Privacy Policy

1. Who we are

This Privacy Notice is issued by AI Consulting Ventures ("we", "us", "our"), trading as MCA Broker Stack, the operator of mcabrokerstack.com and the MCA Broker Stack platform (the "Service"). AI Consulting Ventures is the data controller responsible for the personal information described below.

2. Information we collect and why

• Account data (name, email, password hash, organization, role) — to create and secure your account and provide the Service. Legal basis: contract.
• Application data submitted by merchants (business details, owner information, bank statements, identity documents) — to enable brokers to process funding applications. Legal basis: contract / legitimate interests.
• Communications (support messages, SMS/email content and metadata, call logs) — to respond to inquiries and operate messaging features. Legal basis: contract / consent (for marketing).
• Usage and device data (IP address, browser/device identifiers, pages viewed, telemetry, log data) — for security, fraud prevention, and product improvement. Legal basis: legitimate interests.
• Billing data — collected and processed by our reseller Paddle (see below); we receive only limited transaction metadata. Legal basis: contract / legal obligation.

3. How we share information

We share personal data only with:

• Service providers / subprocessors we rely on to run the Service — cloud hosting, database, email delivery, SMS delivery (e.g., Twilio), analytics, and customer support tooling.
• Paddle.com Market Limited, our Merchant of Record, who handles all sales, subscription management, payment processing, tax compliance, invoicing, and refunds on our behalf.
• Professional advisers (legal, accounting, auditors) under duties of confidentiality.
• Authorities where required by law, regulation, court order, or to protect our rights.

We do not sell your personal information. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes; SMS-related data sharing is limited to subcontractors supporting the messaging service and is prohibited for any other use.

4. Data retention

We retain personal data only as long as necessary for the purposes described above or as required by law (typically the life of your account plus up to 7 years for financial and tax records). When data is no longer needed it is deleted or anonymized.

5. Your rights

Subject to applicable law, you have the right to access, rectify, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent at any time. UK/EEA residents also have the right to lodge a complaint with their supervisory authority. To exercise any right, email support@mcabrokerstack.com. We will respond within one month.

6. International transfers

We may process and store data in the United States and other countries. Where data is transferred from the UK/EEA we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

7. Security

We use appropriate technical and organizational measures — including encryption in transit, access controls, least-privilege permissions, and audit logging — to protect personal data. No system is perfectly secure; please notify us immediately of any suspected compromise.

8. Cookies

We use strictly necessary cookies for authentication and security, and limited analytics cookies to improve the Service. You can manage cookies in your browser settings.

9. Contact

AI Consulting Ventures (MCA Broker Stack) — questions about this policy: support@mcabrokerstack.com.