💡 Summary #
Factor & Fund values your privacy and safeguards your information with industry-leading security standards.
This policy explains how we collect, use, store, and protect your business and personal data — and your rights under California and U.S. privacy laws.
⚙️ What Information We Collect #
We collect only the data necessary to evaluate, approve, and manage your funding relationship:
- Business information: Company name, EIN, address, tax documents, licenses.
- Financial data: Bank statements, invoices, A/R reports, and payment history.
- Contact details: Name, phone, and email of authorized business representatives.
- Buyer information: Contact and payment data for verified debtors.
- Usage data: Basic analytics from our website or secure portal (no tracking cookies for marketing).
🟦 We never collect sensitive consumer information unrelated to your business financing.
🔒 How We Use Your Data #
We use your information solely to:
- Review and approve funding applications.
- Verify buyers and invoices.
- Manage payments, reserves, and legal compliance.
- Communicate account updates and document requests.
- Comply with regulatory requirements under DFPI, CCPA, and federal law.
✅ We never sell or share data for advertising or marketing purposes.
🧩 How We Protect Your Data #
- All uploads and communications are encrypted (SSL/TLS 256-bit).
- Files are stored in secure cloud servers with strict access control.
- E-signatures are verified through eSign or equivalent encrypted platforms.
- Access is limited to authorized personnel involved in underwriting and compliance.
💡 We follow the same data security standards required for licensed financial institutions.
⚖️ Your Data Rights (CCPA & DFPI) #
Under the California Consumer Privacy Act (CCPA) and DFPI regulations, you have the right to:
- Access: Request a copy of all data Factor & Fund maintains about your company.
- Correction: Request updates to incorrect or outdated information.
- Deletion: Request deletion of personal data once all legal obligations are met.
- Disclosure: Know how your information is used and who (if anyone) it is shared with.
To exercise these rights, email ff@factorandfund.com with your company name and request type.
🧾 Data Retention #
- Transaction and compliance records are retained for 7 years as required by law.
- After that, all non-essential files are securely deleted or anonymized.
- If your account closes, data required for UCC or DFPI audits is retained only as long as legally necessary.
🧱 Third-Party Access #
We share information only with:
- Banks or payment processors for ACH and wire transfers.
- Credit and verification services for buyer validation.
- Regulatory agencies when legally required.
No data is sold, rented, or disclosed to marketers or unrelated businesses.
✅ Our Legal Compliance #
Factor & Fund complies with:
- California DFPI (Department of Financial Protection & Innovation)
- CCPA (California Consumer Privacy Act)
- GLBA (Gramm-Leach-Bliley Act)
- UCC Article 9 data handling standards
❓ FAQ #
Does Factor & Fund sell personal data?
No. We never sell, rent, or monetize client data in any way.
Can I request to have my documents deleted early?
Yes, once your account is closed and legal retention periods expire.
Will my data ever be shared with my buyers?
Only limited invoice-related information (invoice number, payment status) for verification — never financial or personal data.
