Privacy Policy

01Information We Collect

Personal Information You Provide

When you use our services, we may collect the following information:

• Contact Information: Name, email address, phone number, business address
• Business Information: Business name, industry, revenue, number of employees
• Financial Documents: Bank statements, existing funding agreements, payment schedules
• Tax Documents: W-9 forms, SS-4 letters
• Identity Verification: Government-issued identification, voided checks
• Account Credentials: Username, password, and security questions
• Bank Account Information (ACH Payments): Account holder name, bank account number, routing number, and bank name, collected for the purpose of processing ACH payments
• Scheduling Information: When you book an introductory call on this website, the contact and business details you enter plus the date and time you select

How We Collect Bank Account Information

We do not use a third-party bank-linking service and we do not ask you to log in to your financial institution through our platform. Bank account details are provided by you directly — on your signed ACH authorization form or, where applicable, on a voided check you supply — and are entered into our systems by us.

We collect only the information required to originate an ACH entry: the account holder name, the bank name, the account number and the routing number. We do not access your account balances, your transaction history, or any other data held at your financial institution.

Information Collected Automatically

When you visit our website, our hosting provider automatically collects standard server and security log data:

• IP address and device identifiers
• Browser type and operating system
• Pages visited and time spent on pages
• Referring website addresses

Our public website does not run advertising or third-party analytics trackers. See our Cookie Policy for exactly which cookies we set.

02How We Use Your Information

We use the information we collect to:

• Process and evaluate debt restructuring applications
• Communicate with you about your account and our services
• Schedule and confirm introductory calls you request
• Verify your identity and prevent fraud
• Negotiate with funders on your behalf
• Calculate and process commission payments to ISO partners
• Process ACH payments and recurring weekly debits for program fees and debt restructuring payments
• Verify bank account ownership and eligibility prior to initiating ACH debits
• Improve our website and services
• Comply with legal obligations, including NACHA ACH Operating Rules
• Send marketing communications (with your consent)

03How We Share Your Information

We may share your information with:

• Funding Partners: To negotiate debt restructuring terms on your behalf
• ISO Partners: Limited information necessary to process referral commissions
• Service Providers: Third parties who help us operate our business (banking, hosting, database, email, and messaging — see Section 9)
• Our Banking Partner: To originate an ACH entry we transmit your account holder name, bank account number, routing number and the debit amount to the financial institution that processes our ACH files. This is the minimum information the ACH network requires to move the payment, and it is used only for that purpose.
• Legal Authorities: When required by law, court order, or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties for marketing purposes.

04Payment Processing & ACH Authorization

4.1 How ACH Payments Are Originated

Funders First originates ACH entries directly, submitting payment files to the financial institution that acts as our Originating Depository Financial Institution (ODFI). We do not use a third-party payment processor and we do not use a bank-linking or instant-verification service.

Where your bank details are held. Because we originate ACH entries ourselves, we store your bank account number and routing number in our own systems. They are encrypted at rest using AES-256-GCM and are never stored in plaintext. Access is restricted to the systems and personnel that need it to originate and reconcile your payments. Where account numbers are displayed in our dashboards, only the last four digits are shown.

4.2 ACH Debit Authorization & NACHA Compliance

By enrolling in the Funders First program and providing your bank account details, you authorize Funders First, Inc. (originating as Increase LLC) to initiate recurring ACH debit entries to your designated bank account in the amounts and on the schedule set forth in your Merchant Agreement. Entries will appear on your bank statement as INCREASE LLC. This authorization is governed by NACHA's ACH Operating Rules and the Electronic Fund Transfer Act (EFTA), 15 U.S.C. § 1693 et seq.

Specifically, by completing enrollment you authorize:

• Recurring Weekly ACH Debits: Automatic drafts every Wednesday for your weekly program payment
• Initial Enrollment Payment: A one-time debit for the Funders First enrollment fee plus your first weekly payment, initiated upon verification of your bank account
• Revocation: You may revoke this authorization at any time by providing written notice to Funders First at least 3 business days prior to the scheduled debit. Revocation does not relieve you of obligations under your Merchant Agreement.

A record of your ACH authorization, including the date, time, and method of authorization, is retained in accordance with NACHA requirements (minimum 2 years from the date of authorization or the date the authorization is terminated, whichever is later).

4.3 Returned Payments

If an ACH debit is returned unpaid for any reason (for example insufficient funds, account closed, or payment stopped), we may use the bank account data we have on file to re-attempt the debit in accordance with NACHA rules (maximum two re-presentments for NSF returns). We will notify you of any returned payment via the contact information on file.

05Data Security

We implement industry-standard security measures to protect your information, including:

• SSL/TLS encryption for data in transit
• Encrypted storage for sensitive documents
• Access controls, role-based permissions, and authentication requirements
• Regular security assessments and monitoring
• Encryption at rest for bank credentials: Account and routing numbers are encrypted with AES-256-GCM and are never stored in plaintext
• Masked display: Only the last four digits of an account number are shown in our dashboards

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

06Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Financial records are typically retained for 7 years as required by law. ACH authorization records are retained for a minimum of 2 years from the date of authorization or termination of the authorization, as required by NACHA rules.

07Your Rights and Choices

Access and Correction

You may request access to your personal information and ask us to correct any inaccuracies by contacting us.

Deletion

You may request deletion of your personal information, subject to certain legal exceptions. We may need to retain certain information for legal compliance or legitimate business purposes, including ACH authorization records required by NACHA.

Change or Remove Your Bank Account

You may change the bank account on file, or ask us to remove it, at any time by contacting us at info@fundersfirst.com. Removing a bank account does not terminate your payment obligations under your Merchant Agreement, and we may be required to retain the ACH authorization record under NACHA rules.

Marketing Communications

You may opt out of marketing emails by clicking the "unsubscribe" link in any marketing email or by contacting us directly.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including:

• Right to know what personal information we collect
• Right to delete your personal information
• Right to opt out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your rights

Arizona Residents

Arizona residents may have additional rights under applicable state laws. Contact us to exercise any data protection rights.

08Cookies and Tracking

We use a small number of strictly necessary cookies to keep you signed in and to protect form submissions. We do not use advertising cookies. For the full list, see our Cookie Policy.

09Third-Party Services

Our website and services involve third-party service providers whose own privacy policies apply to data they receive. Our key processors are:

• Our Originating Depository Financial Institution (ODFI) — Receives our ACH files and moves funds between your bank and ours. Entries appear on your statement as INCREASE LLC.
• Supabase — Database and authentication infrastructure for our dashboards
• Vercel — Website and application hosting
• Resend — Transactional email delivery (confirmations, notifications, enrollment)
• SendBlue — SMS and messaging delivery for deal communications
• Anthropic — AI processing used in our internal analysis tools

Our website may also contain links to other third-party websites. We are not responsible for the privacy practices of those external sites and encourage you to review their privacy policies.

10Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it promptly.

11Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a new "Last Updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

12Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or have questions about how your bank account data is used, please contact us: