Privacy Policy

A. Information You Provide Directly

• Identity & Contact Data: Full name, business email address, phone number, and physical business address.
• Business Profile Data: Industry sector, business stage, revenue estimates, and primary funding interests (collected during the Smart Onboarding Wizard).
• Security Credentials: Passwords (hashed and salted using bcrypt), PINs, and security recovery contacts.
• Communications: Inquiries submitted to our support team, chat logs with our AI assistant, and consultation requests.

B. Biometric & Device Security Data

• WebAuthn Credentials: Public cryptographic keys generated by your device's Face ID or Touch ID secure enclave.
• Device Fingerprinting: Browser type, operating system, IP address, and hardware identifiers used strictly for the "Trusted Devices" and "Smart Lockdown" security features.
• Location Data: IP-based geofencing data used to detect and block unauthorized logins from high-risk regions.

C. Usage & Behavioral Data

• Viewing Metrics: Watch history, video progress, playback speed preferences, and interactions with interactive transcripts.
• Engagement Data: Videos saved to "My List", offline downloads, Watch Party participation, and Knowledge Quiz scores.
• Platform Navigation: Heatmaps, click paths, and feature utilization to improve the FLEXSTREAM interface.

The 77% Match Engine

We analyze your business profile and watch history to curate highly relevant content, ensuring you see the strategies most applicable to your industry.

Enterprise Security & Smart Lockdown

Device fingerprints and IP geolocation are actively monitored to instantly freeze your account if an unauthorized access attempt is detected.

AI Assistant Processing

Queries sent to our AI assistant are processed to provide contextual support and troubleshoot technical issues in real-time.

Service Delivery

Synchronizing Watch Parties, maintaining offline library DRM, and processing direct consultation requests with our funding specialists.

Internal CRM Integration

Lead capture forms and consultation requests are securely synced with our internal CRM to facilitate communication with our funding specialists.

Community Features (Opt-In)

If you participate in Watch Parties, your chosen display name and avatar will be visible to other attendees.

Essential Service Providers

We utilize enterprise-grade infrastructure partners (e.g., Supabase for database hosting, AWS for video delivery) who are contractually bound to strict confidentiality and security standards.

Legal & Compliance

We may disclose information if legally required by a valid subpoena, court order, or to protect the rights, property, and safety of Business Loans Corporation, our users, or the public.

Smart Privacy Defaults

Our systems utilize name-recognition heuristics to automatically default to higher privacy settings (e.g., avatar illustrations instead of photo uploads) for users from cultures that traditionally prioritize visual privacy.

Optional Biometrics

Face ID and Touch ID are 100% optional. You will never be forced to use biometric authentication, and alternative secure methods (PIN, Authenticator App) are always available.

Data Minimization

If you choose not to upload a profile photo, the platform adapts its security recovery flows to rely on alternative verification methods seamlessly.

Right to Access & Portability

You may request a complete export of your business profile, watch history, and security logs at any time.

Right to Erasure ("Right to be Forgotten")

You may permanently delete your account and all associated data via the Settings panel. This action is irreversible.

Profile Management

You can edit, restrict, or PIN-protect individual sub-profiles (e.g., for different departments or team members) directly from the dashboard.

Communication Preferences

You may opt out of marketing newsletters and recommendations, though critical security alerts (e.g., Smart Lockdown notifications) cannot be disabled.