Privacy Policy

Last Updated: June 10, 2026

Loan Pros Funding Funnel ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal information we collect about you, how we use and share it, how long we keep it, and the rights you have over it.

1. Who Is the Data Controller

For the personal information collected through this website, the data controller is:

If you are in the EU/UK and would like to reach our privacy contact, please use the address above.

2. Information We Collect

We collect the following categories of personal information, directly from you and through your interactions with our website and communications:

3. Sources of Information

4. How and Why We Use Your Information (Legal Basis)

PurposeCategories usedLegal basis (GDPR)
Responding to your enquiry and delivering requested servicesIdentifiers, communication contentPerformance of a contract / steps prior to entering into a contract
Sending follow-up emails, SMS, or AI-assisted calls on channels you consented toIdentifiers, consent records, inferencesYour consent (Art. 6(1)(a)) — withdrawable at any time
Detecting fraud, abuse, and securing the serviceIdentifiers, internet activityLegitimate interest in protecting our service and users
Complying with legal obligations (records, audit, DSR responses)All of the aboveLegal obligation (Art. 6(1)(c))
Improving content and conversion of our websiteInternet activityLegitimate interest, balanced against your rights

5. Who We Share Information With

We share personal information with the following categories of recipients. Each of them processes the data only on our instructions under a data processing agreement, except where stated:

RecipientRoleWhat we share
Twilio, Inc. (USA)Telephony & SMS deliveryPhone number, message body, call audio, delivery status
OpenAI, L.L.C. (USA)AI content generation and voice conversationConversation prompts, call audio/transcript fragments
Google LLC / Gemini (USA)AI content generation (fallback)Conversation prompts and content fragments
ElevenLabs, Inc. (USA)AI voice synthesis (optional)Conversation prompts, voice audio
Mailgun Technologies, Inc. (USA)Transactional and marketing email deliveryEmail address, message body, delivery and open events
Amazon Web Services (AWS) — SES, S3 (USA/EU)Email delivery (fallback) and storage of recordings/exportsEmail address, message body, call recordings, data export files
Retargeting / analytics pixels embedded by the operator of this pageAdvertising and analyticsInternet activity (cookie IDs, page URL). This may constitute "sharing" under CCPA/CPRA — see Section 11.

We do not sell personal information for money. We do not knowingly share personal information of users under 16. To opt out of sharing for cross-context behavioral advertising, use the Do Not Sell or Share link above.

6. AI-Assisted Communications

We use artificial intelligence to assist with phone calls and to generate written content. When you receive a call from us:

7. SMS & Email Communications

8. Cookies & Tracking

We use cookies to remember your consent preferences, detect your timezone for communication-timing compliance, measure page performance, and (where applicable) deliver retargeting advertising. You can control cookies through your browser settings; disabling cookies may affect site functionality.

9. Automated Decision-Making and Profiling

Some decisions about how we follow up with you are made automatically by software. Specifically:

These decisions do not produce legal or similarly significant effects on you, but you have the right to ask a human to review any specific decision. Email our privacy contact (Section 1) to make such a request.

10. Data Retention

CategoryRetention period
Active subscriber / lead profileUntil you opt out or request deletion, then deleted within 30 days (60 days for full backup expiry)
Call recordings and transcripts90 days, then deleted
Email open / click events12 months
SMS delivery logs12 months
Consent recordsLifetime of the contact + 24 months after deletion (for legal proof)
Suppression list (opt-out records)Indefinite (we keep these to honor your opt-out forever)
Data Subject Rights request records24 months from the request date

11. Sale and Sharing of Personal Information (California Residents)

We do not sell personal information for money. We may "share" personal information for cross-context behavioral advertising where retargeting or analytics pixels are embedded on this page; this can constitute "sharing" under California law even when no money changes hands.

You have the right to opt out of sharing. Use the Do Not Sell or Share My Personal Information link, or send a Global Privacy Control (GPC) signal from your browser — we treat the GPC signal as a valid opt-out.

12. Data Security

We use technical and organizational measures appropriate to the risk, including TLS in transit, access controls, encrypted storage of sensitive credentials, AI moderation of outbound content, rate-limiting on public endpoints, and regular review of our service providers.

13. International Data Transfers

Your data may be processed in the United States (Twilio, OpenAI, Google, ElevenLabs, Mailgun, AWS US regions) and other countries where our service providers operate. Where we transfer data out of the EU/UK, we rely on the European Commission's Standard Contractual Clauses (SCCs) and equivalent UK addendum.

14. Your Rights

Regardless of where you live, you can:

If you are in the EU, UK, or Switzerland (GDPR / UK GDPR)

If you are in California (CCPA / CPRA)

An authorized agent may submit a request on your behalf with written permission.

Providing data is not a statutory requirement

You are not legally required to give us your information. If you choose not to, we may be unable to contact you or deliver the service you requested.

How to exercise your rights

Use the Data Rights Request form or email our privacy contact (Section 1). We aim to confirm receipt of your request within 10 business days and to substantively respond within 30 days (45 days for California residents, extendable once by 45 days where allowed).

15. Children

Our services are not directed to individuals under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact the privacy contact in Section 1 and we will delete it.

16. Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page with an updated "Last Updated" date at the top.

17. Contact Us

For privacy-related questions, requests, or complaints: