Terms of Service

1. Introduction

Commercial Vista (“we,” “our,” or “us”) operates a financial technology platform that connects business owners with lending professionals and brokers. This Privacy Policy explains how we collect, use, disclose, and safeguard the personal and business information you provide when using our platform, website, and related services (collectively, the “Platform”).

By accessing or using the Platform, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Platform.

2. Information We Collect

2.1 Information You Provide

• Business and personal identification information (name, business name, email address, phone number)
• Financial information (monthly revenue, time in business, funding amount requested)
• Financial documents (bank statements, tax returns, credit reports) uploaded for underwriting purposes
• Social Security Numbers (SSN) and Employer Identification Numbers (EIN) where required for application processing
• Banking and payment information (ACH routing and account numbers) for commission disbursements
• Account credentials (username and password)
• Communications you send through the Platform (messages, notes)

2.2 Information Collected Automatically

• Log data including IP address, browser type, pages visited, and timestamps
• Session and authentication activity
• Usage data relating to features accessed on the Platform

3. How We Use Your Information

We use the information we collect to:

• Facilitate loan applications, deal submissions, and lender matching
• Verify your identity and business information
• Process and track commission and referral payments
• Provide customer support and platform assistance
• Send transactional communications (deal status updates, account notifications)
• Improve the Platform and develop new features
• Detect, investigate, and prevent fraud and security incidents
• Comply with applicable legal and regulatory obligations

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

• Lending partners and lenders you authorize us to submit your request or deal to, for review, underwriting, and credit evaluation purposes
• Brokers and referral partners who originated your application and are entitled to deal status updates
• Service providers who operate on our behalf (cloud storage, email delivery, SMS, payment processing) and are contractually bound to protect your information
• Legal and regulatory authorities where required by law, court order, or government request
• Successors in interest in the event of a merger, acquisition, or sale of assets, subject to the same privacy commitments

5. Data Security

We implement commercially reasonable technical and organizational safeguards to protect your information, including:

• Encryption of sensitive data fields (SSN, EIN, banking information) at rest using AES-256-GCM
• Encrypted data transmission via TLS/HTTPS for all Platform connections
• Password hashing using bcrypt with appropriate cost factors
• Optional multi-factor authentication (MFA) for account holders
• Role-based access controls limiting data access to authorized personnel
• Audit logging of key access and security events
• Brute-force login protection and account lockout policies

No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you use the Platform at your own risk.

6. Data Retention

We retain your information for as long as your account is active and for a period thereafter as needed to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Financial and deal records are generally retained for seven (7) years in alignment with standard financial record-keeping requirements. For more detail, refer to our Terms of Service.

7. Your Rights and Choices

Depending on your location and applicable law, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information, subject to legal retention obligations
• Opt out of non-essential communications (you may unsubscribe from marketing emails at any time)

To exercise any of these rights, contact us at the address provided in Section 10.

8. Cookies and Tracking

We use session cookies and similar technologies to maintain your logged-in state and provide core Platform functionality. We do not use advertising or third-party tracking cookies. You may disable cookies in your browser settings, but doing so may impair Platform functionality.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of the Platform after changes are posted constitutes your acceptance of the revised policy.

10. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us at: