Privacy
Privacy Policy
Effective and last updated: October 19, 2026
The central fact: All Finance is a lead-generation company. When live submission is enabled and you submit a loan request, we sell and disclose the information in that request to the companies identified on our Partners page so they can contact you and provide loan-consulting, brokerage, matching, or follow-up services. The directory identifies the current eligible recipients.
1. Scope
This Privacy Policy explains how All Finance LLC (“All Finance,” “we,” “us,” or “our”) collects, uses, discloses, sells, retains, and protects personal information through this website and related communications. It does not govern companies identified on our Partners page, Google, lenders, or other independent third parties, which have their own privacy practices.
California residents should also read our California Privacy Policy. To exercise a sale or sharing choice, visit Do Not Sell or Share My Personal Information .
2. Information we collect
Information you provide
- Identity and contact information: first and last name, postal address, email address, and mobile telephone number.
- Loan-request information: requested amount, loan purpose, and amount of debt you want to consolidate.
- Financial and eligibility information: monthly income and its annualized equivalent, pay frequency, employment status, estimated credit-score range, housing status, and confirmation that you are at least 18.
- Consent and request information: acknowledgments, automated-call/text choice, privacy choices, and communications or requests you send us.
We do not currently ask for your Social Security number, date of birth, financial-account credentials, or payment-card credentials on this website. Do not provide those details in an unrequested field or message.
Information collected automatically
Our website and infrastructure providers may process IP address, browser and device type, operating system, requested page, referring domain, timestamps, security events, and similar technical information needed to deliver, secure, troubleshoot, and measure basic site availability. Our current origin logging is designed to omit query strings and form answers.
The application uses browser session storage to remember a temporary presentation variant during a session. The privacy-choice page uses local storage to remember a browser-level opt-out request. These are not used for cross-site advertising.
Cookiebot consent management
We use Cookiebot by Usercentrics to present cookie and privacy choices, remember those choices, and maintain consent records. In providing that service, Cookiebot may process consent status, timestamps, technical identifiers, IP address information, and browser or device details. Use the Cookie Settings control in the footer to review or change your choice.
TrustedForm consent records
On the application page, we use TrustedForm by ActiveProspect to create evidence of the page and consent presented during a form session. TrustedForm receives a copy of the page’s DOM and content; form inputs and interaction events such as clicks, mouse movements, keystrokes, and scrolling; and technical details including the page URL, IP address, browser, operating system, timestamps, and time on page. Financial and address fields are designated sensitive so their raw values are hashed rather than stored in the certificate. Selected contact fields are available for matching the certificate to the request.
TrustedForm does not use cookies, device fingerprinting, or cross-site behavioral tracking for this service. We do not load it when this site recognizes Global Privacy Control, Do Not Track, or a stored sale opt-out. ActiveProspect acts as our service provider under its TrustedForm Privacy Notice .
Google address suggestions
If you choose address suggestions, partial address text and the selected place request are sent directly from your browser to Google so suggestions can be returned. Other application answers are not intentionally included in those requests. You may instead enter your address manually. Google’s processing is governed by its own privacy terms.
3. Sources of information
We collect personal information:
- directly from you when you use the form or contact us;
- automatically from your browser and our website infrastructure;
- from service providers that help operate, secure, or troubleshoot the website; and
- from a company identified on our Partners page regarding referral status and whether a referred request resulted in funding, when reporting is enabled and legally permitted.
4. How we use information
We use personal information to:
- operate, present, secure, and troubleshoot the website and form;
- respond to your request and provide the referral service;
- sell and disclose a submitted lead to the companies identified on our Partners page for personal-loan consulting, brokerage, matching, and follow-up;
- communicate with you about your inquiry, including automated marketing calls or texts only when the required consent applies;
- administer consent, do-not-call, opt-out, correction, deletion, and other privacy requests;
- prevent fraud, misuse, security incidents, and unlawful activity;
- confirm referral and funded-loan outcomes, calculate compensation, and audit the commercial relationship; and
- comply with law, legal process, contracts, and recordkeeping duties.
We will not use personal information for a materially different, incompatible purpose without providing notice and obtaining consent when required.
5. Sale and disclosure of information
Sale to listed partners
All Finance’s business model includes selling consumer leads. When live submission is enabled and you submit a request, we sell and disclose the identifiers, contact information, loan-request details, financial and employment information, estimated credit range, housing information, age confirmation, and related consent records in the request to the companies identified on our Partners page. A listed partner uses that information under its own privacy policy and may disclose it to service providers and potential lenders.
