Privacy policy

1. Who we are

Afterfirst MCA LLC (California, formation pending) operates afterfirstmca.com. Our address is 10850 Wilshire Blvd, Suite 1010, Los Angeles, CA 90024. Contact us at [email protected] or 877-FUND-654 (877-386-3654).

Afterfirst is a marketplace and shopping desk, not a lender or funder. We help a business compare options and, when the business chooses, send its application directly to the funders or lenders the business selected.

2. What we do with applications

Applications go directly to the merchant's chosen funders and lenders. Afterfirst does not store application data or bank statements. The selected funder or lender receives and handles those materials under its own privacy policy and agreement. Do not email bank statements to us; we will explain the appropriate delivery method before a document is needed.

The website's calculators run in the browser. We do not store calculator entries. The current site has no online application form. Calls and emails are the available ways to reach the desk.

3. Information we collect

We keep only the information needed to operate the desk and website:

• Calls and texts: Every call is recorded as company policy, and every text conversation is recorded in the business communications record. Callers are told at the start that the call is recorded and are asked for the consent required by applicable law.
• Emails: We keep emails received and our replies, including the contact details and business information you choose to include.
• Analytics: Google Analytics and Cloudflare Web Analytics receive technical and usage information such as pages viewed, referring page, device, browser, approximate location, and performance data.
• Funder or lender records: When you choose a funder or lender, that party receives the application and statements directly. Afterfirst does not keep those materials.

Please do not send Social Security numbers, bank account numbers, or bank statements by email.

4. How we use information

We use communications to respond, understand the file you describe, coordinate a requested introduction, keep a record of permissions, prevent misuse, secure the site, and comply with law. We use analytics to understand site use and improve content and tools. We do not sell personal information or share it for cross-context behavioral advertising.

We do not make automated decisions that produce legal or similarly significant effects. A funder or lender makes its own underwriting decision.

5. Quo phone and messaging service

Our phone and texting service provider is Quo (formerly OpenPhone). Quo processes calls, texts, voicemail, recordings, transcripts, summaries, contact details, and related service data as a provider to us. Quo describes manual and automatic call recording, along with transcription, searchable transcripts, and optional summaries on supported plans. We may use those features when enabled for our number. If an AI assistant such as Quo's Sona is enabled, it may answer a call, take a message, summarize a conversation, or send a text within the configured workflow; we will identify the automated assistant when it participates.

Every call is recorded as company policy. The recording announcement is made at the beginning of the call, and we obtain consent where required. California requires all-party consent, so a caller who does not consent should say so and end the call or ask for another channel.

We send SMS only after opt-in or when a person initiates a text conversation and the reply is within that conversation. Marketing texts require express consent. Texts identify the sender and include Reply STOP to unsubscribe. Reply HELP for help. STOP is honored promptly; message and data rates may apply. Consent to texts is not required to request information or use the website.

Quo's privacy materials and service documentation are available at Quo privacy, call recording documentation, and message deliverability guidance. Those pages describe Quo's own processing and do not replace this policy.

6. Cookies and analytics

Google Analytics 4 uses cookies and helps us understand visits. Our Google Analytics property is configured with a 14-month retention setting. Cloudflare Web Analytics measures visits and performance through the site hosting and analytics service; we do not use advertising pixels or retargeting tools. We honor a valid Global Privacy Control signal as a request to opt out of sale, sharing, and targeted advertising. We do not sell or share those categories today, and we will not override the signal by treating a later page visit as consent.

7. When information is shared

We share communications with service providers that host, secure, analyze, or transmit them, including Cloudflare, Google, email providers, and Quo. We share an application and statements directly with a funder or lender only when the merchant chooses that recipient. We may disclose information when required by law, legal process, safety needs, fraud investigation, or a business transfer. We do not sell personal information.

8. Retention

Our stated practice is to keep call recordings, call transcripts and summaries, and text records for up to 24 months after the last related interaction. We keep emails for up to 24 months after the last related message. Google Analytics data is kept for 14 months, and Cloudflare analytics is kept for no longer than 14 months under this practice. We may keep a limited record longer when necessary for a legal hold, a dispute, security, fraud prevention, or a request to exercise privacy rights. Application data and bank statements are not stored by Afterfirst; the chosen funder or lender controls its own retention.

9. Security

We use reasonable administrative, technical, and physical safeguards suited to the limited information we keep, including restricted account access and HTTPS. No transmission or storage method is completely secure. We will provide notices required by law if a security incident affects information we hold.

10. California rights (CCPA and CPRA)

California residents may ask us to disclose the categories and specific pieces of personal information we collected, the sources, the purposes, and the categories of recipients; correct inaccurate information; delete information subject to legal exceptions; receive a portable copy; and opt out of sale, sharing, targeted advertising, or certain profiling. We do not sell or share personal information for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes that create a right to limit sensitive information. We do not discriminate against a person for exercising these rights.

Categories collected in the preceding 12 months:

To request access, correction, deletion, portability, or an opt-out, email [email protected] or call 877-FUND-654 (877-386-3654). We may verify a request by matching information you provide with information we hold. An authorized agent may make a request with written authorization. We respond within 45 days; when the law permits an extension, we will explain it.

11. Rights under other state privacy laws

We honor access, correction, deletion, portability, and applicable opt-out requests from residents of states with comprehensive privacy laws, whether or not a threshold or exemption applies to Afterfirst. As of September 25, 2026, those states are California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. Rights and exemptions vary by state, and a request may be limited where law permits.

Use [email protected] or 877-FUND-654 (877-386-3654). We respond within 45 days. We honor Global Privacy Control for applicable opt-out requests. Nevada residents may also ask us not to sell covered information; we do not sell personal information.

12. Children and visitors outside the United States

The site is for business owners and is not directed to children under 18. We do not knowingly collect information from children. Afterfirst serves U.S. businesses; information may be processed in the United States.

13. Third-party links

Our pages may link to regulators, analytics opt-out tools, Quo, funders, and other sites. Their privacy practices are governed by their own policies. Afterfirst is not responsible for those sites.

14. Changes

We may update this policy by posting a new effective date. If a change materially expands how we use or share information already provided, we will give any notice or obtain any consent required by law.

15. Contact

Afterfirst MCA LLC (California, formation pending)

10850 Wilshire Blvd, Suite 1010, Los Angeles, CA 90024

[email protected] · 877-FUND-654 (877-386-3654)