Legal

Privacy Policy

How Nextgen Capital Solutions LLC, doing business as Loanable, collects, uses, shares, and protects personal information.

Last Updated: September 1, 2026

California Notice at Collection / State Privacy Rights: See State privacy rights for important information about your rights under applicable U.S. state privacy laws, including California.

Overview

Nextgen Capital Solutions LLC, a Nevada limited liability company doing business as Loanable ("Loanable," "we," "us," or "our"), operates a U.S. small-business funding marketplace. We are not a lender. We collect applications and related documents, match businesses with participating lending partners, and provide tools for applicants, referral partners, and our own operations.

This Privacy Policy describes how we process personal information collected through our digital properties that link to this policy (including our website, partner portal, Partner API, and related pages), as well as our marketing, support, and other activities described here (collectively, the "Service").

Our Service is intended for U.S. businesses and residents. We do not currently target the EEA or UK as a marketplace. If you are located outside the United States, your information may still be processed in the United States, where privacy laws may differ from those in your country.

1. Personal information we collect

Information you provide to us

Personal information you may provide through the Service or otherwise includes:

• Contact data such as name, email address, phone number (including mobile number for SMS), mailing and business addresses, title, and company name.
• Demographic and location data such as city, state, ZIP code, and country of residence.
• Profile and account data such as username, password or other credentials (Auth0 or similar), date of birth, role (applicant, partner, or team member), and preferences you set.
• Business data such as legal name, DBA, entity type, industry, years in operation, ownership, EIN, monthly revenue, and funding purpose.
• Financial and credit data such as stated income or revenue, existing loan or MCA balances, requested amount, credit score range, and information from credit reports when you authorize a credit check.
• Government-issued identification data such as SSN, EIN/TIN, driver's license or state ID numbers, and images of identification documents you upload.
• Bank and payment-related data such as account identifiers, routing numbers, and bank statements. When you connect an account through Plaid, Plaid collects credentials and account data under its own privacy policy; we receive the tokens and account information needed to verify cash flow.
• Tax data such as W-9 information including TIN.
• Communications data from emails, phone, SMS, partner portal messages, inbound mail we process, and support tickets.
• Marketing data such as newsletter sign-ups and your preferences for receiving communications.
• User-generated content such as notes, uploaded documents (bank statements, tax returns, IDs, voided checks), and feedback.
• Referral-partner data such as company information, W-9, commission details, API keys (we store a hash of the secret, not the secret itself), webhook URLs, and deals you submit on behalf of applicants.
• Other data you choose to provide that is not listed here, which we will use as described in this policy or at the time of collection.

Information from third-party sources

We may combine information you provide with information from:

• Lending partners (status, offers, declines, and related correspondence).
• Referral partners who submit deals through our portal, email, or Partner API.
• Credit bureaus and verification providers when you authorize a credit or identity check.
• Plaid and similar connectivity providers for bank-account verification.
• Identity and authentication providers such as Auth0.
• Public sources such as public records and business registries.
• Service providers that help us operate the Service (hosting, email, SMS, analytics, document processing).
• Advertising and analytics partners as described in our Cookie Notice.
• Business-transaction counterparties in connection with a financing, merger, acquisition, or similar event.

Automatic data collection

We, our service providers, and our advertising partners may automatically log:

• Device data such as browser type, OS, device type, IP address, unique identifiers (including advertising identifiers), language, and approximate location (city/state).
• Online activity data such as pages viewed, time on page, referring URL, navigation paths, and whether you open our emails or click links.
• Communication interaction data such as SMS delivery status and email opens, including via pixel tags in messages.

We do not collect precise geolocation from a mobile app. For cookies and similar technologies, see our Cookie Notice.

Data about others

If you are a referral partner, owner, or guarantor and you submit information about another person (for example a co-owner or applicant), you represent that you have permission to do so and have provided any notices required by law. Do not share someone else's information with us unless you have that permission.

2. Tracking technologies and AI

Some automatic collection uses cookies, localStorage, pixels, and similar technologies. Details, vendors, and controls are in our Cookie Notice. We store a record of your cookie preferences.

We use artificial-intelligence tools (including services from OpenAI and Anthropic) to help classify uploaded documents, parse inbound email, and check file completeness. Those providers may process the content you or your partner submit in order to perform that work. We instruct providers not to use that content to train their general models where the product terms allow that restriction. We do not use your application file to train a public chatbot.

If a referral partner uses Deal Desk in the partner portal, see Deal Desk data use.

We may create aggregated, de-identified, or anonymized data from personal information. We will not attempt to re-identify that data except to test whether our de-identification process works. We may use de-identified data to improve the Service. We do not use identifiable application files to train our own general-purpose AI models.

Deal Desk data use

When you use Deal Desk, Loanable sends information from the deal in your portal to an external model provider (currently via OpenRouter) so the desk can generate a reply. That typically includes business name, status, amounts, document-request types, and anonymized lender labels.

On Desk and Office plans, if you attach files, we also send those files and extracted document text (for example bank statements, tax returns, or credit packs) to the model provider. Starter is text chat against the deal in your portal and does not send attached files.

We instruct providers not to use that content to train their general models where the product terms allow that restriction. We do not use Deal Desk chats to train a public chatbot. Replies are generated to help you underwrite and place files; they do not approve or fund a deal.

You can stop new processing by canceling Deal Desk or by not sending further messages. See also Tracking & AI and How we share information.

3. How we use your personal information

We may use personal information to:

• Deliver the Service: create and maintain accounts, process applications, package files, match you with lending partners, run the partner portal and Partner API, send status updates, and provide support.
• Verify and underwrite-support: verify identity and business information, pull or facilitate credit checks you authorize, review bank statements, and assess product fit. Automated matching may route a file to lenders based on stated criteria. Matching does not approve or deny credit; lenders make those decisions.
• Personalize the Service (for example remembering form progress or portal preferences).
• Improve and analyze the Service, including with Google Analytics as described in the Cookie Notice.
• Market and advertise: send you emails or other messages you have not opted out of, and work with advertising partners for interest-based ads as described below. You can opt out of marketing emails and of sale/sharing for ads.
• SMS program: send application-related texts if you opt in, as described in SMS / text messaging.
• Comply and protect: follow the law, respond to lawful requests, prevent fraud and abuse, enforce our terms, and protect rights, safety, and property.
• Corporate events: evaluate or complete a financing, merger, acquisition, or similar transaction.

If we need to use personal information for a new purpose that is not compatible with the original purpose, we will ask for consent where required.

4. How we share your personal information

We may share personal information with:

• Lending partners in our network, so they can evaluate and potentially fund an application. This is core to the marketplace.
• Referral partners who submitted or are credited for a deal, so they can service that relationship (we do not expose SSN/EIN or file bytes through the Partner API).
• Service providers that host, store, send email/SMS, authenticate users, connect bank accounts (Plaid), process documents, provide AI classification, analyze usage, or otherwise help us operate.
• Advertising partners for interest-based advertising, as described in the Cookie Notice. This may be "sharing" or targeted advertising under state law even though we do not sell personal information for money.
• Professional advisors such as lawyers, accountants, and insurers.
• Authorities and others when we believe in good faith it is necessary for compliance, safety, or to protect rights.
• Business transferees in connection with an actual or prospective corporate transaction.
• Parties you designate when you instruct us to share (for example a co-broker or your accountant).

5. Your choices

• Access or update account information by signing in where an account exists, or by contacting us.
• Marketing emails: use the unsubscribe link in the message or email us. You may still receive service messages about an application or account.
• Cookies and ads: see the Cookie Notice and Cookie Settings.
• Do Not Track: some browsers send a "Do Not Track" signal. We do not respond to DNT. We do honor the Global Privacy Control (GPC) signal as an opt-out of sale/sharing for targeted advertising, as described below.
• Declining to provide information: if you do not provide information we need to process an application, we may not be able to match you with lenders.
• Close an account: email apply@loanableusa.com. We may retain information as required for legal, fraud-prevention, or accounting purposes.

The Service may contain links to third-party sites (lenders, Plaid, Auth0, social media). Their privacy practices govern those services. We are not responsible for them.

6. SMS / text messaging privacy

When you opt in to the Loanable USA SMS Program using the optional SMS checkbox (or by texting START), we collect your mobile phone number and consent status. Providing a phone number on an application without checking the SMS box is not an SMS opt-in.

What we collect

• Your mobile phone number
• Your opt-in consent and the date/method of consent
• Your opt-out requests
• Message delivery status

No sharing of opt-in data

How we use your mobile number

Your mobile phone number will only be used, if you opted in, to:

• Send you text messages related to your loan application status
• Communicate funding offers and updates
• Send appointment reminders and service notifications
• Respond to your requests for information

Opting out

You may opt out of SMS communications at any time by texting STOP to any message you receive from us. For help, text HELP or contact us at apply@loanableusa.com. For full SMS terms, see our Terms of Service.

7. Security

We employ technical, organizational, and physical safeguards designed to protect personal information, including TLS in transit, AES-256 encryption for SSN/EIN/TIN and bank account details at rest, access controls, and monitoring. Security risk is inherent in all internet and information technologies, and we cannot guarantee the security of your personal information. More detail is on our Security page.

We are headquartered in the United States and may use service providers that operate in other countries. Your information may be processed in the United States or those other locations.

8. Retention

We generally retain personal information to fulfill the purposes for which we collected it, including legal, accounting, reporting, dispute, and fraud-prevention requirements. How long we keep it depends on the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use, whether we can achieve the purpose another way, and applicable legal requirements. When we no longer need the information, we delete, anonymize, or isolate it from further processing.

9. State privacy rights notice

This section applies to residents of U.S. states that have privacy laws applicable to us that grant the rights described below (collectively, "State Privacy Laws"), including California (CCPA/CPRA) and, where they apply to us, laws in Colorado, Connecticut, Virginia, Nevada, Texas, and other states with comprehensive consumer privacy statutes.

Not every right is available in every state. We may decline a request as permitted by law, including if we cannot verify your identity or the request is incomplete. "Personal Information" and "Sensitive Personal Information" have the meanings given in those laws, excluding information the laws exempt (for example certain credit-related information to the extent an exemption applies).

Your privacy rights

Depending on your state, you may have some or all of the following rights:

• Know / access: categories of personal information collected, sources, purposes, categories of third parties, and a copy of personal information we have collected about you.
• Correction of inaccurate personal information.
• Deletion of personal information we collected from you, subject to exceptions (including completing a transaction, security, legal holds, and internal uses reasonably aligned with your expectations).
• Portability of personal information you provided, in a readily usable format where required.
• Appeal our denial of a valid request, where the law provides an appeal right.
• Opt out of targeted advertising, "sale," or "sharing" as described in Do not sell or share.
• Opt out of profiling that produces legal or similarly significant effects, where the law provides that right. Automated matching of applications to lenders is necessary to provide the marketplace Service and does not itself approve or deny credit. We do not use Sensitive Personal Information to infer characteristics about you for advertising.
• Limit use of Sensitive Personal Information (California): we collect Sensitive Personal Information such as SSN, government ID, and financial account data to process funding applications. We do not use it to infer characteristics about you for advertising. You may still request that we limit any incompatible use.
• Nondiscrimination for exercising these rights.

We do not have actual knowledge that we collect, sell, or share the personal information of consumers under 16 years of age.

How to exercise rights

Submit a request by:

• Email: apply@loanableusa.com (put "Privacy Request" in the subject)
• Phone: (833) 800-3883
• Mail: Nextgen Capital Solutions LLC dba Loanable, 5940 S Rainbow Blvd, Suite 4101, Las Vegas, NV 89118

We may need to verify your identity (for example by matching contact details on file, and in some cases requesting a signed declaration or government ID). Authorized agents may submit a request with proof of authorization (such as a power of attorney or signed permission plus identity verification of the consumer), as permitted by law.

We will respond within the time required by applicable law (generally 45 days for California, with a possible extension when reasonably necessary).

Information practices (past 12 months)

We collect the categories below from the sources and for the purposes described in this policy. The table uses CCPA statutory categories. Information you type into free-form fields may include additional categories.

Personal information we collect	CCPA category	Purposes	Disclosed for a business purpose	Sold or shared?
Name, email, phone, address, title, company	Identifiers; professional information	Service delivery, communications, matching, support	Lenders, referral partners, service providers, advisors	May be shared with advertising partners via cookies/pixels if you allow marketing cookies
Account login, Auth0 identifiers	Identifiers; customer records	Account security and access	Auth providers, hosting	No
SSN, EIN/TIN, driver's license / ID images	Identifiers; government ID; sensitive PI	Identity verification, credit authorization, lender packages	Lenders, credit/identity vendors, hosting (encrypted)	No
Revenue, balances, credit data, bank statements, account numbers	Financial information; sensitive PI; commercial information	Underwriting support, matching, fraud prevention	Lenders, Plaid, document/AI processors, hosting	No
Application files, documents, notes	Commercial information; inferences used for matching	File review, matching, partner servicing	Lenders, referral partners (limited), AI/document vendors	No
Device, IP, pages viewed, ad IDs, cookie IDs	Internet / electronic activity; identifiers	Security, analytics, advertising	Analytics and advertising vendors, hosting	Yes — shared with analytics/ads partners when those cookies are on
SMS number and opt-in/opt-out records	Identifiers; customer records	Loanable USA SMS Program only	SMS gateway (to send messages you opted into)	No — not sold or used for third-party SMS marketing

Sensitive Personal Information is used to provide funding-marketplace services, not to infer advertising characteristics.

Additional information for California residents (Shine the Light)

Under California Civil Code Section 1798.83, California residents may ask companies with whom they have a business relationship primarily for personal, family, or household purposes for the names of third parties that received certain personal information for those third parties' direct marketing during the prior calendar year, and the categories disclosed. Email apply@loanableusa.com with the subject "Shine the Light Request," your first and last name, mailing address, and a statement that you are a California resident. We may require additional information to confirm identity and residency. We do not accept Shine the Light requests by phone or fax.

Additional information for Nevada residents

Nevada residents may opt out of the sale of certain covered information for monetary consideration. We do not currently make those sales. To make a request covering any potential future sales, email apply@loanableusa.com with "Nevada Opt-Out" in the subject.

10. Do not sell or share my personal information

We do not sell personal information for money. Like many companies, we use advertising and measurement services (including Google Analytics, Microsoft Advertising / Bing UET, and Paramount / qbit) that may collect identifiers and online activity. State Privacy Laws may treat some of that activity as a "sale" or "share" for targeted advertising.

You can opt out of that sale/sharing by any of the following:

• Cookie Settings — turn off Marketing (and Analytics if you prefer). We treat a Marketing opt-out as a request to opt out of sale/sharing for targeted advertising on that browser.
• Email apply@loanableusa.com or call (833) 800-3883.
• Global Privacy Control (GPC): we honor a GPC signal from your browser as a valid opt-out of sale/sharing for targeted advertising on that browser. For more about GPC, see globalprivacycontrol.org.

Opt-outs are browser- or device-specific unless you also email us so we can apply the request to information we hold in our systems. You will still see ads, but they may be less relevant. Industry opt-outs are also available from the Network Advertising Initiative and the Digital Advertising Alliance.

11. Children

The Service is not intended for anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will delete it as required by law.

12. Changes to this Privacy Policy

We may modify this Privacy Policy at any time. If we make material changes, we will update the date above and post the revised policy on the Service, and we may provide additional notice (such as email) when appropriate. Your use of the Service after the effective date of a modified policy means the modified policy applies to your interactions with us.

13. How to contact us