Privacy Policy

Effective date: [Month Day, Year] (proposed). Applies to Mannah Financial [LLC — legal name and address, brief §12] ("Mannah," "we," "us").

1. Who we are and what this covers

Mannah Financial is a matching service. We are not a lender, debt relief provider, tax firm, or law firm. We collect information you give us on this website and connect you with independent providers — loan marketplaces and debt, tax, and business debt relief companies — who may be able to help. We may be paid by those providers.

This policy covers information collected on mannahfinancial.com and its subdomains, by our forms, and by our phone and email communications with you. It does not cover the practices of the providers we connect you with; each provider has its own privacy policy, which applies once your information is sent to them.

2. Information we collect

Information you give us

• Contact and identity: name, email address, mobile phone number, mailing address, date of birth (personal loan requests only).
• Financial situation: approximate debt amounts and types, payment status, employment and income range, housing status, whether you are in bankruptcy, tax debt details, business details.
• Social Security number — personal loan requests only; see section 6.
• Consents: the text of each consent you gave, its version, and when you gave it.

Information collected automatically

• IP address, approximate location derived from it, browser and device information, the pages you visit, and the form steps you reach.
• Advertising identifiers and campaign parameters from the link that brought you here (for example utm_*, fbclid, ad and ad-set ids).
• Cookies and similar technologies described in section 8.

Information from others

• Verification services: we use third-party services to check that an email address is deliverable and that a phone number is valid and active, its line type (mobile, landline, VoIP), and, where available, whether the name on the account matches the name you gave us.
• Providers: after we connect you, a provider may report back whether it accepted your request, whether it verified your information, and whether you enrolled. We use this to measure our service and to be paid.
• Our CRM: records of calls, texts, and emails between you and us.

3. How we use information

• To match you with providers that may be able to help, based on your answers, your state, and each provider's criteria.
• To verify that your contact details are real and to reduce fraud and abuse, including an optional one-time text code.
• To contact you about your request by phone, text, and email, where you have consented.
• To keep records of the consents you gave, as required by law and by our providers.
• To measure and improve our website and advertising, including reporting conversions to advertising platforms (section 8).
• To honor opt-outs, respond to requests, and comply with law.

4. How we share information

• Providers you choose. For personal loan requests, your request is sent to the loan marketplace operated by Engine (ML Enterprise Inc.) when you click "Agree and Continue" on the review step. For debt, tax, and business debt requests, your information is sent to a named provider only after you check that provider's consent box and click "Connect me" on your results page, or place a call to that provider. It is not sent to any provider before then.
• Service providers that act on our behalf: hosting (Cloudflare), verification services (email and phone), SMS delivery, our CRM (GoHighLevel), consent-recording (TrustedForm), and call tracking (Ringba).
• Advertising platforms (Meta) receive limited, hashed identifiers and event names to measure our ads. We do not send debt amounts, credit profile, income, or other financial details in those events.
• Legal and safety: when required by law, legal process, or to protect rights and safety.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy.

5. "Sale" and "sharing" of personal information

Under some state laws, disclosing your information to a provider in exchange for payment is a "sale," and disclosing it to an advertising platform for measurement or targeting is "sharing." We may sell or share personal information in these senses when you ask to be connected with a provider or when our advertising measurement runs. You can opt out in section 13. We do not knowingly sell or share the personal information of anyone under 16.

6. Social Security numbers

We ask for your Social Security number only for personal loan requests, because the loan marketplace requires it to verify your identity and match offers. Your SSN is transmitted directly to the marketplace over an encrypted connection. Mannah Financial does not store your SSN, does not include it in logs or error reports, does not send it to our CRM, and does not send it to any debt, tax, or business debt provider.

7. Consent records and TrustedForm

To document the consents you give, our forms use TrustedForm, a service from ActiveProspect that creates a certificate recording the page you were on, the text you saw, and how you interacted with the form. We keep the certificate identifier with your request and may share it with the provider you chose, as proof of consent.

8. Cookies, pixels, and analytics

• Essential: a session-only store in your browser that keeps your form answers as you move between steps. It is cleared when your request is submitted or your tab closes.
• Bot protection: Cloudflare Turnstile, which runs invisibly on form submission.
• Advertising measurement: the Meta Pixel and Meta's Conversions API. Standard events (page views, and connection events when you choose a provider) are sent with hashed identifiers so Meta can match them to its users. Manage these through your Meta ad settings, browser settings, or the opt-out in section 13.
• Call tracking: Ringba may swap the phone number shown on your results page so calls can be tied to your request.

We honor the Global Privacy Control signal as an opt-out of sale/sharing where required by law. [Confirm implementation before launch.]

9. Security

All pages and form submissions use HTTPS. Personal information is stored with access controls, and staff access to contact details is logged. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Retention

We keep your request record, consent records, and communications for 24 months from your last activity, then remove or anonymize personal identifiers (name, contact details, address, date of birth, message content) while keeping non-identifying statistics. Consent records may be kept longer where a law or provider agreement requires it. [Confirm period with counsel and provider agreements.]

11. Your choices

• Calls and texts: reply STOP to any text to stop texts; tell any caller you do not wish to be called; or use the form in section 13. Providers you were connected with must be asked separately, though we will pass your request along where we can.
• Email: use the unsubscribe link in any marketing email.
• Access, correction, deletion: see sections 12 and 14.

12. California privacy rights

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the rights below. We will not discriminate against you for exercising them.

• Right to know the categories and specific pieces of personal information we collected, the sources, our purposes, and the categories of third parties we disclosed it to.
• Right to delete personal information we collected from you, subject to exceptions (for example, records we must keep to document consent or comply with law).
• Right to correct inaccurate personal information.
• Right to opt out of sale and sharing — see section 13.
• Right to limit use of sensitive personal information. We use your Social Security number only to pass it to the loan marketplace you requested, and we use financial information only to provide the matching service you asked for.

Categories of personal information (last 12 months)

To exercise these rights, use the form in section 13, email [privacy@mannahfinancial.com], or call [toll-free number]. We will verify your identity by matching the details you provide to our records. An authorized agent may submit a request with your written permission. We respond within 45 days, extendable once by 45 days.

Financial incentive notice: we do not offer financial incentives in exchange for personal information. Shine the Light: California Civil Code §1798.83 requests may be sent to the contact in section 17.

13. Do Not Sell or Share My Personal Information

Submit this form to opt out of sale and sharing, and to be placed on our internal do-not-contact list. We will stop connecting you with providers and stop marketing communications. We will also stop sending your information to advertising platforms for measurement. This does not withdraw consent you already gave directly to a provider — contact them separately.

14. Other state privacy rights

Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws may have rights to access, correct, delete, and obtain a copy of their personal information and to opt out of targeted advertising, sale, and certain profiling. Use the contact methods in section 12. If we deny a request, you may appeal by replying to our decision; we will respond to appeals within the period your state law requires. [Counsel to confirm applicability thresholds.]

15. Children

Our services are for adults 18 and older. We do not knowingly collect information from anyone under 18.

16. Changes to this policy

We will post any changes here with a new effective date. Material changes will be highlighted on this page for 30 days.

17. Contact us

Mannah Financial [legal entity name]
[street address, city, state ZIP]
Email: [privacy@mannahfinancial.com] · Phone: [toll-free number]