Privacy Policy

1. Introduction

This Privacy Policy describes how Monetra, Inc. ("Company," "we," "our," or "us"), a California finance lender corporation, collects, uses, discloses, and safeguards your personal information when you visit our website (the "Site"). Please read this policy carefully. If you do not agree with its terms, please discontinue use of the Site.

We are committed to protecting your privacy and complying with applicable privacy laws, including the California Consumer Privacy Act ("CCPA") as amended by the California Privacy Rights Act ("CPRA"), and the General Data Protection Regulation ("GDPR") where applicable.

2. Information We Collect

2.1 Information You Provide Voluntarily

We collect personal information that you voluntarily provide to us through the Contact form on our Site. The categories of personal information we collect include:

• First name and last name
• Phone number
• City of residence or business
• Business name
• Time in business

We do not collect any sensitive personal information, financial account data, or payment card information through our Site.

2.2 Information Collected Automatically

Our Site does not currently use cookies, tracking pixels, web beacons, or third-party analytics tools (such as Google Analytics). We do not engage in automated data collection through such technologies at this time. If this changes in the future, this Privacy Policy will be updated accordingly and we will provide any required notices or obtain required consents.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• To respond to your inquiries and communications submitted through the Contact form
• To evaluate your interest in our lending products and services
• To communicate with you about financing options that may be relevant to your business
• To comply with applicable legal and regulatory obligations
• To maintain the security, integrity, and proper operation of our Site
• To improve our Site and business operations

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area ("EEA") or the United Kingdom, we process your personal data under the following legal bases:

• Consent: Where you have given us clear consent to process your personal data for a specific purpose.
• Legitimate Interests: Where it is necessary for our legitimate interests in operating our business and providing our services, and those interests are not overridden by your data protection rights.
• Legal Obligation: Where processing is necessary to comply with a legal obligation.

5. Disclosure of Your Information

5.1 Service Providers

We may share your personal information with third-party vendors and service providers who perform services on our behalf, including our website hosting provider. Our Site is hosted through Webflow, which utilizes Amazon Web Services ("AWS") infrastructure. These third parties are contractually required to handle your information in a manner consistent with this Privacy Policy and applicable law.

5.2 Legal Requirements

We may disclose your personal information if required to do so by law, regulation, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to: (a) comply with a legal obligation; (b) protect and defend our rights or property; (c) prevent or investigate possible wrongdoing in connection with the Site; or (d) protect the personal safety of users of the Site or the public.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

5.4 No Sale of Personal Information

We do not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration. This applies to the definition of "sale" under the CCPA/CPRA, including sharing personal information for cross-context behavioral advertising.

6. Data Storage and Security

Your personal information is stored on Webflow's platform, which is hosted on Amazon Web Services (AWS) servers. We and our service providers have implemented the following security measures to protect your information:

• SSL/TLS encryption (HTTPS) for all data transmitted through the Site
• Encryption of stored data
• Two-factor authentication (2FA) for account access
• Protection against Distributed Denial-of-Service (DDoS) attacks
• Daily backups of Site data
• Continuous system monitoring
• ISO-aligned security practices and standards

Webflow is designed to support compliance with GDPR and CCPA requirements. Notwithstanding these measures, no method of transmission over the Internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, and applicable legal requirements.

8. Your Privacy Rights

8.1 California Residents — CCPA/CPRA Rights

If you are a California resident, you have the following rights under the CCPA/CPRA:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: We do not sell or share personal information for cross-context behavioral advertising. No opt-out action is required, but you may submit a request for confirmation.
• Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined under the CPRA.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise your California privacy rights, please contact us using the information in Section 11 below. We will respond to verifiable consumer requests within 45 days, with the possibility of a 45-day extension where reasonably necessary.

8.2 EEA and UK Residents — GDPR Rights

If you are located in the EEA or the United Kingdom, you have the following rights under the GDPR:

• Right of Access: The right to obtain confirmation of whether we process your personal data and to receive a copy of it.
• Right to Rectification: The right to have inaccurate personal data corrected or incomplete data completed.
• Right to Erasure ("Right to be Forgotten"): The right to request deletion of your personal data under certain circumstances.
• Right to Restriction of Processing: The right to request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Object: The right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, the right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise your GDPR rights, please contact us using the information in Section 11 below. We will respond to your request within 30 days.

9. Children's Privacy

Our Site is not directed to individuals under the age of 18, and we do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected personal information from a child under 18, we will take prompt steps to delete such information. If you believe we may have collected information from a minor, please contact us immediately.

10. Links to Third-Party Websites

Our Site may contain links to third-party websites that are not operated or controlled by us. This Privacy Policy does not apply to those third-party websites. We encourage you to review the privacy policies of any third-party sites you visit, as we have no control over and assume no responsibility for their content, privacy practices, or policies.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

For California residents, you may also submit requests by emailing the address above with the subject line "California Privacy Request."

12. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes, we will update the "Effective Date" at the top of this page. Your continued use of the Site following the posting of changes constitutes your acceptance of such changes. We encourage you to review this Privacy Policy periodically.