Last updated 27 July 2026
The short version. The full policy is below; nothing in it contradicts this summary.
Fund Match Pros is a trade name of GrowthArmy LLC, a Washington limited liability company with its principal office at 2226 Eastlake Ave E., Seattle, WA 98102. In this policy, “we”, “us”, and “our” mean GrowthArmy LLC, and “you” means the person using this site.
This policy applies to fundmatchpros.com and to the funding application, applicant account, and partner portal hosted on it. It does not apply to the funding partners we may introduce you to. Once your information reaches a partner, that partner handles it under its own privacy policy, and you should read it before you proceed with them.
We are a referral service. We are not a lender, bank, or broker, we do not underwrite or price financing, and we do not make credit decisions.
There are three ways information about you reaches us.
The eligibility checker on this site runs entirely in your browser. If you use it and leave, nothing is stored and we never know you were here. Information reaches us only when you deliberately submit it — by creating an account, completing the application, uploading a document, or contacting us.
| Category | What it includes | When |
|---|---|---|
| Account | Name, email address, mobile number, and a password (stored only as a slow one-way hash — we cannot read it, and neither can anyone who obtains the database). | Registration |
| Business | Legal name, DBA, entity type, industry, start date, revenue band, business address and phone, and the Employer Identification Number if you provide one. | Step 1 |
| Owner | Your name, ownership percentage, mobile number, home address, and — where we are collecting them — your date of birth and Social Security number. | Step 2 |
| Request | Amount sought, what the money is for, and whether the business has existing advances. | Step 3 |
| Documents | Bank statements and any other files you choose to upload in support of the application. | Step 4 |
| Consent records | The exact wording you agreed to, the version of it, the date and time, your IP address, your browser's user agent string, and your typed signature. | Steps 2 and 4 |
The consent records exist so that both of us can later establish what was actually agreed to, rather than relying on anyone's memory. They are evidence, and we keep them accordingly.
When you submit something, our servers record the IP address the request came from, the user agent your browser sends, and a timestamp. These are attached to the security audit log and to the consent records described above. We do not build a browsing profile, we do not track you across other websites, and we do not record what pages you read.
This site carries no advertising pixels, no analytics scripts, and no third-party trackers of any kind. That is unusual for this industry and it is deliberate.
We sometimes receive business funding enquiries from third-party marketing partners who collected them directly from the business owner. When that happens, the enquiry is labelled in our systems as third-party sourced, and the partner who supplied it is responsible for having obtained your consent lawfully. If you believe your details reached us this way without your agreement, tell us and we will delete the record and tell you which partner supplied it.
These deserve their own section, because they are the most sensitive things we handle and because the industry's usual treatment of them is poor.
Before the application asks for your Social Security number, it asks you to tick a separate box headed Credit and service authorization. That box is your written instruction under the Fair Credit Reporting Act (15 U.S.C. §1681b(a)(2)) permitting our funding partners to obtain information from your personal credit profile in order to prequalify you.
Two things about it are worth stating plainly. First, we do not pull your credit — the funding partner does. Our authorization text says so, rather than the simpler and untrue alternative. Second, prequalification is a soft inquiry and does not affect your credit score. A partner may later want a hard inquiry, which can affect your score; they must ask you separately before doing that, and you can decline.
We record which version of that authorization text you agreed to. If we ever change the wording, the version identifier changes with it, so it stays possible to establish exactly what you were shown.
We do not use your information to train machine learning models, and we do not use it to make automated decisions that produce legal effects for you. The eligibility guidance this site shows you is a published set of criteria, not a decision about you.
Funding partners. If you complete an application, we introduce you to one or more third-party funding partners so they can evaluate your file and, if they choose, make you an offer. This is the entire point of the service, and it is the only sharing that involves your application data going to another company for their own use. Each partner then acts as an independent controller of that information under its own privacy policy.
Service providers. A small set of vendors process information strictly on our instructions, under contract, and for no purpose of their own:
| Provider | What it does | What it sees |
|---|---|---|
| Supabase | Managed PostgreSQL database | Stores the encrypted records; cannot decrypt the sensitive fields |
| Amazon Web Services | Key management and document storage | Holds encryption keys and uploaded documents |
| Vercel | Application hosting | Processes requests in transit |
| Resend | Transactional email | Your email address and message contents |
| GoHighLevel | Marketing email | Name, email, phone, and non-sensitive business details only |
| Cloudflare | Bot protection on forms | Signals about the request, not your form data |
Note the GoHighLevel row in particular. Our marketing system is deliberately fed a restricted projection of your record — name, email, phone, and coarse business details. Social Security numbers, dates of birth, EINs, and uploaded documents never enter it, and the export is written as an explicit list of permitted fields rather than as an exclusion list, so adding a column to our database cannot accidentally leak it.
Legal. We will disclose information where we are required to by law, subpoena, or court order, or where it is necessary to establish or defend legal claims, or to protect someone's safety.
Business transfer. If GrowthArmy LLC is acquired or merges, information may transfer as part of that transaction. It would remain subject to this policy, and we would give notice on this site before any change took effect.
Two things here are worth stating plainly rather than burying.
We run advertising measurement. This site loads Google Tag Manager and Google Analytics so we can tell which adverts produce enquiries. When you submit a form we record that a submission happened, and which form it was — we do not put your name, email, or phone number into that event. Under California law, using advertising and analytics services of this kind can count as sharing personal information, whatever we intend by it.
We are paid when a referral results in funding. That is how the service is free to you, and we say so throughout the site. But California defines a “sale” broadly — disclosing personal information to another business for monetary or other valuable consideration — and a funding partner uses your information for its own purposes rather than merely on our instructions. We therefore treat the introduction as a sale or share for California purposes and give you the right to opt out, rather than relying on an argument that it is not one.
What that means in practice is on the California notice: you can opt out at any time, and opting out does not stop you being able to apply.
| What | Kept for | Then |
|---|---|---|
| Social Security number, date of birth | 24 hours | Erased; last four digits and birth year retained |
| Uploaded documents | 90 days | Deleted from storage automatically |
| Application and contact records | 24 months | Deleted automatically |
| Security audit log | 12 months | Deleted automatically |
| Login sessions, verification codes | On expiry | Deleted automatically |
These are enforced by a scheduled job, not by anyone remembering to run one. Where a longer period is genuinely required by law — tax records, for instance, or a document we are under a legal hold to preserve — we keep only what that obligation requires and for no longer than it requires.
No system is perfectly secure, and anyone who tells you otherwise is selling something. If we discover a breach affecting your personal information, we will notify you and the relevant authorities as required by applicable state law.
When you submit an application you are asked to agree, on a separate and unticked checkbox, to be contacted by us and by our funding partners at the phone number and email address you provided — including by automated dialling technology and by SMS.
Opting out of our messages does not opt you out of a funding partner's messages. You will need to tell them directly.
We set one cookie, and only after you log in: a session cookie that keeps you signed in. It contains a random identifier and nothing else — no personal information is stored in it. It is marked HttpOnly, Secure, and SameSite, so it cannot be read by scripts and is not sent to other sites. It is cleared when you log out.
Cloudflare's bot-protection widget on our forms may set a short-lived cookie to distinguish humans from automated traffic. Google Tag Manager and Google Analytics also set cookies, which we use to measure which adverts bring people to the site and whether they went on to enquire. If your browser sends a Global Privacy Control signal we do not load them at all, and California residents can opt out through the California notice.
Wherever you live, you may ask us to:
Write to support@fundmatchpros.com. We will verify that the request really comes from you — usually by confirming control of the email address on the account — and respond within 45 days, extending once by a further 45 days if the request is complex and telling you if we do. There is no charge, and we will not treat you differently for asking.
Residents of California, Colorado, Connecticut, Virginia, Texas, Oregon, and a growing number of other states have these rights by statute, along with a right to appeal a refusal. If we decline a request, we will tell you why and how to appeal; if an appeal is denied you may contact your state Attorney General. California residents have additional rights, including the right to opt out of the sale or sharing of personal information. Those are set out in full in our California notice, together with the Do Not Sell or Share My Personal Information process.
If you obtained a consumer report through one of our partners and believe it contains an error, that is a matter for the consumer reporting agency that issued it; you have a right under the Fair Credit Reporting Act to dispute it directly with them, free of charge.
This site is operated from the United States and all of the providers listed above process your information in the United States. If you access the site from outside the US, you are sending your information to the US, where privacy law differs from that of your own country.
This is a service for business owners. It is not directed at children, we do not knowingly collect information from anyone under 18, and the application refuses a date of birth under 18. If you believe a child has given us information, contact us and we will delete it.
Where we link to a lender, a government resource, or an outside article, that site's privacy policy governs what happens there. We do not control those sites and are not responsible for their practices.
We will update the date at the top when this policy changes, and for any change that materially affects how we use or share your information we will give notice on this site before it takes effect. Previous versions are available on request.
Privacy questions, requests, and complaints:
support@fundmatchpros.com
GrowthArmy LLC, DBA Fund Match Pros
2226 Eastlake Ave E.
Seattle, WA 98102
Call us or read how the referral model works before you submit anything.