Our dedication to safeguarding your privacy

SbaloansHQ, Inc. ("SbaloansHQ," "our," "we," or "us") respects your privacy and understands your concerns about how your personal information is collected, used, safeguarded, and shared. We take these matters seriously. Please review the following terms carefully to learn more about your privacy. This Privacy Policy ("Policy") explains how we collect, use, and disclose your personal information when you use the SbaloansHQ Services. It also outlines your rights and choices regarding your personal information.

By accessing or using the Service, you acknowledge and accept the practices and policies outlined in this Privacy Policy. You also consent to our collection, use, and sharing of your information as described below. (Last updated: 05:21 PM PKT, Tuesday, August 26, 2025)

1. Changes to this Privacy Policy

We reserve the right to make changes to this Policy at any given time. If you want to make sure that you are up to date with the latest changes, we advise you to frequently visit this page. If at any point in time SbaloansHQ decides to make use of any personally identifiable information on file, in a manner vastly different from that which was stated when this information was initially collected, the user or users shall be promptly notified by email. Users at that time shall have the option as to whether to permit the use of their information in this separate manner.

2. What Does this Privacy Policy Cover?

This Privacy Policy applies to information we collect from users of our Service, including brokers, lenders, and borrower clients (and their representatives) who access sbaloansHQ, as well as visitors to our website. It covers personal information collected through our online platform, website, and communications with users. It does not cover any third-party websites or services that you may access through sbaloansHQ such as integrated third-party services, which are governed by their own privacy policies.

Additionally, if you are an end-client (e.g., a borrower) whose information has been entered into sbaloansHQ by a broker or loan officer, please note that the broker using our Service may have their own privacy obligations to you. We primarily process your data on behalf of the broker's business in such cases. This Policy, however, describes how we handle all personal data in our system.

Important Note for Business Clients: If you, as a broker or lender input personal data about other individuals, such as your clients or leads into sbaloansHQ, you are responsible for ensuring you have the proper consent to collect and share that data with us for processing. We treat that data in accordance with this Policy and your instructions within the functionality of the Service. In many cases, sbaloansHQ will act as a "data processor" or "service provider" for such client data, meaning we use it only to provide the Service and as permitted by you, rather than for our own independent purposes.

3. Information We Collect

Depending on how and when you use our Services, we collect personal information in several ways: information you provide to us directly, information we collect automatically through your use of the Service, and information we receive from third parties. Below we describe the categories of information we collect and the purposes for which we use them.

Information You Provide Directly: You may provide personal information to us when using sbaloansHQ. This includes:

Account Registration Data: When you create an account, we collect information such as your name, email address, phone number, company/organization name, role (broker, lender, client), and password. We may also collect your mailing address or other contact details if needed for billing or communication.
Profile and Professional Information: Users (especially brokers and lenders) might provide additional profile info, such as a business title, professional credentials, company website, or a profile picture.
Loan Application and Client Data: Our platform is used to collect and manage loan application information for borrowers. This can include sensitive personal data about your clients and their businesses. For example, brokers or borrowers may input: identifiers like full name, date of birth, Social Security Number (SSN) or Tax ID, driver's license or passport numbers; contact information such as address, email, phone; financial information such as bank statements, tax returns, credit reports, income, assets, debts, credit scores; business information for business loans, such as business name, EIN, financial statements, ownership details; and documentation like uploaded copies of IDs, financial statements, tax forms, , etc. The platform allows storing of these documents in a secure cloud repository. Any such information entered into our system by you or your authorized users is collected by us to provide the Service.
Communications and Support: If you contact us for support or with inquiries (via email, chat, phone, or through forms), we will collect the information you choose to share. This may include contact information and a record of the correspondence.
Payment Information: If you are a paying subscriber, we (via our third-party payment processor) collect payment information. This may include your credit card number, billing address, and related details. We use Square to process payments, so we do not store your full credit card number on our servers. Square may receive your payment card details directly and will store a payment token or record associated with your account. We retain only necessary information such as a billing name, billing contact, the last four digits of your card, and transaction history. Please refer to Square's privacy policy for details on their handling of payment data.
Other: Any other information you intentionally send us. For example, if you participate in surveys, contests, or beta testing, or if you provide testimonials or feedback, we will collect whatever information you provide in those contexts.

