Privacy Policy

1. Scope of this policy

GFG ("GFG", "we", "us", or "our") provides working capital to United States businesses, including merchant cash advances, term loans, lines of credit, equipment financing, and invoice factoring. This Privacy Policy describes how we handle information collected through this website, our online funding application, and our phone, email, and text conversations with applicants and customers.

Our products are offered to businesses for business purposes. Much of the information we collect is therefore commercial information about a business rather than personal information about a consumer. Because business owners typically apply in their own names and provide a personal guaranty, we also collect information about individuals, and this policy covers that information too.

2. Information we collect

Information you give us

When you use the estimate tool, submit an application, or contact us, we collect what you provide, which typically includes:

• Business information — legal and trade name, entity type, federal tax identification number, business address and state, industry, date the business started, monthly and annual revenue, existing business debt, and the amount and purpose of funding requested.
• Owner and guarantor information — name, email address, phone number, ownership percentage, home address, date of birth, and Social Security number where required to verify identity or underwrite a personal guaranty.
• Financial information — bank statements, processing statements, tax returns, financial statements, invoices, and account and routing numbers used to fund and collect.
• Communications — the content of emails, text messages, chat messages, and notes from calls, including call recordings where we tell you a call is recorded.

Information collected automatically

When you visit this site, our servers and analytics tools receive standard technical information: IP address, browser and device type, operating system, referring page, the pages you view, the time and length of your visit, and interactions such as which form fields you complete. Incomplete application drafts are stored in your own browser so you can resume where you left off.

Information from other sources

• Business credit bureaus and data providers — payment history, public filings, liens, judgments, bankruptcies, and business verification data.
• Consumer credit bureaus — credit reports on owners and guarantors, as described in section 5.
• Brokers, referral partners, and marketing partners — applications and lead information they submit on your behalf.
• Banking, payment, and accounting platforms — transaction and balance data you authorize us to retrieve.
• Identity, fraud, and sanctions screening services — verification results and watchlist matches required by law.

3. How we use information

We use the information described above to run our funding business. Specifically, we use it to:

• Evaluate your request, underwrite it, and present offers or explain why we cannot make one.
• Verify identity, confirm authority to act for the business, and meet anti-money-laundering, sanctions, and other legal obligations.
• Detect, investigate, and prevent fraud, misuse of the site, and other unlawful activity.
• Fund approved transactions, collect remittances, service accounts, and manage renewals and payoffs.
• Respond to your questions and provide customer support.
• Send you information about products, renewals, and offers, subject to the choices in section 11.
• Improve the site, our application flow, our pricing models, and our underwriting.
• Enforce our Terms & Conditions, protect our rights, and resolve disputes.

We do not use the information you provide to make automated decisions that produce legal effects without any human involvement. Underwriting uses scoring models, but funding decisions are reviewed by our underwriting team.

4. How we share information

We do not sell your information. We share it only as described here:

We may also share aggregated or de-identified information that cannot reasonably be used to identify you or your business.

5. Business and credit reports

When you submit an application, you authorize us and our funding partners to obtain business credit reports, bank and trade references, and consumer credit reports on each owner and guarantor, at application and at any time while a transaction is outstanding or being considered for renewal.

A request to see your options on this site does not by itself trigger a hard consumer credit inquiry. We use a soft inquiry to pre-qualify. A hard inquiry, which can affect an owner's personal credit score, is made only where the application discloses it and you have authorized it — typically at the point we prepare a firm offer or fund a transaction.

6. Bank data and statements

Underwriting a cash advance or working-capital facility depends on deposit history. You may give us bank statements directly, or connect your bank account through a third-party aggregator so we can retrieve read-only transaction and balance data.

If you connect an account, you provide your credentials to the aggregator, not to GFG, and we do not receive or store your online banking username or password. We receive the transaction and balance data the aggregator returns. That aggregator handles your credentials under its own privacy policy and terms, which we encourage you to read. You can disconnect the account at any time by contacting us, though we will retain data already received as described in section 9.

7. Cookies and analytics

We use cookies and similar technologies to keep the site working and to understand how it is used:

• Strictly necessary — session handling, security, load balancing, and saving your place in the application. These cannot be turned off through the site.
• Analytics — aggregate measurement of traffic, page performance, and where applications are abandoned.
• Advertising and attribution — measuring which campaigns produce applications, and showing GFG ads to people who visited the site.

