Privacy Policy

Effective date: October 21, 2026

Company: Prepline Capital

Address: 9719 S Dixie Hwy #8, Miami, FL 33156 · (888) 896-5559

1. Who we are

In one line: Prepline Capital funds hospitality businesses, and this policy covers everything we collect through this site and the application.

Prepline Capital is located at 9719 S Dixie Hwy #8, Miami, FL 33156. This policy explains what we collect when you use this website, apply for funding, or contact us, and what we do with it. It applies to merchants, owners and guarantors, and to referral partners who submit files to us.

2. What we collect

In one line: application data, your bank statements, your identifiers including full SSN and EIN, credit data on credit-qualified products, and basic site analytics.

Application data — legal entity name, DBA, business address, EIN, industry, time in business, monthly revenue, amount requested and use of funds.
Business and personal identifiers — owner name, date of birth, home address, ownership percentage, phone, email.
Full SSN and EIN, collected to verify identity and to underwrite.
Business bank statements and, where you choose to connect an account, read-only bank transaction data through a bank data aggregation provider.
Credit report data on credit-qualified products (line of credit, term loan, SBA), obtained only after you move forward and after we tell you.
Site analytics — pages viewed, referring source, device type, and an anonymous session identifier used to measure which pages lead to applications.
Call recordings where recording is disclosed at the start of the call.

3. How sensitive identifiers are handled

In one line: full SSN and EIN live encrypted in a separate vault, show as last four everywhere, and never enter logs, email or any AI system.

Your full Social Security Number and Employer Identification Number are stored encrypted in a dedicated secrets vault, separate from your application record. They are never displayed on any portal screen, never written into application records, logs, or email, and never placed into any AI or large-language-model system. Display surfaces across every internal and partner screen show the last four digits only. Access to the full value is role-gated to a narrow set of authorized staff and every access event is logged.

4. Why we use it

In one line: to underwrite, verify, prevent fraud, service your file, and meet legal obligations.

We use what we collect to underwrite your file, verify your identity and your business, prevent fraud, service and collect on funded transactions, respond to you, improve the site and our underwriting, and comply with law. We do not use your bank statements, credit data or identifiers to build advertising profiles.

5. Who we share it with

In one line: our own underwriting and servicing affiliates, bank and SBA partners only when you ask us to pursue those products, contracted service providers, and anyone the law requires.

Our underwriting and servicing affiliates.
Bank and SBA-preferred lending partners, only when you ask us to pursue a product those partners fund — SBA 7(a), SBA Express, or a term loan above $500,000.
Service providers under contract — bank data aggregation, e-signature, identity verification, telephony and SMS delivery, and hosting. Each is bound by contract to use the data only to perform the service.
As required by law — subpoena, court order, regulatory request, or to protect rights and safety.

We do not sell personal information and we do not share it for cross-context behavioral advertising.

6. Referral partners

In one line: if an ISO sent you, they see status and commission fields — not your SSN, EIN, statements or credit report.

If you came to us through an ISO or referral partner, we share deal status, amount, product and commission-relevant fields with that partner. We do not share your full SSN, EIN, bank statements, or credit report with them.

7. GLBA notice

In one line: as a financial services provider we follow the Gramm-Leach-Bliley safeguards and privacy rules.

As a provider of commercial financing, Prepline Capital handles nonpublic personal information in accordance with the Gramm-Leach-Bliley Act where it applies. We collect nonpublic personal information from your application, your transactions with us, your business bank statements, and consumer and business reporting agencies. We restrict access to that information to employees and service providers who need it to provide products and services to you, and we maintain physical, electronic and procedural safeguards to protect it.

8. Your rights

In one line: you can ask us what we hold, correct it, delete it, or opt out — and we answer within 45 days.

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect and how we use it, to request deletion, to request correction, to limit the use of sensitive personal information, to opt out of sale or sharing (we do neither), and not to be discriminated against for exercising any of these rights. Residents of Virginia, Colorado, Connecticut, Utah and Texas have analogous rights under their state statutes.

To exercise a right, call (888) 896-5559 or write to Privacy, Prepline Capital, 9719 S Dixie Hwy #8, Miami, FL 33156. We verify your identity before acting and respond within 45 days, with one 45-day extension where the law allows and we tell you. An authorized agent may submit on your behalf with written authorization.

9. Cookies and tracking

In one line: a session identifier for measurement, no advertising pixels on this site, and you can turn measurement off.

This site sets a first-party session identifier in your browser’s session storage so we can measure which pages lead to applications. It is cleared when you close the tab, it carries no name, email or account data, and it is not shared with an advertising network. The site loads one external stylesheet (Google Fonts) and no third-party advertising or tracking pixels.

To turn measurement off, block JavaScript for this site in your browser settings, or use your browser’s private window — the site is designed to work completely without JavaScript, including every criteria table and every link.

10. Retention

In one line: funded files are kept as long as the law and the contract require; declined files are kept far less.

Funded transaction records, contracts and the supporting underwriting file are retained for the life of the transaction plus the period required by applicable law, contract and audit obligations, generally seven years. Declined and abandoned applications and their attached bank statements are retained for 24 months and then deleted, except where a longer period is required to resolve a dispute or meet a legal obligation. Encrypted SSN and EIN values are deleted on the same schedule as the record they belong to.

11. Security

In one line: encrypted in transit and at rest, role-based access, and every sensitive read is logged.

Data is encrypted in transit using TLS and at rest in our database. Sensitive identifiers are additionally encrypted in a separate secrets vault. Access is role-based and least privilege; access to sensitive identifiers is logged to an access log. No system is perfectly secure, and we will notify you and the applicable regulators as required if a breach affecting your information occurs.

12. Children

This site and our products are directed to businesses and to adults aged 18 and over. We do not knowingly collect personal information from anyone under 18.

13. Changes and contact

We may update this policy. The effective date at the top of this page reflects the current version, and material changes will be posted here before they take effect. Questions, requests or complaints: (888) 896-5559, or Privacy, Prepline Capital, 9719 S Dixie Hwy #8, Miami, FL 33156.

See also: Terms of Use · SMS Terms · Disclosures · Compliance.