Privacy Policy

1. Introduction

LIL FISH LLC (“LIL FISH,” “we,” “us,” or “our”), located at 55 Water Street, New York, NY, is committed to protecting the privacy and security of your personal and business information. This Privacy Policy describes how we collect, use, disclose, retain, and protect information in connection with your use of our website and business funding services.

By accessing our website or submitting an application, you acknowledge that you have read this Privacy Policy and agree to its terms. This Policy is incorporated into and subject to our Terms of Service.

2. Information We Collect

We collect several categories of information, described below:

2.1 Personal Identification Data

• Full legal name and date of birth
• Social Security Number (SSN) or Individual Taxpayer Identification Number (ITIN)
• Government-issued identification documents
• Signature

2.2 Contact Information

• Home and business addresses
• Email addresses (personal and business)
• Phone and mobile phone numbers
• SMS/text message opt-in and opt-out records (including timestamps and consent documentation)

2.3 Business Information

• Legal business name, DBA name(s), and entity type
• Employer Identification Number (EIN)
• Business address and operational locations
• Industry classification, years in operation, and number of employees
• Gross annual revenue and monthly revenue figures
• Business ownership structure and ownership percentages
• Information about co-owners, officers, and guarantors

2.4 Financial and Banking Data

• Business and personal bank account numbers and routing numbers
• Bank statements (typically 3–6 months)
• Credit card processing statements and merchant account data
• Outstanding business debts and existing financing arrangements
• Tax returns (personal and/or business)

2.5 Credit and Background Data

• Personal credit reports and scores obtained from national credit bureaus (Experian, Equifax, TransUnion)
• Business credit reports (e.g., Dun & Bradstreet, Experian Business)
• Public records including liens, judgments, and bankruptcy filings

2.6 Technical and Usage Data

• IP address and general geolocation
• Browser type, device type, and operating system
• Pages visited, time on site, and referring URLs
• Cookies and similar tracking technologies (see Section 7)

2.7 Communication Data

• Records of all communications with us, including emails, phone calls, and chat transcripts
• SMS/text opt-in and opt-out records, including the date, time, and method of consent
• Responses to surveys and feedback submissions

3. How We Collect Information

We collect information through the following methods:

• Directly from you — through application forms, phone calls, emails, and other direct communications;
• Automated collection — through cookies, web beacons, and similar technologies when you visit our website;
• Third-party sources — from credit bureaus (Experian, Equifax, TransUnion), business credit reporting agencies (Dun & Bradstreet), identity verification services, data brokers, and public records databases;
• Financial institutions — through bank account verification and Plaid or similar open banking connections; and
• Business registries and public records — from state and federal government databases.

4. How We Use Your Information

We use the information we collect for the following purposes:

• Application evaluation — to review, process, and make decisions on financing applications;
• Identity and business verification — to verify the identity of applicants and the legitimacy of their business;
• Credit inquiries — to conduct soft and/or hard credit inquiries as part of underwriting;
• Communication — to send application updates, funding offers, account status notifications, and transactional messages via phone, email, and SMS;
• Authorized SMS messages — to send text messages to users who have expressly consented to receive them;
• Fraud prevention and security — to detect, investigate, and prevent fraudulent transactions and other illegal activities;
• Legal compliance — to meet our obligations under applicable laws and regulations, including AML/BSA requirements;
• Service improvement — to analyze usage patterns, improve our website, and develop new products; and
• Sharing with funding partners — to connect your application with third-party lenders or funding partners who may provide financing offers.

5. How We Share Your Information

We may share your information with:

• Funding Partners — third-party lenders, merchant cash advance providers, and other capital providers who may review your application and make financing offers;
• Credit Bureaus — to obtain credit reports and to report account performance;
• Identity and Fraud Services — to verify your identity and prevent fraudulent applications;
• Service Providers — companies that assist us with operations such as IT services, data hosting, payment processing, and marketing;
• Legal and Regulatory Authorities — when required by law, subpoena, court order, or government request; and
• Business Transfers — in the event of a merger, acquisition, sale, or transfer of all or part of our business assets.

We do not sell, rent, or lease your personal information to third parties for their own independent marketing purposes. SMS opt-in data and consent records are never sold or shared with any third party for marketing purposes unrelated to your application.

6. SMS Consent and Text Messaging

We collect and maintain records of your SMS/text message consent, including the date and time of opt-in, the method by which consent was given, and any opt-out requests. SMS consent is obtained through our website application form and is required to send marketing or promotional text messages.

SMS opt-in information is maintained separately from other marketing data and is not shared with third parties for their own SMS marketing campaigns. For complete details on our SMS practices, see our SMS Terms.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyze site traffic, and personalize content. A “cookie” is a small data file stored on your device. We use:

• Essential cookies — necessary for the website to function;
• Analytics cookies — to understand how visitors use our site (e.g., Google Analytics); and
• Marketing cookies — to deliver relevant advertising on third-party platforms.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.

8. Data Retention

We retain your personal and business information for as long as necessary to fulfill the purposes described in this Policy, to comply with our legal and regulatory obligations, to resolve disputes, and to enforce our agreements. Application data is typically retained for a minimum of 5 years in accordance with applicable financial regulations.

9. Data Security

We implement reasonable and appropriate technical, administrative, and physical security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include encryption of data in transit (TLS/SSL), restricted access to personal information on a need-to-know basis, and regular security assessments.

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

10. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access — request a copy of the personal information we hold about you;
• Correction — request that we correct inaccurate or incomplete information;
• Deletion — request deletion of your personal information, subject to legal retention requirements;
• Opt-Out of SMS — reply STOP to any SMS message to unsubscribe;
• Opt-Out of Marketing Email — click unsubscribe in any marketing email; and
• Do Not Sell — we do not sell personal information; however, you may contact us to limit certain data sharing.

To exercise your rights, please contact us using the information in Section 14. We will respond to verifiable requests within 45 days.

11. California Residents — CCPA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with additional rights including:

• The right to know what personal information is collected, used, shared, or sold;
• The right to delete personal information held by us and our service providers;
• The right to correct inaccurate personal information;
• The right to opt-out of the sale or sharing of personal information (we do not sell personal information);
• The right to limit the use and disclosure of sensitive personal information; and
• The right to non-discrimination for exercising your CCPA rights.

To submit a verifiable consumer request, contact us at the address in Section 14 below.

12. Children’s Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has submitted personal information to us, we will take steps to delete such information promptly.

13. Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time. Changes will be effective upon posting to our website with an updated “Last Updated” date. We encourage you to review this Policy periodically. Your continued use of our services following any changes constitutes your acceptance of the updated Policy.

14. Contact Us

For questions, privacy requests, or to exercise your rights, contact us: