Privacy Policy

1. Introduction

Long Tail Capital (“we,” “us,” or “our”) is committed to protecting the privacy and security of your personal and business information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and application portal (the “Platform”). Please read this policy carefully. By using the Platform, you consent to the practices described herein.

2. Information We Collect

We collect the following categories of information:

Personal Information

• Full name, email address, and phone number
• Government-issued photo identification
• Business address

Business Information

• Company name and Employer Identification Number (EIN)
• Years in business and revenue figures
• Contract documents and related financial details
• Payroll information and operational costs
• Tax compliance status

Financial Information

• Bank account information (when connected via Plaid)
• Transaction history and cash flow data
• Existing debt obligations and merchant cash advances

Automatically Collected Information

• Browser type and device information
• IP address and approximate location
• Pages visited and time spent on the Platform

3. How We Use Your Information

We use collected information for the following purposes:

• Evaluating and processing financing applications
• Verifying the accuracy of submitted information through third-party services
• Conducting AI-assisted underwriting analysis, including document review and risk scoring
• Communicating application status, decisions, and follow-up actions
• Complying with legal and regulatory obligations, including AML and KYC requirements
• Improving our underwriting models and Platform functionality
• Preventing fraud and ensuring Platform security

4. AI Processing and Analysis

Your application data may be processed by artificial intelligence systems to assist in underwriting decisions. This includes analysis by large language models for document review, entity research, compliance screening, and risk assessment. Before any data is sent to external AI services, personally identifiable information is scrubbed or masked to protect your privacy. AI analysis supplements but does not replace human review of financing decisions.

5. Third-Party Services

We may share your information with the following categories of third-party services:

• Financial data providers (e.g., Plaid) for bank account verification
• AI analysis providers (e.g., OpenAI, Google, Anthropic) for underwriting assistance, with PII scrubbed
• Government databases (e.g., SAM.gov, SEC EDGAR) for entity verification
• Email service providers (e.g., Brevo) for transactional communications
• Identity verification services for KYC compliance

We do not sell your personal information to third parties. Information shared with service providers is limited to what is necessary for the specific service being performed.

6. Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. Uploaded documents are stored in secured, non-publicly-accessible storage and served only through authenticated access routes. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Application data for denied applications is retained for a reasonable period to support potential reapplication and regulatory compliance. You may request deletion of your data by contacting us at the address below.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to or restrict certain processing of your data
• Withdraw consent for data processing where consent is the legal basis

To exercise any of these rights, please contact us using the information provided below. We will respond to your request within 30 days.

9. Cookies and Tracking

The Platform uses essential cookies necessary for authentication and session management. We do not use advertising or tracking cookies. We do not sell or share browsing data with third-party advertisers.

10. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a minor, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Continued use of the Platform after changes constitutes acceptance of the updated policy.

12. Contact Us

For questions or concerns about this Privacy Policy or our data practices, please contact us at info@longtailcapital.net.