Privacy policy

1. Who we are

Afterfirst MCA LLC, a California limited liability company ("Afterfirst," "we," or "us"), operates afterfirstmca.com and is the controller of the personal information this policy covers. Our address is 10850 Wilshire Blvd, Suite 1010, Los Angeles, CA 90024. Contact us at info@afterfirstmca.com or 877-FUND-654 · (877) 386-3654.

Afterfirst is a merchant cash advance broker, not a funder. We help a business compare options and explain next steps.

2. The application at /apply

You apply at afterfirstmca.com/apply. A person on our team reads every application. We share it with funders only to get you offers, and only as the boxes on the form say. You can also call or email us instead.

The website's calculators run in your browser, and we do not store calculator entries.

3. Information we collect

The application form asks for:

• Your business: legal business name, DBA (optional), industry, the month and year the business started, the state it's in, and average monthly deposits.
• Your funding request: the amount you need, what the money is for, and anything you want to add about it.
• Advances you already have: how many open advances or loans you have and, for each one (up to 8), the funder or lender, the balance left, the payment amount and how often it debits. We also ask whether you're behind on any of them, and you can add notes.
• You: first and last name, email, mobile phone, and your ownership percentage.
• Your consent: before you send the form you confirm three statements: "I own this business or can act for it." "What I entered is true." "By submitting this application, I authorize Afterfirst MCA LLC to share my file with its funder partners. I can decline any offer." You may also tick two optional boxes. The contact box says: "Afterfirst MCA LLC may call, text, and email me at the mobile number and email I entered on this screen about this application, including with an automatic dialing system. Up to 2 texts a day and 3 texts about this application. Message and data rates may apply. Reply STOP to opt out. Reply HELP for help. Consent is not a condition of getting funding." The call box says "I'd like a call"; a person calls only if you tick it. Funders contact you only as the box above or your own request allows. We record which boxes you checked and the version of the wording you saw.
• Bank statements (optional): after you send the form, you can upload business bank statements as PDF files, up to 10 MB each.
• Technical details: when you send the form, we record the date and time, your IP address, your browser's user agent, and the page you sent it from. A Cloudflare Turnstile bot check runs when you press send. Cloudflare checks it, and we keep only the result. To limit repeat sends, we also keep a short-lived, one-way scrambled form of your IP address.

The four-step application doesn't ask for your Social Security number, date of birth or bank account numbers. If you choose the optional Complete your file step after you apply, we also collect what funders need to review your file: the business's EIN, entity type, registration state, start date, phone and address; each owner's home address, date of birth, Social Security number and estimated credit range; details on a second owner if you add one; and your electronic signature with its date, time, IP address and browser.

We encrypt these details before we store them in our application database, and only our team can open them there. We share them only with funders we send your file to, under the authorization you sign. We email your application to our team at info@afterfirstmca.com. If you complete the optional Complete your file step, that email includes the details you enter there, such as your EIN, date of birth and Social Security number. When you authorize sharing, or ask us to send your file, we may email those details and your bank statements to the funders reviewing your file.

We do not put these details in analytics, advertising tools or web addresses. Email is not as secure as an encrypted upload. Where you can, send bank statements through the upload after you apply. Applicant contact comes only from info@afterfirstmca.com. Bank statements you upload may show account numbers. Statements you upload are stored encrypted with Cloudflare, and a copy is sent to our team by email.

While you work through the form, it saves your answers on your own device for up to 14 days so you don't lose them, and clears them once you send. The consent boxes are never saved on your device.

We also keep:

• Calls and texts: Every call is recorded as company policy, and every text conversation is recorded in the business communications record. Callers are told at the start that the call is recorded and are asked for the consent required by applicable law.
• Emails: We keep emails received and our replies, including the contact details and business information you choose to include.
• Analytics: Google Analytics and Cloudflare Web Analytics receive technical and usage information such as pages viewed, referring page, device, browser, approximate location, clicks on links and buttons, and performance data. Your application answers are never sent to either one.

4. How we use information

We use your application to understand your business, contact you about it by email (and by phone only if you tick "I'd like a call"), and shop it with funders whose rules fit your business so they can make you offers. We use the technical details to stop spam and fraud and to keep a record of your consent. We use calls and emails to respond, keep a record of what we discussed and the permissions you gave, and comply with law. We use analytics to understand site use and improve content and tools. We do not sell personal information or share it for cross-context behavioral advertising.

We do not make automated decisions that produce legal or similarly significant effects. A funder or lender makes its own underwriting decision.

5. Quo phone and messaging service

Our phone and texting service provider is Quo (formerly OpenPhone). Quo processes calls, texts, voicemail, recordings, transcripts, summaries, contact details, and related service data as a provider to us. Quo describes manual and automatic call recording, along with transcription, searchable transcripts, and optional summaries on supported plans. We may use those features when enabled for our number. If an AI assistant such as Quo's Sona is enabled, it may answer a call, take a message, summarize a conversation, or send a text within the configured workflow; we will identify the automated assistant when it participates.

Every call is recorded as company policy. The recording announcement is made at the beginning of the call, and we obtain consent where required. California requires all-party consent, so a caller who does not consent should say so and end the call or ask for another channel.

We send SMS only after opt-in or when a person initiates a text conversation and the reply is within that conversation. Marketing texts require express consent. Texts identify the sender and include Reply STOP to unsubscribe. Reply HELP for help. STOP is honored promptly; message and data rates may apply. Consent to texts is not required to request information or use the website.

Quo's privacy materials and service documentation are available at Quo privacy, Call recording documentation, and Message deliverability guidance. Those pages describe Quo's own processing and do not replace this policy.

6. Cookies and analytics

We use Google Analytics to measure how people use this site. It uses cookies to count the pages you visit, your device and browser, your approximate location (a city or region worked out from your IP address), and the links and buttons you click, such as a phone number, an email address or a link to the application. When an application is sent, Google Analytics records only that one was sent, whether it came from a business owner or a broker, and a rough range for the amount requested. Your application answers, name, email, phone number, business name, reference number and bank statements are never sent to Google Analytics. To stop Google Analytics from measuring your visits, install the Google Analytics opt-out browser add-on or block cookies for this site in your browser settings.

When you first visit, we set one first-party cookie (af_src) that records the page you landed on, when you arrived, the site that referred you, and any campaign tags in the link (such as UTM codes or ad click IDs). If you apply, we save that information with your application so we know how you found us. It contains no contact details and expires after 30 days.

Our Google Analytics property is configured with a 14-month retention setting. Cloudflare Web Analytics measures visits and performance through the site hosting and analytics service; we do not use advertising pixels or retargeting tools. We use Microsoft Clarity to see how visitors use the site, such as clicks and scrolling, so we can improve it; sensitive fields such as SSN, date of birth, EIN, bank details and the application form are masked and never recorded.

We honor a valid Global Privacy Control signal as a request to opt out of sale, sharing, and targeted advertising. We do not sell or share those categories today, and we will not override the signal by treating a later page visit as consent.

7. When information is shared

We share your application and any statements with funders only to get you offers, and only with your consent. The third statement on the form says that by submitting the application you authorize Afterfirst MCA LLC to share your file with its funder partners, and that you can decline any offer. We send it only to funders whose rules fit your business, and each funder decides on its own and sets its own terms. Funders contact you only as the contact box on the form or your own request allows.

We also use service providers that host, secure, analyze, or transmit information for us: Cloudflare (hosting, storage and the bot check), Google (analytics, email and our internal records), and Quo (phone and texts). We may disclose information when required by law, legal process, safety needs, fraud investigation, or a business transfer. We do not sell personal information.

8. Storage and retention

When you apply at afterfirstmca.com/apply, your answers are stored in our application database with Cloudflare, our hosting provider. Bank statements you add after you send the form are uploaded as PDFs over an encrypted connection. Statements you upload are stored encrypted with Cloudflare, and a copy is sent to our team by email. A copy of your answers goes to our business email and our internal records. Only our team can open your application and statements in our systems.

We keep an application, its consent record and any statements for 24 months after we last worked on it, then delete them, unless the law requires us to keep them longer. You can ask us to delete them sooner at any time: email info@afterfirstmca.com or call 877-FUND-654. We delete them from our database and file storage, our email and our internal records. Funders that already received your application keep their copy under their own privacy policies.

9. Security

We use reasonable safeguards suited to what we keep, including HTTPS on every page, encrypted storage for bank statements, and access limited to our team. No transmission or storage method is completely secure. We will provide notices required by law if a security incident affects information we hold.

10. California rights (CCPA and CPRA)

California residents may ask us to disclose the categories and specific pieces of personal information we collected, the sources, the purposes, and the categories of recipients; correct inaccurate information; delete information subject to legal exceptions; receive a portable copy; and opt out of sale, sharing, targeted advertising, or certain profiling. We do not sell or share personal information for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes that create a right to limit sensitive information. We do not discriminate against a person for exercising these rights.

Categories collected in the preceding 12 months:

To request access, correction, deletion, portability, or an opt-out, email info@afterfirstmca.com or call 877-FUND-654 · (877) 386-3654. We may verify a request by matching information you provide with information we hold. An authorized agent may make a request with written authorization. We respond within 45 days; when the law permits an extension, we will explain it.

11. Rights under other state privacy laws

We honor access, correction, deletion, portability, and applicable opt-out requests from residents of states with comprehensive privacy laws, whether or not a threshold or exemption applies to Afterfirst. Those states include California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. Rights and exemptions vary by state, and a request may be limited where law permits.

Use info@afterfirstmca.com or 877-FUND-654 · (877) 386-3654. We respond within 45 days. We honor Global Privacy Control for applicable opt-out requests. Nevada residents may also ask us not to sell covered information; we do not sell personal information.

12. Children and visitors outside the United States

The site is for business owners and is not directed to children under 18. We do not knowingly collect information from children. Afterfirst serves U.S. Businesses; information may be processed in the United States.

13. Third-party links

Our pages may link to regulators, analytics opt-out tools, Quo, funders, and other sites. Their privacy practices are governed by their own policies. Afterfirst is not responsible for those sites.

14. Changes

If we change this policy, we post the new version on this page. If a change materially expands how we use or share information you already gave us, we will give any notice or obtain any consent required by law.

15. Contact

Afterfirst MCA

10850 Wilshire Blvd, Suite 1010, Los Angeles, CA 90024

info@afterfirstmca.com · 877-FUND-654 · (877) 386-3654