Privacy Policy
Last Updated: December 2024
Introduction
Nextlevel Automations LLC, doing business as NextLevel MCA ("we," "our," or "us"), operates the NextLevel MCA platform, a complete merchant cash advance business operating system. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our platform.
By using NextLevel MCA, you agree to the collection and use of information in accordance with this policy.
Information We Collect
Account Information
When you create an account or transfer an existing account, we collect:
- Name and email address
- Company/agency name
- Phone number
- Billing address
- Payment information (processed by our payment provider)
Team Member Information
For users you add to your account:
- Name and email address
- Role and permissions
- Login activity
Business Client Information (Data You Input)
When you use our platform to manage MCA deals, you may input information about your clients, including:
- Business name, address, and contact information
- Business owner names and contact information
- Social Security Numbers (SSNs)
- Dates of birth
- Bank account and routing numbers
- Bank statements and financial documents
- Credit score information
- Tax identification numbers (EIN)
- Business financial information (revenue, expenses)
Email Integration Data
If you connect email accounts for lender submissions:
- Email address and display name
- OAuth authentication tokens
- Email messages sent to and received from lenders
- Email metadata (timestamps, recipients, subject lines)
Communication Data
When you use platform communication features:
- Phone call recordings and logs (if enabled)
- SMS message content and metadata
- Email content sent through the platform
Usage Information
- Log data (IP address, browser type, pages visited)
- Feature usage and interaction data
- Platform activity and login history
- Error logs and performance data
Cookies and Tracking
- Session cookies for authentication
- Preference cookies for user settings
- Analytics to improve the Service
How We Use Your Information
We use the information we collect to:
- Provide and operate the NextLevel MCA platform
- Provision and manage your account
- Process and manage MCA deals on your behalf
- Send deal submissions to lenders via email
- Monitor lender responses and classify them using AI
- Enable phone, SMS, and email communications
- Generate reports and analytics for your business
- Process payments and manage billing
- Communicate with you about your account and our services
- Provide customer support
- Improve and develop new features
- Ensure security and prevent fraud
- Comply with legal obligations
AI Processing
Our platform uses artificial intelligence to:
- Classify lender email responses (approvals, declines, information requests)
- Extract offer terms from lender communications
- Match incoming emails to deal submissions
- Power conversational AI features (if enabled)
- Generate content (if using AI content features)
AI processing is performed on data you provide or generate through the platform. You can enable or disable AI processing for email accounts and other AI features in your settings.
How We Share Your Information
We do not sell your personal information or your clients' information.
We may share information with:
Infrastructure Providers
- Database and hosting providers
- Cloud storage providers
- Content delivery networks
These providers only access data necessary to operate the infrastructure and are bound by contractual obligations to protect your information.
Service Providers
- Payment processors (for billing)
- AI service providers (for classification and content features)
- Analytics providers (for platform improvement)
Communication Providers
When you use phone, SMS, or email features:
- Telephony providers (for phone calls)
- SMS gateway providers (for text messaging)
- Email delivery providers (for platform-sent emails)
Email Integration
When you connect external email accounts (Google or Microsoft), those providers receive data necessary to send and receive emails on your behalf. Their privacy policies govern their handling of that data.
Lenders
When you submit deals, we send information to lenders you select. You control which lenders receive submissions and what information is included.
Legal Requirements
We may disclose information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
Business Transfers
If NextLevel MCA is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
Data Retention
We retain your information for as long as your account is active or as needed to provide services.
- Account data: Retained until account deletion
- Deal and client data: Retained until you delete it or close your account
- Communication logs (calls, SMS): Retained for 12 months
- Email logs: Retained for 12 months
- Activity logs: Retained for 24 months
- Billing records: Retained for 7 years (legal requirement)
Upon account termination, we will delete or anonymize your data within 90 days, except where retention is required by law.
Data Security
We implement appropriate technical and organizational measures to protect your information:
- Encryption in transit (TLS 1.3) and at rest (AES-256)
- Additional encryption for sensitive fields (SSNs, bank account numbers)
- Role-based access controls
- Multi-tenant data isolation
- Regular security reviews
- Activity logging and monitoring
- Secure data centers with physical access controls
For more details, see our Security Page.
Your Rights and Choices
Access and Portability
You can access and export your data at any time through the platform's export features.
Correction
You can update or correct your information through your account settings or by contacting us.
Deletion
You can delete individual records within the platform. To delete your entire account and associated data, contact us at legal@nextlevelmca.com.
Email Integration
You can disconnect external email accounts at any time, which stops email monitoring and removes stored OAuth tokens.
AI Processing
You can enable or disable AI processing for connected email accounts and other AI features.
Communication Preferences
You can opt out of marketing communications at any time. Transactional communications (billing, security alerts) cannot be opted out of while your account is active.
Call Recording
If call recording is enabled, you are responsible for complying with applicable consent requirements. You can disable call recording in your settings.
California Privacy Rights (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect, use, and disclose
- Delete your personal information (subject to certain exceptions)
- Opt-out of the sale of personal information (we do not sell personal information)
- Non-discrimination for exercising your privacy rights
To exercise these rights, contact us at legal@nextlevelmca.com. We will verify your identity before processing your request.
Children's Privacy
NextLevel MCA is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 18, we will delete it promptly.
Third-Party Links
Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
International Data Transfers
Our services are hosted in the United States. If you access our platform from outside the United States, your information will be transferred to and processed in the United States.
Communication Features and Compliance
Phone and SMS
When using phone and SMS features, you are responsible for:
- Obtaining proper consent before contacting individuals
- Complying with TCPA and other communication regulations
- Honoring opt-out requests
- Maintaining do-not-call lists
We provide tools to help you manage compliance, but you are solely responsible for your communication practices.
When sending emails through the platform, you are responsible for:
- Complying with CAN-SPAM Act requirements
- Including proper unsubscribe mechanisms
- Honoring opt-out requests within 10 business days
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the new policy on our website
- Updating the "Last Updated" date
- Sending an email notification for significant changes
Your continued use of the platform after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at: