This website is owned and operated by MCA Summer School LLC, DBA MCA.AI (“MCA.AI”). MCA.AI respects and protects the privacy of visitors to its websites, and the privacy of its customers. MCA.AI developed this Privacy Policy to demonstrate its commitment to protecting clients’ privacy. This Privacy Policy applies to and describes MCA.AI information handling practices when visitors access MCA.AI services, which include content available on this website, or any other websites, pages, features, or content owned or operated by MCA.AI (collectively, the “Site(s)”) or third-party applications relying on API, and related services (referred to collectively hereinafter as “Services”).

The Sites are general audience websites and MCA.AI does not knowingly collect personal, or other, information from visitors under the age of 18. Visitors under the age of 18 should not use the Sites. If MCA.AI has reasons to believe that information provided to MCA.AI is, in fact, personal information of an individual younger than 18 years of age, such information will be deleted, aggregated, or anonymized as soon as possible. MCA.AI customer support should be notified about any and all instances of individuals under the age of 18 visiting the Sites of using the Services for MCA.AI to take action to prevent access of such individuals to MCA.AI Services.

1. Acceptance of terms of Privacy Policy

MCA.AI is a small business marketplace to assist small businesses in accessing and managing capital. Our Privacy Policy applies to everyone who utilizes our Sites.

Users agree to this Privacy Policy by accepting MCA.AI’s MCA.AI/TERMS, by accessing, browsing, or using our Sites. Where MCA.AI require users consent to process users personal information, MCA.AI will ask for users consent to the collection, use, and disclosure of users personal information as described further below. MCA.AI may provide additional “just-in-time” disclosures or information about the data processing practices of specific Services. These notices may supplement or clarify our privacy practices or may provide users with additional choices about how MCA.AI process users data. If users do not agree with or users are not comfortable with any aspect of this Privacy Policy, users should immediately discontinue access or use of our Services.

2. Collected Information

MCA.AI collects certain information about Sites’ visitors and visitors’ business when Sites and Services are accessed and/or used.

The Sites collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device (“Personal Information”). Personal information does not include:

  • Publicly available information from government records.
  • Deidentified or aggregated consumer information.

To establish an account and access the Services, visitors will be asked to provide certain essential information about themselves and their business. This information is either required by law (e.g. to verify individual’s identity), necessary to provide the requested services (e.g. three (3) months of bank statements will have to be provided), or is relevant for certain specified purposes, described in greater detail below. As MCA.AI adds new features and Services, additional information may be requested.

MCA.AI may not be able to provide Services at all, or Services may be scaled down if certain information is not provided.

2.1 Directly Collected Information:

  • Personal Identification Information: Full name, date of birth, demographic information (e.g. nationality, gender) signature, utility bills, photographs, phone number, home address, IP Address, social security number, and/or email.
  • Formal Identification Information: Government issued identity document such as Passport, Driver’s License, National Identity Card, State ID Card, Tax ID number, passport number, driver’s license details, national identity card details, visa information, and/or any other information deemed necessary to comply with MCA.AI legal obligations under financial, consumer protection, and commercial lending laws.
  • Institutional Information: Employer Identification number (or comparable number issued by a government), proof of legal formation (e.g., Articles of Incorporation), personal identification information for all material beneficial owners.
  • Financial Information: Bank account information, Tax return information, Federal and State Tax ID, Profit and Loss Statements, Income statements, Credit Score, Business Invoices, and Wire Instructions.
  • Transaction Information: Information about the transactions completed using the Services, such as the name of the parties to the transaction, the amount, and/or timestamp.
  • Employment Information: Office location, job title, and/or description of role.
  • Correspondence: Survey responses, information provided to MCA.AI support team or user research team.
  • Business Information: Type of business, list of officers, members, or managers of the business, articles of incorporation, certificates of good standing, and ownership structure.

The documents and information collected are securely stored and safeguarded. To fulfill MCA.AI service obligations to its customers, customers provide their permission to share any and all information provided to or obtained by MCA.AI on customers’ behalf with lenders, with other businesses who may need this information to fulfill its services to MCA.AI, for MCA.AI’s business purposes, or to fulfill regulatory or other legal requirements. Under no circumstances will MCA.AI disclose, transmit, or share in any way, these documents without its customers’ permission, unless being disclosed pursuant to legal and regulatory requirements which prohibit this notification.

