Privacy Policy

Effective Date: October 8, 2026 · Previously updated August 25, 2026

1. Information We Collect

When you use MCA Directory, we may collect the following types of information:

  • Account information: name, email address, company name, job title
  • Profile information: company website, phone number, funding parameters (for funder/ISO accounts)
  • Search activity: deal criteria you enter (revenue, credit score, industry, position), search history, funder cards viewed
  • Communications: messages sent between brokers and ISO representatives through our platform
  • Reviews: reviews, ratings, and replies you submit, and the supporting documents attached to them — see section 4
  • Business funding applications: if you apply for funding as a business owner, business and owner details including your Social Security number, date of birth, and bank statements — see section 5
  • Technical data: IP address, browser type, device information, pages visited, time spent on the platform

2. How We Use Information

We use the information we collect to:

  • Provide, operate, and improve the MCA Directory platform
  • Match brokers with qualifying funders based on deal criteria
  • Enable secure messaging between brokers and ISO representatives
  • Send transactional emails such as account confirmations and password resets
  • Analyze usage patterns to improve search accuracy and platform features
  • Detect and prevent fraudulent or unauthorized activity
  • Comply with legal obligations

3. Information Sharing

We do not sell your personal information. We share information only in the following circumstances:

  • With funders/ISO reps: When a broker initiates contact, limited contact details are shared to facilitate the conversation
  • With funding partners: If you submit a business funding application, it is shared with the funders and their representatives we submit it to — see section 5
  • Service providers: We use third-party services (such as Neon for database hosting, Resend for email delivery, Vercel for hosting, and Jotform for business funding applications) that process data on our behalf under data processing agreements
  • Legal requirements: We may disclose information if required by law, court order, or to protect the rights, property, or safety of MCA Directory or its users
  • Business transfers: In connection with a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction

4. Reviews

Reviews are a public feature. If you write one, understand before you submit it that the following becomes visible to anyone on the internet, including search engines and AI systems that index this site:

  • The full text of your review, its rating, and the date it was published
  • Your company name — reviews are bylined to the company, never to you individually
  • A masked form of your email address, such as *****@yourcompany.com, which shows your company's domain but not your address
  • Your company's logo, if we hold one

We do not publish your name, your full email address, your phone number, or your job title alongside a review. Note that your company domain is visible by design, so at a small company a reader may still be able to infer who wrote it. If that matters to you, do not submit a review.

Supporting documents

Documents attached to a review are transmitted to our moderation inbox and are never stored on our servers and never published. We keep only a record of the type of document supplied, such as “correspondence” or “funding contract”. The documents themselves remain in our email system as a record of moderation. Do not attach material you are not permitted to share, and do not attach recordings made without the consent required in your jurisdiction.

Reviews about you or your company

If someone reviews your company, we may use contact details we already hold, or a publicly listed business contact address, to notify you that a review was published and to tell you how to respond. A review is a statement about a business relationship rather than personal information about you, and a request to delete your personal data does not by itself require us to remove a review that another user wrote. To dispute a review, follow the process in section 5.7 of our Terms of Service.

Disclosure of reviewer identity

We do not disclose a reviewer's identity to the company they reviewed. We may disclose it, along with associated account and technical records, where we are required to by law — including in response to a subpoena, court order, or other valid legal process — or where we believe disclosure is necessary to protect the rights, property, or safety of MCA Directory or any person. We do not undertake to notify you before doing so unless the law requires it.

Retention

Published reviews and replies are retained indefinitely as part of the public record of the platform, including after the author's account is closed. Closing your account does not remove reviews you have written. Rejected and withdrawn submissions are retained for our moderation records.

5. Business Funding Applications

Business owners can apply for funding through our application at /business-funding. This section covers that application only.

What we collect

  • Business details: legal name, entity type, address, state of incorporation, industry, phone, email, business start date, and EIN
  • Owner details: name, date of birth, ownership percentage, estimated credit score, email, phone, and Social Security number
  • Your most recent business bank statements
  • Your electronic signature and the authorizations you give in the application

Where it is held

The application is collected and stored by our form provider, Jotform, on our behalf. It is not stored in the MCA Directory database. We access submissions through our Jotform account.

How we use and share it

We use your application to find funders suited to your business and to submit your application to them. Depending on the authorization you sign, we and those funders may obtain business and consumer credit reports and other information about you from credit bureaus, banks, and other third parties. We may contact you by phone, email, or text message about your application.

Your application is shared only with the funders and their representatives we submit it to, and with service providers who process it on our behalf. We do not sell funding applications or the information in them. We do not share your mobile number or text-message consent with third parties for their own marketing. Reply STOP to any text message to opt out.

Retention and deletion

We delete funding applications, including bank statements, within 12 months of submission, unless a funding transaction is in progress or the law requires us to keep them longer. Funders who receive your application keep it under their own privacy policies. You may ask us to delete your application sooner by emailing the address in section 11.

6. Cookies

MCA Directory uses cookies and similar tracking technologies to maintain your session (authentication), remember your preferences, and analyze how the platform is used. Session cookies are deleted when you close your browser. Authentication cookies expire after 7 days.

You can configure your browser to refuse cookies, but some features of the Service may not function properly without them.

7. Data Security

We implement reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. Passwords are stored using industry-standard hashing (bcrypt). All data is transmitted over HTTPS.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Data Retention

We retain your account information for as long as your account is active. Search logs are retained for analytical purposes and may be retained in aggregate form indefinitely. Message history is retained for the duration of the associated account. You may request deletion of your account and associated data at any time.

9. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your account and personal data
  • Opt out of non-transactional email communications
  • Request a copy of your data in a portable format

To exercise any of these rights, contact us at the address below. We will respond to valid requests within 30 days.

10. Use of Artificial Intelligence

Certain blog articles, guides, and educational resources published on MCA Directory may be drafted, edited, or enhanced with the assistance of artificial intelligence (AI) tools. All content is reviewed for accuracy, but we do not guarantee that AI-assisted content is free from errors.

AI-assisted content on this platform is provided for informational purposes only and does not constitute financial, legal, or business advice. Users should independently verify any information before making business decisions.

11. Contact

If you have questions or concerns about this Privacy Policy or how your data is handled, please contact us at:

MCA Directory
admin@mcadirectory.io

SearchFunderPromosMarketplaceReviews