Please note: If you choose not to provide certain requested information, you may not be able to use some features of the Service. For instance, if a borrower does not provide required financial information, their loan application cannot be completed on the platform.

Information Collected Automatically: When you use sbaloansHQ including just visiting our website, we automatically collect certain information about your device and usage of the Service. This may include:

Device and Technical Data: We log information about the device and browser you use to access the Service. This includes your device type, operating system name and version, browser type and version, and device identifiers (such as IP address and possibly unique device IDs or advertising IDs). We use IP address to infer approximate geolocation (e.g., city, state, country) for security and analytics.
Usage Data: We collect data about your activity on the Service, such as the pages or screens you view, how long you spend, the features you use, search queries, and the date/time of your visits. We also log when accounts log in and out, and what actions users perform (e.g., uploading a document, initiating a loan application, sending a message through the platform). This information is used to improve the Service, troubleshoot issues, and monitor for suspicious activities.
Cookies and Similar Technologies: We use cookies and similar tracking technologies (such as web beacons or local storage) to provide and improve our Service. For instance, we use session cookies to keep you logged in as you navigate through the platform, and preferences cookies to remember your settings. We may use analytics cookies (from third parties like Google Analytics) to collect information on how our Service is used in aggregate, so we can improve user experience. These cookies may collect your IP address and activity information. We do not use cookies for third-party advertising, and we do not allow third-party ad networks to collect information on our site for targeted advertising. You have choices regarding cookies: most web browsers allow you to refuse or delete cookies. However, note that if you disable cookies, some features of sbaloansHQ (like login persistence) may not function properly.

Information from Third Parties: We generally collect data directly from users or their devices, but in some cases we may obtain information from third-party sources:

Lender Integrations: If sbaloansHQ integrates directly with lender systems or third-party APIs (for example, pulling a credit score from a credit bureau API, or sending data to an SBA system), we might receive information from those sources to populate the platform. For instance, if a lender partner provides status updates on a loan application back to our system, we would collect that information to show to the broker and borrower. Such data would typically be used and stored in the same way as data directly entered on the platform (and governed by this Policy). We will only enable such data flows with appropriate authorization and for the purpose of providing the service you've requested.
Service Providers: We may receive information from service firms assisting us. For example, if we use an analytics provider or error tracking service, they might provide aggregated insights such as "crash reports" or "user engagement metrics". These generally do not identify individuals by name, but may be tied to user IDs or device IDs. Similarly, our email service provider might report on whether you opened an email we sent.

4. What We Use Your Personal Information For

SbaloansHQ uses the information collected from you to provide, improve, and develop the services we provide to you, communicate with you, offer you a better service, and protect us and our users. When you interact with or make use of the SbaloansHQ service, we use a variety of technologies to collect information about you for various reasons.

i.To create and service your user account on the service and to enable certain functionalities for your use on our Services.
ii.To validate your identity and identify you as a user of the Services and ensure the security of your account -e.g., by sending an email to confirm that you are the owner of the email address linked to your user account.
iii.If you are applying for a loan through the system, we use the information provided to prepare application packages and share them with the lenders you select. Similarly, if you are a broker managing a deal, we use client data to create pitch summaries or risk analyses within the platform for you to review or share. If you are making payments, like subscription fees, we use payment information to charge your card via Square and to manage billing.
iv.To communicate with you in connection with our services or any changes in our Terms and Conditions, Privacy Policy or other policies that apply to your use of the SbaloansHQ Services.
v.To personalize the content and information that we may send or display to you, to offer location customization (where permitted by applicable law), connect with other users, personalized help and instructions, and otherwise personalize your experiences while using our website and/or our services, such as developing and offering you with new features to the services we are providing you.
vi.Conducting research and analysis to help develop relevant and helpful features.
vii.For communication purposes:We may send emails, product updates and related emails to the email address you provide to us and text messages to any cellphone number you provided to us, and for informational and operational purposes, such as account management, customer service, system maintenance, and other Service-related purposes. We use personal information that we gather from you to communicate with you in relation to your use of the SbaloansHQ Service via different channels (e.g., by email, chat, phone).
viii.Fraud detection and prevention:We use personal information to enhance the safety and security of our products, services, and community while preventing misuse. This includes detecting and preventing fraud, abuse, identity theft, and other criminal activities. Collected information is also used to protect SbaloansHQ, our users, and others against claims, liabilities, and other risks.
ix.Provide, troubleshoot, and improve SbaloansHQ Services:We use your personal information to understand, diagnose, troubleshoot, and fix issues with the SbaloansHQ Services. We also use such information to operate, evaluate, develop, manage, and improve our Services (including operating, administering, analyzing, and improving our products and services; developing new features and services; managing and evaluating the effectiveness of our communications; performing accounting, auditing, billing reconciliation and collection activities and other internal functions.
x.Comply with and enforce applicable legal requirements:in certain cases, we collect your personal information to stay in compliance with laws and relevant industry standards and policies, including this Privacy Policy and our Terms and Conditions.

5. How We Share and Disclose Information

We understand the importance of keeping your personal data confidential. We do not sell your personal information to third parties for monetary consideration. In the course of running our business and providing the Service, we may share information with others in the following circumstances and with appropriate safeguards:

Lender and Financial Partners – At Your Direction:As noted, when you use sbaloansHQ to facilitate a loan, you may choose to share relevant personal and financial information with third-party lenders or financial institutions. For example, if a borrower client submits a loan application via our platform, the information on that application (and supporting documents) will be transmitted to the lender selected by the broker/client. We will only share the data that is necessary for the application or that you specifically include. The lender is then responsible for that information under their own privacy practices. If you withdraw an application or delete data on our side, that does not guarantee deletion by the lender, so you would need to contact the lender to exercise any rights directly with them.
Your Authorized Users and Accounts:If you are using sbaloansHQ as part of an organization or team, the information you input may be shared with other authorized users within your account. For example, a loan officer can create a borrower client portal login, and that borrower will see their own application data; conversely, the loan officer will see what the borrower uploads. Team members under the same brokerage account might see shared CRM data or collectively work on a loan file. The visibility of data within the Service depends on roles and permissions that you control. We simply make information available to those users to whom you have granted access via the platform's settings. If a borrower uploads a document to their portal, their broker on the platform will have access to that document. This is an intended sharing functionality by design, not an external disclosure.
Service Providers (Processors):We employ trusted third-party companies to perform certain business operations on our behalf, such as payment processing (Square); email delivery services; analytics services; customer support ticketing systems; electronic signature, and other similar support services. These third parties may have access to personal information as needed to perform their functions but are contractually obligated to use it only for our specified purposes, to handle it confidentially, and to implement adequate security measures.
Business Transfers:If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your information may be transferred as part of such a transaction. We would transfer only the necessary data and ensure that the recipient (e.g., the new owner) honors your privacy rights. In such cases, we will notify you of the change in ownership or transfer of assets by posting a notice on our website or contacting you (if required by law), and we will highlight any choices you may have regarding your information at that time. The successor entity would either continue to use your data for the same purposes described in this Policy or obtain your consent for new uses.
Legal Compliance and Protection:We may disclose personal information if we reasonably believe that doing so is legally required or necessary to protect our rights, property, or safety (or that of our users or others). This includes:
- •Compliance with Laws:We may disclose data to comply with laws, regulations, legal processes, or governmental requests. For example, responding to a subpoena, court order, or a law enforcement demand. We will evaluate each request to ensure it has a valid legal basis and is not overbroad. Where allowed, we will attempt to redirect the requesting party to obtain the data directly from you or notify you of the request so you can seek legal intervention. However, we may be prohibited from notifying you in some cases (e.g., a government order under seal).
- •Enforcing Our Rights:We may disclose data as necessary to enforce our Terms and other agreements, or to investigate potential violations (such as misuse of the platform or suspected illegal activity on it).
- •Preventing Harm:We may share information in situations that involve potential threats to personal safety, possible fraud, security of the platform, or situations involving potential harm to any person. For instance, if we detect that someone's credentials were stolen, we might alert law enforcement or affected parties.
- •Debt Collection:If you owe us money and it's significantly overdue, we might share minimal information with collections agencies or legal entities to seek payment, though we will try to resolve directly first.
With Your Consent or At Your Direction:Apart from the instances above, we will share your personal information with third parties if (and only if) you expressly consent to or request such sharing.