2.2 Automatically Collected Information

Certain information is automatically collected by MCA.AI about visitors’ use of or interaction with the Sites for a variety of purposes.

This automatically collected information helps MCA.AI address customer support issues, improve the performance of the Sites and Services, provide its customers with a streamlined and personalized experience, and protect customers’ account from fraud by detecting unauthorized access. Information collected automatically includes:

  • Online Identifiers: Geo location/tracking details, browser fingerprint, operating system, browser name and version, and/or device IP addresses.
  • Usage Data: Authentication data, security questions, click-stream data, public social networking posts, and other data collected via cookies and similar technologies.

For example, MCA.AI may automatically receive and record the following information on its server logs:

  • Use the Services;
  • Device type and unique device identification numbers;
  • Device event information (such as crashes, system activity and hardware settings, browser type, browser language, the date and time of users request and referral URL);
  • Customers’ devices’ communications with Sites and Services, including pages accessed and links clicked;
  • Geographic location; and,
  • Other technical data collected through cookies, pixel tags and other similar technologies that uniquely identify customers’ browser.

MCA.AI may also use identifiers to recognize you when you access the Sites via an external link, such as a link appearing on a third-party site.

2.3 Information collected from third parties

Certain information may be obtained about visitors and customers from third party sources.

From time to time, MCA.AI may obtain information about visitors and customers from third party sources as required or permitted by applicable law. These sources may include:

  • Public Databases & ID Verification Partners: MCA.AI obtain information about visitors and customers from public databases and ID verification partners for purposes of verifying users' identity in accordance with applicable law.
  • Credit Bureaus: With visitors and customers consent, MCA.AI obtain information from credit bureaus, including visitors’ and customers’ credit report. MCA.AI will not disclose its visitors’ and customers’ credit report without explicit permission. MCA.AI obtain users credit information to better provide services to you, to match you with appropriate lenders, to ensure users identity, and to avoid fraud.
  • Financial Institution: With customers consent, MCA.AI obtain information directly from customers' financial institution, including copies of customers’ account statements. MCA.AI obtains this information to assist in providing Services to customers, including the underwriting process. To do this, MCA.AI utilize Decision Logic and Plaid. Decision Logic’s privacy policy, available at https://www.decisionlogic.com/privacy-policy/describes its collection and use of personal data Plaid’s privacy policy, available athttps://plaid.com/legal/#consumers, describes its collection and use of personal data
  • Joint Marketing Partners & Resellers: For example, unless prohibited by applicable law, joint marketing partners or resellers may share information about customers with MCA.AI so that MCA.AI can better understand which of the Services may be of interest to customers.
  • Advertising Networks & Analytics Providers: MCA.AI work with these providers to provide MCA.AI with de-identified information about how Sites and Services were located and used. This information may be collected prior to account creation.

2.4 Data Anonymization and Data Aggregation

MCA.AI may anonymize and aggregate collected data for any business purpose.

Anonymization is a data processing technique that removes or modifies personal information so that it cannot be associated with a specific individual. Except for this section, none of the other provisions of this Privacy Policy applies to anonymized or aggregated customer data (i.e. information about MCA.AI customers that MCA.AI combine together so that it no longer identifies or references an individual customer).

MCA.AI may use anonymized or aggregate customer data for any business purpose, including to better understand customer needs and behaviors, improve MCA.AI products and services, conduct business intelligence and marketing, and detect security threats. MCA.AI may perform MCA.AI own analytics on anonymized data or enable analytics provided by third parties.

Types of data MCA.AI may anonymize include, transaction data, click-stream data, performance metrics, and fraud indicators. Moreover, should the collected information be requested to be deleted in accordance with the policies set forth more fully below, the collected information will be anonymized or aggregated, in compliance with applicable law regarding deletion of personal information.

3. Manner of information collection

Information is obtained during the application process, and also through users’ interactions with the Sites.

Where MCA.AI require users’ consent to process users’ personal information, MCA.AI will ask for users’ consent to the collection, use, and disclosure of personal information as described further below. MCA.AI may provide additional “just-in-time” disclosures or information about the data processing practices of specific Services. These notices may supplement or clarify MCA.AI privacy practices or may provide users with additional choices about how MCA.AI process users data. If users do not agree with or are not comfortable with any aspect of this Privacy Policy, users should immediately discontinue access or use of the Services.

Categories of personal information collected from the following sources:

  • Directly from users: For example, from forms completed by users or by using MCA.AI Products and Services.
  • Indirectly from users: For example, from observing users’ actions on the Sites.
  • Third Parties: For example, from third-party services to which users connect as part of using the Services.
  • During the Application Process: To process initial application for funding, MCA.AI may require name, address, phone number, email address and other personal information of a user. MCA.AI may also require the name of user’s business, its address, its federal and state tax ID, the type of business, business location, average monthly sales, state of incorporation, name of Landlord. Such information is used primarily to process user’s order or as otherwise described herein. This information is provided to MCA.AI through the Sites.
  • Emails and telephone calls: MCA.AI require an email address when user registers for the Services. MCA.AI uses collected email for both transactional (e.g., application status, application updates, application confirmation, etc.) and promotional (e.g., newsletters, new product offerings, event notifications, special third-party offers) purposes. E-mail messages MCA.AI sends may contain code that enables MCA.AI database to track user’s usage of the e-mails, including whether the email was opened and what links (if any) were clicked. If user elects not receive promotional emails from MCA.AI, please see the section below labeled “Choice/Opt-Out”. MCA.AI reserves the right to send certain communications relating to the Services, such as service announcements and administrative messages, without an “opt out” option for such messages. MCA.AI may also contact users by telephone or text message (including to any wireless number users may provide to MCA.AI) solely in connection with the Services. TO avoid receiving unwanted telephone calls or text messages from MCA.AI, a phone number may be deleted from the user account preferences page(s), or MCA.AI may be requested to remove the phone number from MCA.AI contact list. MCA.AI fully complies with the requirements of the U.S. CAN-SPAM Act, the Telephone Sales Rule, and the Telephone Consumer Protection Act (TCPA).
  • Log files: Any time the Sites are visited or accessed, MCA.AI servers automatically gather information from user’s browser (such as IP addresses, browser type, Internet service provider (ISP), referring/exit pages, platform type, date/time stamp, and number of clicks) to analyze trends, administer the site, prevent fraud, track visitor movement in the aggregate, and gather broad demographic information. For example, MCA.AI may log user’s IP address for system administration purposes. IP addresses are logged to track a user’s session. This information is indicative of which parts of the Sites users are visiting. The log files are not shared externally.
  • Cookies: MCA.AI use “cookies” to keep track of certain information while users are visiting the Sites or using the Services. Cookies are very small files placed on user’s computer, and they allow MCA.AI to count the number of visitors to the Sites and distinguish repeat visitors from new visitors. They also allow MCA.AI to save user preferences and track user trends. MCA.AI rely on cookies for the proper operation of the Sites; therefore, if user’s browser is set to reject all cookies, the Sites will not function properly. Users who refuse cookies assume all responsibility for any resulting loss of functionality. MCA.AI does not link the cookies to any personally identifiable information.
  • Web Beacons: ”Web beacons” (also known as “clear gifs” and “pixel tags”) are small transparent graphic images that are often used in conjunction with cookies in order to further personalize the Sites for MCA.AI users and to collect a limited set of information about MCA.AI visitors. MCA.AI may also use web beacons in email communications in order to understand the behavior of MCA.AI customers. MCA.AI does not link the web beacons to any personally identifiable information.
  • Other sources and third parties: MCA.AI may obtain information about users from third parties. MCA.AI combine this third-party data with information MCA.AI already has about users to create tailored advertising and other relevant product recommendations. If user provides information about others, or if others give MCA.AI user’s information, MCA.AI will only use that information for the specific reason for which it was provided to MCA.AI. Any information obtained from a third-party will be used to assist matching your business with various lenders.

The sites contain links to other websites that are maintained by third parties. These third parties are solely responsible for their own websites and MCA.AI encourage you to reach out to such third parties for copies of and information regarding their security practices. MCA.AI do not control, and are not responsible for, the privacy and security practices of these third parties.

4. Use of Information

Collected information is used for a variety of reasons, all of which support MCA.AI’s Sites and Services.

Provide MCA.AI Services: MCA.AI processes collected personal information to provide the Services to user. For example, when user seeks business financing from one of MCA.AI financing partners, F MCA.AI’s require certain information such as user identification, contact information, and income information. MCA.AI cannot provide users with Services without such information.

To provide Service communications: MCA.AI sends administrative or account-related information to users to keep users updated about the Services, inform users of relevant security issues or updates, or provide other transaction-related information. Without such communications, users may not be aware of important developments relating to users’ account that may affect users’ use of the Services. Receipt of critical service communications, such as emails or mobile notifications sent for legal or security purposes, is not subject to the “opt-out” option;

For research and development purposes: MCA.AI process your personal information to better understand the way you use and interact with MCA.AI’s Services. In addition, MCA.AI use such information to customize, measure, and improve MCA.AI’s Services and the content and layout of MCA.AI applications, and to develop new services. Without such processing, MCA.AI cannot ensure users continued enjoyment of our Services;

To enhance users’ experience: MCA.AI processes users personal information to provide a personalized experience, and implement the preferences you request. For example, users may choose to provide MCA.AI with access to certain personal information stored by third parties. Without such processing, MCA.AI may not be able to ensure users continued enjoyment of part or all of our Services;

To facilitate corporate acquisitions, mergers, or transactions: MCA.AI may process any information regarding users account and use of the Services as is necessary in the context of corporate acquisitions, mergers, or other corporate transactions. Users have the option of closing users’ account if users do not wish to have their personal information processed for such purposes.

To maintain legal and regulatory compliance: Most of MCA.AI core Services are subject to laws and regulations requiring MCA.AI to collect, use, and store users’ personal information in certain ways. For example, MCA.AI must identify and verify customers using the Services in order to comply with commercial lending laws across jurisdictions.

To enforce MCA.AI terms in MCA.AI user agreement and other agreements: MCA.AI handles sensitive information, such as users identification and financial data, so it is very important for MCA.AI and MCA.AI customers that MCA.AI actively monitor, investigate, prevent, and mitigate any potentially prohibited or illegal activities, enforce MCA.AI agreements with third parties, and/or prevent and detect violations of MCA.AI posted user agreement or agreements for other Services;

To detect and prevent fraud: MCA.AI processes users personal information in order to help detect, prevent, and mitigate fraud and abuse of MCA.AI services and to protect users against account compromise or information loss;

To ensure Quality control: MCA.AI processes users personal information for quality control and staff training to make sure MCA.AI continue to provide users with accurate information. If MCA.AI does not process personal information for quality control purposes, on the use of the Services may be affected;

To ensure network and information security: MCA.AI processes users’ personal information in order to enhance security, monitor and verify identity or service access, combat spam or other malware or security risks and to comply with applicable security laws and regulations. The threat landscape on the internet is constantly evolving, which makes it more important than ever that MCA.AI have accurate and up-to-date information about users use of the Services. Without processing users’ personal information, MCA.AI may not be able to ensure the security of the Services;

5. Disclosure of consumer information to third parties

MCA.AI may disclose users’ personal information as required by law, to provide the Services, and for legitimate business purposes.

MCA.AI may share users’ personal information by disclosing it to a third party for a business purpose. MCA.AI only make these business purpose disclosures under written contracts that describe the purposes, require the recipient to keep the personal information confidential, and prohibit using the disclosed information for any purpose except performing the contract. MCA.AI does not sell personal information.

1. Disclosure By Law:

Users acknowledge and agree that MCA.AI may disclose information users provide if required to do so by law, at the request of a third party, or if MCA.AI, in MCA.AI sole discretion, believe that disclosure is reasonable to (1) comply with the law, requests or orders from law enforcement, or any legal process (whether or not such disclosure is required by applicable law) and (2) protect or defend MCA.AI ´s, or a third party´s, rights or property.

1. Lenders and/or brokers.

By signing up for the Services or submitting a request for a financing product or service as offered on the Sites, users signify users’ agreement to proceed and users’ consent, acknowledgement, and agreement to the disclosure of users’ information with lenders and/or brokers within MCA.AI network. No credit check will be conducted without users’ authorization. Please be aware that the funders, lenders, brokers, and/or other service providers with whom users are matched and with whom users’ information is shared, may retain users’ information, even if users do not enter into an agreement for sought products or services. Users may contact said third parties directly regarding said parties’ privacy and information policies. If an agreement between users and a lender, broker, or other service provider is signed through the MCA.AI Service and make changes to the information you have provided to MCA.AI, MCA.AI may share the updated information with such lenders, brokers, and/or service providers.

1. Disclosure to Trusted Third Parties:

Upon completing a profile on the Sites, and filling out the entirety of the application, MCA.AI will share users’ information with third party service providers with whom you are matched. A list of those partners can be found on MCA.AI partners’ page. By accepting the MCA.AI/TERMS, users agree to receive various marketing materials from MCA.AI trusted third parties, including potential lenders and service providers. MCA.AI is not responsible for the material of the third parties or their actions. Users’ information may also be shared with third-party contractors that provide services to MCA.AI and are bound by this privacy policy. Users’ information will be treated as private and confidential by such third parties and not used for any other purpose than users authorize. In addition, from time to time, MCA.AI may share personal information (such as e-mail or mailing address) about MCA.AI user base with carefully selected third parties, so they can offer goods and services that MCA.AI believe may be of interest to MCA.AI users. If users do not wish to receive offers from MCA.AI trusted partners, users can change users’ email preferences at any time by following the steps outlined in the “Choice/Opt-Out” section below.

1. Service Providers

With service providers under contract who help with parts of MCA.AI business operations. MCA.AI contracts require these service providers to only use users’ information in connection with the services they perform for MCA.AI, and prohibit them from selling users’ information to anyone else. Examples of the types of service providers MCA.AI may share personal information with (other than those mentioned above) include:

  • Network infrastructure
  • Cloud storage
  • Payment processing
  • Transaction monitoring
  • Security
  • Document repository services
  • Customer support
  • Internet (e.g. ISPs)
  • Data analytics
  • Information Technology
  • Marketing

1. Other Companies

With companies or other entities that MCA.AI plans to merge with or be acquired by. Users will receive prior notice of any change in applicable policies.

1. Professionals

With MCA.AI professional advisors who provide banking, legal, compliance, insurance, accounting, or other consulting services in order to complete third party financial, technical, compliance and legal audits of MCA.AI operations or otherwise comply with MCA.AI legal obligations.

1. miscellaneous

We may disclose users’ personal information for any purpose with which users’ consent.

5. Updating, accessing, retaining, and deleting users’ information

Users may choose to update, access, or delete users’ data; however, MCA.AI may be legally required to retain users’ information for legal compliance purposes.

Users may update or access users contact information at any time by logging into users account and making any change or update. Any changes made will be updated immediately.

If users want to discontinue the use of users’ account, users may deactivate it. When users deactivate an account, users’ information will not be sent to any further lenders, brokers, or other third parties, but the information will not be deleted. By deactivating users account users will have the ability to restore the account in its entirety.

Users may delete users’ account from MCA.AI in certain circumstances upon submitting a request to MCA.AI to delete users’ account. In certain circumstances, MCA.AI is legally required to continue to maintain the information in users’ account. In these circumstances, MCA.AI will place users’ account into a deactivated status, will opt users out of all communications, and will disable users access to the account.

In the event that MCA.AI is able to comply with users’ request to delete users’ account, data users provide to MCA.AI will be retained by MCA.AI in a commercially reasonable manner and to comply with relevant lending laws. Once users’ account is deleted, MCA.AI will not share users’ information, and will only use users’ data for internal research and MCA.AI marketing. Data that is retained by MCA.AI will be retained for a commercially reasonable period of time as determined by MCA.AI in conformance with applicable law.

We store users’ personal information securely throughout the life of users MCA.AI Account. MCA.AI will only retain users’ personal information for as long as necessary to fulfill the purposes for which MCA.AI collected it, including for the purposes of satisfying any legal, accounting, or reporting obligations or to resolve disputes. While retention requirements vary by jurisdiction, information about MCA.AI typical retention periods for different aspects of users’ personal information are described below.

1. Personal information collected to comply with MCA.AI legal obligations under financial, consumer protection, and commercial credit laws may be retained after account closure for as long as required under such laws.

2. Contact Information such as users name, email address and telephone number for marketing purposes is retained on an ongoing basis until users unsubscribe. Thereafter MCA.AI will add users’ details to MCA.AI suppression list to ensure MCA.AI do not inadvertently market to you.

3. Content that users post on MCA.AI such as support desk comments, photographs, videos, blog posts, and other content may be kept after users close users’ account for audit and crime prevention purposes (e.g. to prevent a known fraudulent actor from opening a new account).

4. Recording of MCA.AI telephone calls with users may be kept for a period of up to six years.

Information collected via technical means such as cookies, web page counters and other analytics tools is kept for a period of up to one year from expiry of the cookie.

7. Security

We have taken steps to protect users’ information in a commercially reasonable manner.

We have extensive security measures in place to protect the loss, misuse and alteration of the information stored in MCA.AI database. These measures include the use of industry standard encryption methods and administrative access to site data, as well as other proprietary security measures which are applied to all repositories and transfers of user information. MCA.AI will exercise reasonable care in providing secure transmission of information between users computer and MCA.AI servers, but given that no information transmitted over the Internet can be guaranteed 100% secure, MCA.AI cannot ensure or warrant the security of any information transmitted to us over the Internet and hence accept no liability for any unintentional disclosure. For further information, please see MCA.AI/TERMS

In the event there is a data breach at MCA.AI, MCA.AI will notify users as soon as reasonably practicable. MCA.AI will notify users that a breach occurred, and any additional information needed to fulfill MCA.AI obligation with breach notification laws and regulations.

Do not share users account login and/or password with any other individual. Users account login and/or password is sensitive and users sharing of users account information may lead to additional exposure to users’ account.

8. Choice / Opt out of Marketing

Users may choose to discontinue the use of the Services.

Users may choose to stop receiving MCA.AI newsletter or marketing emails by following the unsubscribe instruction included in these emails or users can contact MCA.AI at customerservice@mca.ai

Users can choose not to provide MCA.AI with certain information, but this will likely result in the inability to use certain features of the Sites and to obtain the services and products users are seeking. As a general matter, users should refrain from posting personal information on public forums. Users are solely responsible for the posting of any personal information on public forums.

If, after signing up for the Services, users decide not to receive the Services or future contact from lenders, brokers, or other third parties to which users’ information has been referred, users may cancel users account as discussed herein. Upon canceling users’ account, users’ information will no longer be sent to lenders, brokers, or other third parties. This does not guarantee that these lenders, brokers, or other third parties will cease contacting users or using users information. Said lenders, brokers, and/or other third parties may need to be contacted by the users to ensure they cease contacting users.

Certain federal and state regulations require that MCA.AI maintain a record of users information for certain periods of time. Due to these regulations, MCA.AI may be unable to completely delete users information from MCA.AI database until the time requirements of these regulations have expired.

9. Privacy Rights

Users may be able to exercise certain rights regarding users’ personal information depending on state and federal laws.

Depending on applicable law where users reside, users may be able to assert certain rights related to users’ personal information identified below. If any of the rights listed below are not provided under law for users’ operating entity or jurisdiction, MCA.AI has absolute discretion in providing users with those rights.

Users’ rights to personal information are not absolute. Depending upon the applicable law, access may be denied: (a) when denial of access is required or authorized by law; (b) If users are residents of a state that does not provide for this right; (c) when granting access would have a negative impact on another’s privacy; (d) to protect MCA.AI rights and properties; or (e) where the request is frivolous or vexatious, or for other reasons.

1. Access and portability

Users may request that MCA.AI provide users a copy of users personal information held by MCA.AI. This information will be provided without undue delay subject to a potential fee associated with gathering of the information (as permitted by law), unless such provision adversely affects the rights and freedoms of others. In certain circumstances, users may request to receive users personal information in a structured, commonly used and machine-readable format, and to have us transfer users’ personal information directly to another data controller.

1. Rectification of incomplete or inaccurate personal information

Users may request to rectify or update any of users’ personal information held by MCA.AI that is inaccurate. Users may do this at any time by contacting MCA.AI at customerservice@ MCA.AI

1. Erasure

Users may request to erase users’ personal information, subject to applicable law. If users close users MCA.AI Account, MCA.AI will mark users’ account in MCA.AI database as “Closed,” but will keep certain account information, including users request to erase, in MCA.A database for a period of time as described above. This is necessary to deter fraud, by ensuring that persons who try to commit fraud will not be able to avoid detection simply by closing their account and opening a new account, and to comply with MCA.AI legal obligations. However, if users close users account, users’ personal information will not be used by MCA.AI for any further purposes, nor shared with third parties, except as necessary to prevent fraud and assist law enforcement, as required by law, or in accordance with this Privacy Policy.

1. Withdraw consent

To the extent the processing of users personal information is based on users’ consent, users may withdraw users consent at any time. Users’ withdrawal will not affect the lawfulness of MCA.AI’s processing based on consent before users withdrawal.

1. Restriction of processing

In some jurisdictions, applicable law may give users the right to restrict or object to us processing users personal information under certain circumstances. MCA.AI may continue to process users personal information if it is necessary for the defense of legal claims, or for any other exceptions permitted by applicable law.

1. Automated individual decision-making, including profiling

MCA.AI relies on automated tools to help determine whether a transaction or a customer account presents a fraud or legal risk. In some jurisdictions, users have the right not to be subject to a decision based solely on automated processing of users’ personal information, including profiling, which produces legal or similarly significant effects on users, save for the exceptions applicable under relevant data protection laws.

1. How to make a privacy request

Users can make privacy rights requests relating to users’ personal information by contacting MCA.AI at customerservice@mca.ai  or by contacting customer service at 516-666-6661. When MCA.AI receive an individual rights request via other intake methods, MCA.AI may take steps to verify users’ identity before complying with the request to protect users’ privacy and security.

1. How to lodge a complaint

If users believe that MCA.AI have infringed users’ rights, MCA.AI encourage users to contact MCA.AI at customerservice@mca.ai

10. California Consumer Privacy Act (if applicable)

Some states have passed additional privacy laws for residents, which rights can be found below.

In addition to the rights provided for above, the information contained in this section applies solely to those individuals who reside in the State of California. MCA.AI adopt this notice to comply with the California Consumer Privacy Act of 2018 (CCPA) and any terms defined in the CCPA have the same meaning when used in this Policy.

Effective January 1, 2020, pursuant to the California Consumer Privacy Act of 2018 (“CCPA”), California residents have certain rights in relation to their personal information, subject to limited exceptions. Any terms defined in the CCPA have the same meaning when used in this California Privacy Rights section.

For personal information collected by MCA.AI during the preceding 12 months that is not otherwise subject to an exception, California residents have the right to access and delete their personal information. MCA.AI will not discriminate against those who exercise their rights. Specifically, if users exercise users rights, MCA.AI will not deny users services, charge users different prices for services or provide users a different level or quality of services.

MCA.AI does not sell or share users’ information in a manner that is contemplated by applicable California law.

Should MCA.AI engage in any of the activities listed in this section, users’ ability to exercise these rights will be made available to users. Users can exercise users’ rights by contacting MCA.AI at customerservice@mca.ai, by contacting customer service at 516-666-6661, or by filling out this online form so that MCA.AI may consider users request.

If users are a California residents, users may designate an authorized agent to make a request to access or a request to delete on users behalf. MCA.AI will respond to users authorized agent’s request if they submit proof that they are registered with the California Secretary of State to be able to act on users’ behalf or submit evidence users have provided them with power of attorney pursuant to California Probate Code section 4000 to 4465. MCA.AI may deny requests from authorized agents who do not submit proof that they have been authorized by users to act on their behalf, or are unable to verify their identity

11. Special Notice to Vermont Residents

Vermont residents have access to additional limits on the sharing of their personal information subject to certain exceptions.

Vermont law places additional limits on sharing information about Vermont residents so long as they remain residents of Vermont. In accordance with Vermont law, MCA.AI will not share information MCA.AI collect about Vermont residents to companies outside of MCA.AI except: (1) As permitted by law; (2) To companies that perform marketing or other services on MCA.AI behalf; (3) Name, contact and transaction and experience information to other financial institutions with which MCA.AI have joint marketing agreements; or (4) With the authorization or consent of the Vermont resident. MCA.AI also will not share non-transactional information about Vermont residents received from others within the MCA.AI family of companies except with the authorization or consent of the Vermont resident.

12. Notification of Privacy Policy Changes

MCA.AI reserves the right to update this Privacy Policy and will notify users if MCA.AI do so; however, MCA.AI encourage users to regularly review this policy for the latest information.

MCA.AI may update this privacy policy to reflect changes to MCA.AI information practices. If MCA.AI make any material changes MCA.AI will notify users by email (sent to the email address specified in users account) or by means of a notice on the Sites. MCA.AI encourages users to periodically review this page for the latest information on MCA.AI privacy policy. When MCA.AI makes changes to this Privacy Policy MCA.AI will revise the revision date at the top of the Privacy Policy.

13. Contact Information

MCA.AI

2 S. Biscayne Blvd, Suite 3200
Miami FL 33131

Email: customerservice@mca.ai

 

This Revised Privacy Policy is effective as of October 5, 2025