All Finance sells leads only to companies identified in the current partner directory. We do not sell your mobile number or automated-call/text consent independently for unrelated third-party marketing. We do not “share” personal information for cross-context behavioral advertising at this time.
Service providers
We may disclose information to vendors that host, deliver, secure, test, or support the website; provide address suggestions; or support communications and consent administration. They may use information only for contracted services and legal obligations, subject to applicable agreements.
ActiveProspect receives the application-page and interaction data described above to generate a TrustedForm certificate. This service-provider disclosure is separate from any future sale of a submitted lead to a company on our Partners page.
Legal and business disclosures
We may disclose information when reasonably necessary to comply with law or legal process, protect rights and safety, investigate fraud or security incidents, enforce agreements, or complete a merger, financing, reorganization, sale of assets, or similar transaction. Any successor is subject to applicable privacy obligations.
6. Current submission and tracking status
As of the effective date, a completed application that passes validation is transmitted to All Finance and stored in our Railway-hosted database. The application answers, contact information, consent timestamps, and TrustedForm certificate URL are encrypted before database storage. We also store keyed, one-way lookup values for exact contact and certificate matching, plus the versioned consent language and Partners directory that applied when you submitted.
The current storage system does not transfer or sell the completed lead to a listed partner. That separate delivery connection is not enabled. Address suggestions and TrustedForm processing follow the service-provider practices described above. We will update this Policy and complete the required operational and consent review before partner delivery begins.
We do not currently deploy the Meta Pixel, behavioral-advertising pixels, or analytics tags on this website. Cookiebot provides the cookie and privacy controls described above. If those practices change, we will update this Policy and deploy legally required notice and choice controls before the new processing begins.
7. Calls, texts, and email
If you provide the consent presented on the contact-information step, All Finance and the companies identified on our Partners page may send marketing calls and texts to the number you provide using an automatic telephone dialing system, automated technology, or an artificial or prerecorded voice. Consent is not required as a condition of purchasing property, goods, or services. Message frequency varies and message and data rates may apply.
You may revoke consent by any reasonable method. Reply STOP, QUIT, END, REVOKE, OPT OUT, CANCEL, or UNSUBSCRIBE to an incoming text to stop texts. Reply HELP for help. We and our partner must honor applicable revocation and do-not-call requests. You may unsubscribe from marketing email through its unsubscribe link.
8. Retention
We retain each category of personal information only as long as reasonably necessary for the purposes described here. The criteria include the time needed to complete and audit a referral, administer compensation, maintain consent and suppression records, respond to privacy requests, protect the service, resolve disputes, and satisfy legal or contractual recordkeeping requirements. We may retain a minimal suppression record longer when needed to honor an opt-out or do-not-contact request. Information is then deleted, deidentified, or rendered inaccessible as appropriate.
The current lead and consent record is scheduled for deletion five years after submission unless we delete it sooner or a legal, fraud-prevention, dispute, suppression, or other documented obligation requires a different period.
Under our current free TrustedForm Certify configuration, an unretained certificate is generally available for 72 hours and may remain available for up to 90 days when a form submission is detected. We have not enabled the paid TrustedForm Retain service for long-term storage.
9. Security
We use reasonable administrative, technical, and physical measures designed to protect personal information. No internet transmission or storage system is completely secure, and we cannot guarantee absolute security. Do not submit sensitive credentials or information that the form does not request.
10. Your privacy choices
Depending on your state, you may have rights to access, know, correct, delete, or obtain a copy of personal information; opt out of its sale, targeted advertising, or certain profiling; and appeal a denied request. We will not discriminate against you for exercising an applicable privacy right.
To opt out of sale or sharing, use our privacy-choice page. For access, correction, deletion, or other requests, use our Contact Us page. Describe your request and provide the name, email address, and telephone number you used so we can locate and, when required, verify the relevant record. Do not send a Social Security number or identity document unless we specifically request a permitted verification method.
Authorized agents may submit requests where permitted. We may ask for proof of authorization and verify the consumer directly. You may appeal a denied request by writing “Privacy Appeal” at the same address.
11. Children
The service is intended only for adults. We do not knowingly collect or sell personal information from anyone under 18 through the application. Do not submit a request if you are under 18. If we learn that a minor has submitted information, we will take reasonable steps to delete it.
12. Third-party links
Links to other sites are provided for convenience. Their privacy policies apply after you leave our site or interact directly with their services. Review those policies before providing additional information.
13. Changes to this Policy
We may update this Policy as our practices or legal obligations change. The effective date identifies the current version. We will provide additional notice or obtain consent for material changes when required.
14. Contact us
For questions about this policy or to submit a privacy request, visit our Contact Us page.