GetMeFundedNowFundingCheck your options
Template — not yet reviewed by counsel. This document is a working draft with bracketed placeholders. It must be reviewed and finalized by an attorney before the site accepts real applications. (Tracked in SETUP-CHECKLIST.md.)

Privacy Policy

Effective date: [EFFECTIVE DATE] · Last updated: August 3, 2026

This policy describes how FundingMatrix LLC, doing business as GetMeFundedNow (“we,” “us”), collects, uses, stores, and shares information when you use getmefundednow.com (the “Site”) or apply for funding. It is written to be read, not skimmed — the section most applicants care about is Section 3: The bank connection.

1. Who this covers

Our product is commercial funding for registered businesses. We collect information about the business applying and about the individual owner or authorized signer who completes the application. We do not offer consumer financial products, and this Site is not directed to children.

2. Information we collect

Information you provide

  • Business information: legal business name, entity type, EIN, industry, state of registration, business start date, business address, and your answers about existing funding obligations.
  • Personal information about the owner or signer: name, mobile number, email address, date of birth, Social Security number, home address, and ownership percentage.
  • Documents you upload, such as bank statements, if you choose manual upload instead of the bank connection.

Information collected automatically

  • Device and usage information: IP address, browser type, pages visited, and timestamps, collected through standard server logs.

Financial information from your bank, via Plaid

If you connect your bank account, we receive the data described in Section 3. If you upload statements instead, we extract the same categories of information from those documents.

3. The bank connection (Plaid)

We use Plaid Inc. to connect to your business bank account. Here is exactly how that works:

  • Your login credentials never touch our systems. You enter them directly with Plaid (or your bank’s own login page). We receive a secure access token — not your username or password — and we cannot retrieve your credentials from Plaid.
  • The connection is read-only. Neither we nor the connection can move money in or out of your account.
  • What we receive: account details (institution name, account name, type, and masked account number), current and historical balances, up to 12 months of transaction history (dates, amounts, descriptions, and categories), and the identity information your bank has on file (account holder name and contact details), which we use to verify the account belongs to your business.
  • What we compute from it: summary metrics about your deposits — for example, average monthly deposit volume, deposit consistency, balance patterns, and recurring obligations — which a human reviewer uses to evaluate your application.
  • Plaid’s role: Plaid processes your data under its own End User Privacy Policy. You can view and manage every app connected to your bank accounts, including ours, at my.plaid.com.

4. How we use information

  • To evaluate your application. Every decision is made by a human reviewer; we do not use automated approval or decline.
  • To verify your identity and your business’s registration.
  • To run a soft credit inquiry, with your explicit authorization, which does not affect your credit score.
  • To prepare and service any funding agreement you sign, including calculating remittances and honoring reconciliation requests.
  • To communicate with you about your application by text message and email, per the consents you give during the application.
  • To meet legal, regulatory, and audit obligations.

We do not sell your personal information, and we do not use your financial data for advertising.

5. How we store and protect it

  • All data is encrypted in transit (TLS) and at rest.
  • The most sensitive values — Plaid access tokens and Social Security numbers — are additionally encrypted at the application layer (AES-256-GCM) before they reach our database, so they are never stored or visible in plaintext.
  • Data is hosted with Supabase (PostgreSQL) in [HOSTING REGION, e.g. AWS us-east-1].
  • Access is restricted to authorized reviewers, and every access to an application and every decision is recorded in an append-only audit log.

6. How long we keep it

DataRetention period
Social Security number (full)Erased as soon as it has served its purpose — once identity verification and the credit inquiry are complete, or when a decision is recorded, whichever comes first. Only the last four digits are kept, so we can confirm your identity if you contact us.
Applications that do not result in funding[e.g. 24 months after decision]
Bank transaction data and derived metrics[e.g. 24 months after last sync]
Funded agreements and remittance records[e.g. 7 years after completion, per record-keeping obligations]
Audit log[e.g. 7 years]

We may retain information longer where required by law, regulation, or an active dispute, and we delete or de-identify it when the retention period ends.

7. Revoking bank access and deleting your data

You can disconnect your bank account at any time, three ways:

  1. Email support@getmefundednow.com with the subject “Revoke bank access.” We will disable the connection within [e.g. 5 business days].
  2. Remove our access yourself at my.plaid.com, Plaid’s self-service portal.
  3. Remove the connection through your bank, if your bank offers it.

When access is revoked we stop receiving new data immediately and delete the stored access token. You may also request deletion of the transaction data already collected; we will honor the request within [e.g. 30 days] unless we are required to retain it (for example, for an active funding agreement or a legal obligation — in that case we will tell you what is retained and why).

8. Who we share it with

RecipientPurpose
Plaid Inc.Bank connection and financial data retrieval
SupabaseDatabase, authentication, and file storage
VercelWebsite hosting
[SMS PROVIDER, e.g. Twilio]Text-message verification and application updates
[CREDIT BUREAU / VERIFICATION VENDOR]Identity verification and soft credit inquiry

Each provider processes data only to provide its service to us. We may also disclose information when required by law, to enforce an agreement, or in connection with a corporate transaction — and we will never characterize any of that as a sale of your data, because it isn’t one.

9. Your state privacy rights

[STATE PRIVACY RIGHTS SECTION — counsel to complete based on applicable state laws (e.g. California CCPA/CPRA notices, including categories collected and rights to know/delete/correct)]

10. Changes to this policy

If we change this policy materially, we will post the new version here with a new effective date and, for applicants with an active application or agreement, notify you by email or text.

11. Contact

Privacy questions and requests: support@getmefundednow.com, or by mail at [BUSINESS MAILING ADDRESS]. See also our Terms of Service.