Home About Mission Contact Get Funded →
// Legal

PRIVACY POLICY

Effective Date: January 1, 2025
Last Updated: June 3, 2026
Version: 2.0
// The Short Version — Our Core Promise

Your information is yours. Full stop. AI MCA Exchange was built on one principle — merchants deserve to be treated with respect. That starts with your data. We will never sell your information. We will never share it with brokers. We will never use it to solicit you. Everything in this policy exists to protect you, not to create loopholes around that promise.

// 01
INFORMATION WE COLLECT

When you use AI MCA Exchange, we collect information necessary to provide you with funding options and operate the platform. We collect only what we need — nothing more.

Information you provide directly:

Account information — your name, email address, phone number, and password when you create an account
Business information — business name, type, address, time in business, and industry
Financial information — bank statements, monthly revenue figures, and existing funding positions you submit as part of the funding application process
Identity information — government-issued ID and other verification documents required by our lending partners
Communications — messages you send through our contact form, AI agent interactions, and support correspondence

Information collected automatically:

Usage data — pages visited, features used, and time spent on the platform
Device information — browser type, operating system, and IP address
Cookies and tracking — see our Cookies section below for full details
// 02
HOW WE USE YOUR INFORMATION

We use the information we collect for specific, limited purposes — all of which are directly related to providing you with the best possible funding experience.

PurposeHow We Use It
Funding MatchingTo analyze your file and match it to the most appropriate direct lender based on your business profile, revenue, and funding needs
Account ManagementTo create and maintain your account, authenticate your identity, and provide access to your personal AI funding agent
CommunicationTo contact you when a funding offer is ready, respond to your inquiries, and send account-related notifications you have requested
Platform ImprovementTo understand how our platform is used and improve the experience — always in aggregate and anonymized form
Legal ComplianceTo comply with applicable laws, regulations, and legal obligations
Fraud PreventionTo detect and prevent fraudulent activity and protect the integrity of the Exchange
// 03
WHAT WE NEVER DO

These are absolute commitments — not subject to exceptions, fine print, or future changes without your explicit consent.

We never sell your personal information to any third party, data broker, lead aggregator, or marketing company — ever, under any circumstances
We never share your information with MCA brokers — your file goes directly to matched lenders only, never to brokers or their networks
We never send unsolicited funding solicitations — we will never text, call, or email you asking if you need funding
We never shop your file — your financial documents are never sent to multiple lenders without your knowledge and consent
We never allow advertisers to target you based on your financial information or funding activity
We never use your data for purposes beyond this policy without first obtaining your explicit consent

The bottom line: Your information is used to get you funded — and nothing else.

// 04
INFORMATION SHARING

We share your information only in the following limited, necessary circumstances:

Direct lenders on our Exchange — when you authorize us to submit your file, your information is shared only with the specific lender matched to your profile. You will know which lender receives your file before submission.
Service providers — trusted technology partners who help us operate the platform. These partners are contractually prohibited from using your data for any purpose other than providing services to us.
Legal requirements — we may disclose your information when required by law, court order, or to protect rights and safety.
Business transfers — in the event of a merger or acquisition, your information may be transferred with the same privacy protections applied.
// 05
DATA SECURITY

You are trusting us with sensitive financial information. We take that seriously.

256-bit SSL encryption on all data transmitted to and from our platform
Encrypted storage for all sensitive financial documents and personal information at rest
Access controls — your data is accessible only to authorized personnel with a legitimate need
Regular security audits to identify and address vulnerabilities
Secure document handling — financial documents processed in isolated environments
// 06
DATA RETENTION

We retain your information only for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, and resolve any disputes.

Data TypeRetention Period
Account informationDuration of your account plus 3 years after closure
Financial documentsDuration of the application process plus 5 years for compliance
Funded deal records7 years as required by financial regulations
Communication records3 years from the date of communication
Usage and analytics data24 months, anonymized after 12 months

You may request deletion of your account and personal information at any time.

// 07
YOUR RIGHTS
Right to access — you may request a copy of the personal information we hold about you
Right to correction — you may request that we correct inaccurate or incomplete information
Right to deletion — you may request that we delete your personal information, subject to our legal obligations
Right to portability — you may request your data in a structured, machine-readable format
Right to opt out — you may opt out of any non-essential communications at any time
Right to restrict processing — in certain circumstances, you may request that we limit how we use your information

To exercise any of these rights, contact us at hello@mcaexchange.ai. We will respond within 30 days. California residents have additional rights under CCPA — we honor all CCPA requests.

// 08
COOKIES

We use cookies and similar tracking technologies to operate and improve our platform. We use the minimum necessary — we are not in the business of surveillance.

Essential cookies — required for the platform to function. These cannot be disabled.
Analytics cookies — help us understand how the platform is used. Anonymized and aggregated only.
Preference cookies — remember your settings and preferences.

We do not use advertising cookies or allow third-party advertising trackers on our platform.

// 09
COMMUNICATIONS & SMS

We will only contact you when you have asked us to, or when there is a real, specific reason directly related to your account or your funding.

✕ NO SHARING OF SMS OPT-IN DATA — EVER. SJM AND SON INC DBA AI MCA Exchange will never share, sell, rent, trade, or transfer your phone number or SMS opt-in consent information to any third party — including but not limited to brokers, lenders, marketing companies, data aggregators, lead generators, or any affiliated or unaffiliated organizations. SMS opt-in consent is collected solely for direct communication between you and SJM AND SON INC DBA AI MCA Exchange. This data is never used for any purpose other than sending you messages directly from our organization. This no-sharing commitment is permanent and without exception.

SMS Program Description: SJM AND SON INC DBA AI MCA Exchange operates an SMS messaging program to communicate with merchants about their funding applications, account status, document requests, and offer notifications. Messages are sent only to users who have explicitly opted in. This is a transactional and account-notification program — not a marketing program.

SMS Opt-In Details:

Who sends messages: SJM AND SON INC DBA AI MCA Exchange only. No third parties ever send messages using your opt-in.
Message types: Application status updates, document requests, funding offer notifications, account confirmations, and security alerts.
Message frequency: Varies based on account activity. Typically 2–6 messages per month.
Message and data rates: Standard message and data rates may apply depending on your mobile carrier and plan.
How to opt out: Reply STOP to any message at any time. You will receive one final confirmation and no further SMS messages will be sent. You may also opt out by contacting us at hello@mcaexchange.ai or (732) 402-4299.
How to get help: Reply HELP to any message or contact us at hello@mcaexchange.ai or (732) 402-4299.
Consent not required: You are not required to consent to SMS messages to use our services or obtain funding.

Communications you will receive from us:

Account creation and verification confirmations
Notification that a funding offer is ready for your review
Responses to messages you have sent us
Security alerts and important account notices

Communications you will never receive from us:

Unsolicited texts, calls, or emails asking if you need funding
Marketing from third-party companies using your contact information
Promotional messages from lenders on our platform
Any communication designed to pressure or solicit you
// 10
CHILDREN'S PRIVACY

AI MCA Exchange is a business funding platform intended exclusively for adults operating legitimate businesses. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us immediately at hello@mcaexchange.ai and we will promptly delete it.

// 11
POLICY CHANGES

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email and post a prominent notice at least 30 days before the changes take effect. We will never use a policy update to reduce your privacy protections.

QUESTIONS ABOUT THIS POLICY?

We mean everything in this policy and we're happy to talk through any of it.


Email: hello@mcaexchange.ai

Phone: (732) 402-4299

Contact Form: mcaexchange.ai/contact


We respond to all privacy inquiries within 30 days.