Privacy Policy

1. Overview

OfferFlow MCA (“we,” “us,” or "our") is a technology platform built for MCA brokers to manage application intake, AI statement review, offer presentation, e-sign acceptance, and follow-up automation. This Privacy Policy describes how we collect, use, store, and protect information through our platform.

2. Information We Collect

• Account information: Name, email, company name, and billing details when you register or manage your subscription.
• Merchant application data: Business details, owner/partner information, EIN, SSN, phone numbers, and financial data entered into intake forms.
• Uploaded documents: Bank statements, identification, and any files uploaded by you or merchants for underwriting or stipulation collection.
• Email and notification data: Send status, open/click events, and message content when you use built-in email or notification features.
• Google connected Gmail (optional): If enabled, we access sending capabilities only — we do not read, store, or sell the content of your inbox.

3. How We Use Your Information

• To provide and maintain the platform and its features.
• To process payments and manage subscriptions.
• To send transactional emails, alerts, and follow-up sequences you configure.
• To generate PDFs, audit trails, and acceptance packages.
• To enforce platform limits, security, and compliance obligations.

4. Data Security

We use industry-standard encryption, access controls, and secure hosting infrastructure. All data is stored in SOC 2-aligned environments with regular backups. Access is limited to authenticated users and governed by role-based permissions.

5. Data Sharing

We do not sell user data. We only share data with service providers necessary to operate the platform (e.g., payment processing, cloud hosting, email delivery) under strict confidentiality agreements. We may disclose data if required by law or to protect our rights.

6. Your Responsibilities

You are responsible for obtaining proper consent from merchants and partners whose data you enter or upload. You must comply with all applicable laws, including data privacy and financial services regulations, in your use of the platform.

7. Retention & Deletion

We retain data for as long as your account is active or as needed to provide services. Upon account cancellation or deletion request, we securely delete or anonymize data in accordance with our data retention schedule, except where required by law to preserve records.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the platform. Continued use after changes constitutes acceptance.

9. Contact Us

If you have questions about this Privacy Policy, contact us at support@offerflowmca.com.