Privacy Policy

1. Information We Collect

When you use MCA Directory, we may collect the following types of information:

• Account information: name, email address, company name, job title
• Profile information: company website, phone number, funding parameters (for funder/ISO accounts)
• Search activity: deal criteria you enter (revenue, credit score, industry, position), search history, funder cards viewed
• Communications: messages sent between brokers and ISO representatives through our platform
• Reviews: reviews, ratings, and replies you submit, and the supporting documents attached to them — see section 4
• Technical data: IP address, browser type, device information, pages visited, time spent on the platform

2. How We Use Information

We use the information we collect to:

• Provide, operate, and improve the MCA Directory platform
• Match brokers with qualifying funders based on deal criteria
• Enable secure messaging between brokers and ISO representatives
• Send transactional emails such as account confirmations and password resets
• Analyze usage patterns to improve search accuracy and platform features
• Detect and prevent fraudulent or unauthorized activity
• Comply with legal obligations

3. Information Sharing

We do not sell your personal information. We share information only in the following circumstances:

• With funders/ISO reps: When a broker initiates contact, limited contact details are shared to facilitate the conversation
• Service providers: We use third-party services (such as Neon for database hosting, Resend for email delivery, and Vercel for hosting) that process data on our behalf under data processing agreements
• Legal requirements: We may disclose information if required by law, court order, or to protect the rights, property, or safety of MCA Directory or its users
• Business transfers: In connection with a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction

4. Reviews

Reviews are a public feature. If you write one, understand before you submit it that the following becomes visible to anyone on the internet, including search engines and AI systems that index this site:

• The full text of your review, its rating, and the date it was published
• Your company name — reviews are bylined to the company, never to you individually
• A masked form of your email address, such as *****@yourcompany.com, which shows your company's domain but not your address
• Your company's logo, if we hold one

We do not publish your name, your full email address, your phone number, or your job title alongside a review. Note that your company domain is visible by design, so at a small company a reader may still be able to infer who wrote it. If that matters to you, do not submit a review.

Supporting documents

Documents attached to a review are transmitted to our moderation inbox and are never stored on our servers and never published. We keep only a record of the type of document supplied, such as “correspondence” or “funding contract”. The documents themselves remain in our email system as a record of moderation. Do not attach material you are not permitted to share, and do not attach recordings made without the consent required in your jurisdiction.

Reviews about you or your company

If someone reviews your company, we may use contact details we already hold, or a publicly listed business contact address, to notify you that a review was published and to tell you how to respond. A review is a statement about a business relationship rather than personal information about you, and a request to delete your personal data does not by itself require us to remove a review that another user wrote. To dispute a review, follow the process in section 5.7 of our Terms of Service.

Disclosure of reviewer identity

We do not disclose a reviewer's identity to the company they reviewed. We may disclose it, along with associated account and technical records, where we are required to by law — including in response to a subpoena, court order, or other valid legal process — or where we believe disclosure is necessary to protect the rights, property, or safety of MCA Directory or any person. We do not undertake to notify you before doing so unless the law requires it.

Retention

Published reviews and replies are retained indefinitely as part of the public record of the platform, including after the author's account is closed. Closing your account does not remove reviews you have written. Rejected and withdrawn submissions are retained for our moderation records.

5. Cookies

MCA Directory uses cookies and similar tracking technologies to maintain your session (authentication), remember your preferences, and analyze how the platform is used. Session cookies are deleted when you close your browser. Authentication cookies expire after 7 days.

You can configure your browser to refuse cookies, but some features of the Service may not function properly without them.

6. Data Security

We implement reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. Passwords are stored using industry-standard hashing (bcrypt). All data is transmitted over HTTPS.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your account information for as long as your account is active. Search logs are retained for analytical purposes and may be retained in aggregate form indefinitely. Message history is retained for the duration of the associated account. You may request deletion of your account and associated data at any time.

8. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and personal data
• Opt out of non-transactional email communications
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at the address below. We will respond to valid requests within 30 days.

9. Use of Artificial Intelligence

Certain blog articles, guides, and educational resources published on MCA Directory may be drafted, edited, or enhanced with the assistance of artificial intelligence (AI) tools. All content is reviewed for accuracy, but we do not guarantee that AI-assisted content is free from errors.

AI-assisted content on this platform is provided for informational purposes only and does not constitute financial, legal, or business advice. Users should independently verify any information before making business decisions.

10. Contact

If you have questions or concerns about this Privacy Policy or how your data is handled, please contact us at:

MCA Directory
admin@mcadirectory.io