In all cases of sharing, we aim to share the minimum information necessary for the intended purpose and to do so securely. We do not allow any third parties with whom we share data to use it for their own unrelated purposes, especially not for marketing to you (unless you have a separate relationship with them or have given consent). We also do not "sell" personal data as traditionally understood.

Lastly, if you choose to post any information in a public or semi-public forum related to sbaloansHQ (for example, a community message board or a review site), understand that such information could be seen by others outside of our control. We urge you not to share confidential personal data in any public forum. sbaloansHQ's own platform is generally private to your account, so standard usage won't result in public disclosure unless you intentionally use a public feature.

6. Data Retention and Deletion

We keep your personal information only as long as necessary to provide you with the SbaloansHQ Service and for legitimate and essential business purposes, such as maintaining the performance of the SbaloansHQ Service, making data-driven business decisions about new features and offerings, complying with our legal obligations, and resolving disputes. We keep some of your personal information for as long as you are a user of the SbaloansHQ Service.

If you request, we will delete or anonymize your personal information so that it no longer identifies you, unless we are legally allowed or required to maintain certain personal information, including situations such as the following:

i.If there is an unresolved issue relating to your use of the service, such as an unresolved claim or dispute, we will retain the necessary personal information until the issue is resolved;
ii.Where we need to retain the personal information for our legal, tax, audit, and accounting obligations, we will retain the necessary personal information for the period required by applicable law; and/or,
iii.Where necessary for our legitimate business interests such as fraud prevention or to maintain the security of our users and the platform.

7. Your Privacy Rights

The General Data Protection Regulations (GDPR) grant you certain rights ('information rights') which increase the obligations of organizations who collect and process personal data and also provide you with certain rights over your personal data:

i.Right of rectification or erasure- if you feel that any data that we hold about you is inaccurate you have the right to ask us to correct or rectify it. You also have a right to ask us to erase information about you where you can demonstrate that the data we hold is no longer needed by us if you withdraw the consent upon which our processing is based, or if you feel that we are unlawfully processing your data. Your right of rectification and erasure extends to anyone we have disclosed your personal information to and we will/shall take all reasonable steps to inform those with whom we have shared your data about your request for erasure. Note that we may have a legal obligation to retain some or even all personal information about you under relevant laws. We may also have the legal right to retain the information you have requested to be erased.
ii.Right to restriction of processing- you have a right to request that we refrain from processing your data where you contest its accuracy, or the processing is unlawful and you have opposed its erasure, or where we don't need to hold your data anymore but you need us to in order to establish, exercise or defend any legal claims, or we are in dispute about the legality of our processing your personal information.
iii.Right to data portability- In certain circumstances, you may have the right to request that data which you have provided to us be made available to you so that you can transfer this to another data controller.
iv.Right to object- you have a right to object to our processing of your personal information where the basis of the processing is our legitimate interests including but not limited to direct marketing and profiling.
v.Right to withdraw consent- you have the right to withdraw your consent for the processing of your personal information where the processing is based on consent. To withdraw consent, please specify what you wish to withdraw consent for, by emailing us at ask@sbaloanshq.com.
vi.Right of complaint- if you are unhappy with the way we have used or are handling your personal information you have the right to lodge a complaint with a supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach such a Supervisory Authority. So, please contact us in the first instance by emailing us at ask@sbaloanshq.com.

8. Keeping Your Data Safe

At SbaloansHQ, we are committed to safeguarding your data and take precautions to protect your information. We implement commercially reasonable physical and electronic measures to ensure the integrity and security of the Personal Information we hold. Sensitive information submitted through the service is protected, and all payment transactions are encrypted using SSL technology.

If you have chosen a password to access certain parts of our platform, it is your responsibility to keep it confidential. We advise you not to share your password with anyone.

However, please note that no method of transmission over the internet, or method of electronic storage is 100% secure. Although we will do our best to protect the personal information that we gather about you, the transmission of information via the internet is not completely secure and as such, we cannot guarantee the absolute security of your data transmitted to the Service; any transmission is at your own risk. We have implemented various policies including encryption, access, and retention policies, to guard against unauthorized access and unnecessary retention of personal information in our systems.

