff, on a need-to-know basis — a salesperson working your file sees what they need to talk to you and no more.

Funding partners, if we place your application with one, and only then.

Service providers who run parts of this for us: our hosting, our email sender, our identity checker, and our analytics.

Anyone the law requires.

Credit reports

If you authorised a credit check when you applied, we may obtain business and personal credit reports and share the outcome with a funding partner considering your application.

How long we keep it

For as long as we are required to, which for financial records is typically seven years after a file closes. Applications that go nowhere are kept for long enough to recognise you if you come back, then removed.

Your choices

You can ask us what we hold about you, ask us to correct it, or ask us to delete it where we are not legally required to keep it. Email us and we will tell you what we can and cannot do, and why.

Security

Everything is encrypted in transit and at rest. Your file, including your documents, is stored on servers in the United States (New York) run by our hosting provider, DigitalOcean. Access to the internal tools is restricted by role, and what a salesperson can see is limited in the database itself, not just hidden in the interface.