Privacy policy

What you submit

We collect the business and contact information you submit through a funding request: business name, business type, state, time in business, monthly revenue range, requested amount, use of funds, your name, email, and phone number.

What is collected automatically

When analytics is enabled, we also collect standard technical data: pages viewed, the referring source, approximate city or region derived from a truncated IP address, device type, browser, and how far you get in a form. This data is aggregate and is not used to identify you.

Consent records

When you submit a form, we keep a record of that submission as proof of your consent: a copy of the page as it appeared to you with your typed answers masked, an image of the form area showing the consent text and the checked box, the timing of your interactions with the form, whether the consent text was on your screen when you checked the box, your browser and device details, a one-way hash of your IP address, the version of the site and consent language you saw, and a tamper-evident hash linking the record to the ones before it. We keep these records for 5 years. We may share a read-only copy with the partner that received your request, or with legal counsel, to demonstrate that consent was given.

Analytics and search performance

We use Google Analytics 4 (property G-5WDF56SSEB) to measure site usage. It loads only after you accept the analytics category in the cookie banner, IP addresses are truncated, Google Signals and advertising personalization are off, and the data is never used for ad targeting. Google acts as our processor for this measurement. We also use Google Search Console, which sets no cookies and loads no script on this site: ownership is verified with a DNS record, and it reports aggregate search queries, clicks, impressions, and crawl status with no personal information attached. The cookie policy lists every analytics cookie, its purpose, and its lifespan.

How we use it

Your information is used to review your funding request, match it to financing programs, and contact you about options. We use it to respond to questions and to improve the content on this site.

Who we share it with

We share your request with funding sources capable of funding the program you asked about. In most states we share what you give us with funding partners so they can evaluate your request, and those partners compensate us when a referred account activates. In California and Missouri we transfer your inquiry to independent funding partners for a fixed fee, whether or not you are funded. Both are a "sale" or "sharing" of personal information under the California Consumer Privacy Act and comparable state laws, and you can opt out using the Do Not Sell or Share link in the footer. We never share your mobile number or text-message consent with anyone for their own marketing. We do not add you to unrelated marketing lists.

Consent and your choices

Analytics runs on consent, and only on consent. You can withdraw it at any time from the cookie preferences button on the cookie policy page, which removes the analytics script and clears its cookies. Strictly necessary processing and the handling of a funding request you submitted are not covered by that toggle, since they are needed to deliver what you asked for. You can request access, correction, or deletion of your information at any time, and track that request at /request-status.

Where data is processed

We operate in the United States and our service providers, including Google for analytics and search reporting, process data on servers in the United States. Submitting information from outside the United States means it is transferred there.

Credit information

Submitting a funding request does not authorize a hard credit inquiry. If you proceed with a specific lender, that lender discloses its own requirements and obtains your authorization before pulling credit.

Retention and deletion

We retain funding requests for as long as needed to service the relationship and meet recordkeeping obligations. You can request access, correction, or deletion of your information at any time.

How we are compensated

In most states, funding partners compensate us after a referred account activates. In California and Missouri we are paid a fixed fee per transferred inquiry, whether or not you are funded. You pay us nothing either way. You are told the total cost, the payment, and the term of any offer in writing by the funding partner before you commit.

Calls, texts, and email

By submitting a request you consent to be contacted about that request by Foody Finance and by the funding partners assigned to your file, at the phone number and email you gave us. That consent covers automated, AI-assisted, and prerecorded calls and recurring text messages. Consent is not a condition of any purchase, service, or funding decision: decline texts and you get the same review by phone or email. Message frequency varies, and message and data rates may apply. Reply HELP for help and STOP to stop texts, and use the unsubscribe link in any marketing email to stop those. Our text program is registered under A2P 10DLC with the carriers. We never share your mobile number or text-message consent with anyone for their own marketing.

Session recording and measurement tools

The only measurement tool on this site is Google Analytics 4, and it loads only after you accept the analytics category. We do not run session recording, heat mapping, or replay tools. Calls and chats may be recorded or transcribed for recordkeeping, which is disclosed at the start of the interaction and covered in the AI usage policy. If we ever add another tool, it is named here and gated on the same consent.

Business information from public sources

Before a specialist calls, we may look at what is publicly available about your business: your own website, state business registry entries, and public web mentions. It is used only to prepare for the conversation and to check that the request matches a real operating business. We do not buy consumer data, and we do not pull court records or credit files.

Your rights and how to exercise them

You can ask us for the categories and specific pieces of personal information we hold, ask us to correct it, ask us to delete it, and opt out of the sale or sharing of it. We never discriminate against you for making a request. There are 2 designated request methods: the online form at /do-not-sell, and our toll-free number (833) 505-1900. You can also email contact@foodyfinance.com. We honor an opt out of sale or sharing within 15 business days, and we complete an access, correction, or deletion request within 45 days, with one 45 day extension when a request is complex and we tell you why.

Global Privacy Control

We honor the Global Privacy Control signal. When your browser sends it, advertising cookies and pixels stay off and cannot be turned back on while the signal is present, and analytics stays off on that device, with no action from you.

How long we keep it

Three windows, published here, enforced by scheduled jobs and a legal hold when the law requires it. An opt-out is kept for 10 years so we can keep honoring it, consent records are kept for 5 years as proof of what you agreed to, and the rest of a funding request is cleared 5 years after your last activity with us.

Clearing the general record does not clear your opt-out or your consent record. Those run on their own windows above, because both exist to protect you. A legal hold pauses deletion when a dispute or legal matter requires it; held records are deleted when the hold ends.

Service providers and sub-processors

Every vendor listed here processes data on our instructions under a written contract. None of them may use visitor data to train general purpose models. We update this list as the stack changes.

• Supabase: Database, authentication, and file storage, United States.
• Lovable: Hosting, the build pipeline, and AI development tooling.
• Cloudflare: DNS, content delivery, and the edge runtime that serves this site.
• Resend: Transactional email delivery and delivery event reporting.
• HighLevel, also called LeadConnector: CRM records, calls, text messages, chat, the Fanny AI assistant, and the telephony carriers and AI model providers it uses.
• Google: Analytics 4 and Search Console, plus Google Ads and Consent Mode when advertising is enabled.
• Meta: Meta Pixel and the Conversions API when advertising is enabled.
• Microsoft: Clarity heat maps and session replay when enabled.
• Semrush: Search ranking data. No visitor data is sent.
• Grants.gov: Public grant data used in our research. No visitor data is sent.
• AI model providers: OpenAI, Anthropic, Google Gemini, xAI Grok, Manus, and other providers as adopted, used to draft site content and power the assistant.

Categories collected, shared, and sold

Each category below was sold or shared, as those terms are defined by the California Consumer Privacy Act, in the preceding 12 months. We do not knowingly collect information from anyone under 16, and we do not sell or share it.