1. Who We Are
Business Lending Advocate (“BLA,” “we,” “our,” or “us”) helps small-business owners analyze cash flow, prepare lender-ready documents, and navigate the loan-application process. This policy explains how we collect, use, and protect personal information when you visit businesslendingadvocate.com or use any BLA service (the “Services”).
2. Information We Collect
| Category | What We Collect | Purpose |
|---|---|---|
| Account Data | • Name • Email address (via Supabase Auth or Google Sign-In) | • Create and manage your BLA account • Authenticate log-ins |
| Financial Inputs (User-Provided) | • Revenue, expenses, outstanding debt, and other figures you enter while using our cash-flow and DSCR tools | • Generate interactive analyses and lender-style PDF reports you request |
| Payment Data | • Card details & billing ZIP (processed by Stripe) | • Process payments for premium services |
| Usage & Analytics | • IP address, device/browser type, pages viewed, clicks (via Google Analytics cookies) | • Improve site performance and understand user engagement |
We do not collect Social Security numbers, phone numbers, or tax IDs.
3. How We Use Your Information
- Service Delivery — create your account, authenticate, generate reports, and email PDFs you request.
- Transactional Communications — send receipts, account alerts, or service-related updates.
- Marketing (Opt-In Only) — if you subscribe to our newsletter, email product updates or educational content. Unsubscribe any time.
- Analytics & Improvements — analyze aggregated, de-identified usage data to enhance the Services.
4. Legal Basis & Geographic Scope
BLA serves businesses located in the United States only. We process data with your consent and to fulfill our contract—providing the Services you request.
5. Cookies & Tracking
We use first-party cookies for session management and Google Analytics cookies for usage statistics. Analytics cookies do not reveal personal identities. You can disable cookies in your browser, but parts of the site may not function.
6. Payment Processing
Payments are handled by Stripe, Inc. Stripe stores your card information on its PCI-DSS-compliant servers. BLA never sees or stores full card numbers, CVV codes, or Social Security numbers.
7. Data Storage & Security
- All user data—account, financial inputs, and generated reports—is stored in Supabase (hosted on AWS).
- Data is encrypted in transit (HTTPS/TLS) and at rest.
- Access is restricted to you and authorized BLA administrators who need it to provide support.
- We retain data indefinitely so you can revisit or update prior analyses. If you request deletion (see Section 9), we will remove your account and associated data within 30 days unless retention is required for legal or accounting reasons.
8. Third-Party Disclosure
We do not sell or share personal information with third-party advertisers. We disclose data only to:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Authentication, database, file storage | Account data, finance inputs |
| Google OAuth | Optional log-in method | Name, email (for sign-in only) |
| Stripe | Payment processing | Name, email, payment details |
| Google Analytics | Site analytics | Pseudonymized usage data |
We deploy via Universal (hosting provider). Universal may have incidental access to encrypted data but does not process personal information for its own purposes.
9. Your Rights
Because we serve U.S. customers only, you have the right to:
- Access — request a copy of the personal data we hold.
- Correction — edit your data anytime in your account dashboard.
- Deletion — email us to delete your account and data.
- Portability — request your data in a machine-readable format.
How to exercise: email jonathan@businesslendingadvocate.com from the address on file. We may verify your identity before fulfilling a request.
10. Children’s Privacy
The Services are not directed to children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has provided personal information, contact us and we will delete it.
11. Data Breach Procedures
If a breach affecting personal data occurs, we will notify affected users and relevant authorities within required legal timeframes, outlining what happened, data impacted, and remedial steps taken.
12. Changes to This Policy
We may update this Privacy Policy occasionally. We’ll post the new version on this page and adjust the “Last updated” date. Significant changes will be emailed to account holders.
13. Contact Us
Questions or requests?
Jonathan Aranda