Most browsers let you block or delete cookies in their settings. Blocking strictly necessary cookies will break parts of the application. Because industry standards vary, we do not currently respond to browser "Do Not Track" signals. We do honor Global Privacy Control signals where the law requires it, as described in section 12.

8. Calls, texts, and email

By giving us a phone number and checking the consent box on the application, you agree that GFG and its funding partners may call and text that number about your application and our products, including with automated dialing systems and prerecorded messages. Consent is not a condition of receiving funding. Message and data rates may apply, and message frequency varies.

You can stop marketing texts by replying STOP to any message, and stop marketing email by using the unsubscribe link in any message or emailing us. We will still send you transactional messages about an application or an open account — funding confirmations, remittance notices, and servicing or collection communications — because those are not marketing.

We may monitor or record calls for training, quality, and compliance. Where a call is recorded, we tell you at the start of the call.

9. How long we keep information

We keep application and transaction records for as long as needed to operate the business and to meet legal, tax, audit, and recordkeeping obligations — generally at least seven years after a transaction closes or an application is declined or abandoned. Fraud, dispute, and collection records may be kept longer where there is an ongoing matter.

Application drafts saved in your own browser stay on your device until you complete the application, clear your browser storage, or thirty days pass, whichever comes first.

10. How we protect information

We maintain administrative, technical, and physical safeguards designed to protect the information we hold. These include encryption of data in transit, encryption of sensitive data at rest, role-based access limited to staff who need it, logging and monitoring, vendor due diligence, and employee training.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please do not send Social Security numbers, account numbers, or statements to us by ordinary email; use the application or ask us for a secure upload link. If we learn of a breach affecting your information, we will notify you as required by applicable law.

11. Your privacy choices and rights

You can always:

• Opt out of marketing — reply STOP to texts, use the unsubscribe link in email, or ask us to stop calling.
• Decline to provide information — but we may not be able to evaluate a request without it.
• Ask what we hold — request a copy of the information we have about you or your business.
• Ask us to correct — tell us about inaccurate information and we will correct our records.
• Ask us to delete — subject to the recordkeeping obligations in section 9, which usually prevent deletion of funded-transaction records.
• Limit credit pulls — withdraw your authorization for future reports, which will end our ability to consider a renewal.

To make a request, email funding@gfg.com with "Privacy Request" in the subject line. We will verify your identity and your authority to act for the business before responding, and we will respond within the time the applicable law allows. You may use an authorized agent; we will ask for proof of authorization. We will not discriminate against you for exercising these rights.

12. State-specific disclosures

California

The California Consumer Privacy Act, as amended, gives California residents rights to know, delete, correct, and limit certain uses of personal information, and the right to opt out of its sale or sharing. We do not sell personal information and we do not share it for cross-context behavioral advertising as those terms are defined by that law. Much of what we collect is business information exempt from that law, and information collected to evaluate credit is regulated by the federal Fair Credit Reporting Act and the Gramm-Leach-Bliley Act rather than the CCPA. Where the CCPA does apply, use the contact details in section 16 to exercise your rights, and we will honor Global Privacy Control signals received from your browser as an opt-out.

Other state privacy laws

Residents of states with comprehensive privacy laws — including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and Montana — have similar rights to access, correct, delete, and obtain a copy of personal information, and to appeal a denied request. These laws generally exclude information handled for commercial credit and information covered by the Gramm-Leach-Bliley Act. Submit requests and appeals using the contact details in section 16; if we deny an appeal, we will tell you how to contact your state attorney general.

Commercial financing disclosures

Several states, including California, New York, Utah, and Virginia, require specific disclosures for commercial financing offers. Where those laws apply, we provide the required disclosure with the offer itself. See the disclosures section of our Terms & Conditions.

13. Children's privacy

This site and our products are for businesses and the adults who own them. We do not knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.

14. Third-party sites

This site links to services we do not control, including bank aggregators, e-signature providers, and payment processors. Their handling of your information is governed by their own policies. We are not responsible for the content or privacy practices of those services.

15. Changes to this policy

We may update this policy as our practices, products, or legal obligations change. The effective date at the top of the page shows when it was last revised. If we make a material change, we will post notice on this site and, where required, notify you directly. Your continued use of the site after a change takes effect means you accept the updated policy.