9. Additional Privacy Rights for California Residents

If you are a resident of California, this section provides additional information about specific rights regarding your personal information in accordance with the California Consumer Privacy Act ('CCPA').

Personal Information we collect

The following is a list of personal information that we collect or have collected from California residents over the past twelve months. We will update this disclosure from time to time as appropriate.

Unique identifiers such as your first name, last name, gender, or similar identifier, address, or IP address;
Internet or other electronic network activity information, including content interaction information, such as content downloads, search history, transaction and interaction data on your use of our Service and from links in our emails sent to you;
geolocation data, such as the location of your device or computer;
Photo, video or visual information, such as your profile photo;
inference data, such as information about your purchase preferences, interest, feedback, and survey responses;
Other information that identifies or can be reasonably associated with you (e.g., the information you voluntarily provide as you use the SbaloansHQ services, such as additional profile information or user-generated content).

How we collect personal information

We obtain the categories of personal information listed above from the following sources:

Directly from our Services users when they provide the information to us.
Indirectly from you as you navigate through the Services. Information collected automatically may include usage details, IP addresses, and information collected through cookies, web beacons, and other tracking technologies.
From third-party service providers.

Categories of personal information disclosed for our business purpose

The personal information that we disclosed about consumers for a business purpose over the past (12) twelve months falls into the following categories as established by the California Consumer Privacy Act:

Identifiers such as your name, email address, billing address, or IP address;
Personal information, such as a credit card number, for example, if we use a third-party payment processor;
Your age, age range, gender, or other protected classifications, for example, if you choose to participate in a survey distributed by us or fill the User Content form;
Geolocation data from your IP address

Access request rights

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past twelve (12) months. But only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. Designated agents must submit proof that the consumer has authorized them to act on their behalf. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request. If you wish to do any of these things, please contact us. Once we receive and verify your request, we will disclose it to you. You may make up to two (2) requests, no more than twice in a twelve-month period for information as to:

The categories of personal information we collected about you or shared with our service providers for business purposes.
The categories of sources for the personal information we collected about you.
Our business or commercial purpose for collecting that personal information.
The specific pieces of personal information we collected about you.

Right to deletion of personal information

You have the right under the California Consumer Privacy Act to request the deletion of your personal information. If you wish to do this, please contact us. Depending on your data choices and subject to applicable regulations, certain services may be limited or unavailable.

Complete the purpose for which we collected the personal information, provide a service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
Exercise free speech; ensure another consumer's right to exercise their free speech rights or exercise another right provided for by law.
Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.) or other legal obligation.
Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

No discrimination

You have the right not to receive discriminatory treatment for the exercise of your rights under the CCPA, and SbaloansHQ will not discriminate against any consumer for exercising their rights under the California Consumer Privacy Act.

10. Children Under the Age of 18/Age Restriction

SbaloansHQ's Services are not directed to and do not knowingly collect personally identifiable information from children under the age of eighteen (18). If it is determined that such information has been inadvertently collected on anyone under the age of eighteen (18), we shall immediately take the necessary steps to ensure that such information is deleted from our system's database.

11. Your Choices; Unsubscribe or Opt Out

Account information:You may update certain information you provide to us (such as your password, name and email address) by logging into your SbaloansHQ account or contacting us through our support channel ask@sbaloanshq.com. Also, if you decide to delete your SbaloansHQ account, please contact us at ask@sbaloanshq.com but note that we may retain certain information where required or permitted by law. We may also retain cached or archived copies of certain information about you and your usage of the Services for a certain period of time.

Do not track:Some browsers have 'Do Not Track' features that let you send a request to sites to not track your online activities. We, like many other sites, do not honor those requests.

12. Links to Other Sites or Resources

SbaloansHQ does not claim or accept responsibility for the privacy policies, practices, or procedures of third-party sites or resources. We encourage all users and visitors to be mindful when leaving our Site and to review the privacy statements of any website that collects personally identifiable information. This Privacy Policy applies exclusively to information collected by our website.

13. How to Contact Us

Feedback, comments, requests for technical support, and other communications relating to the Site and the services should be directed to us at ask@sbaloanshq.com.