1. Scope of this policy
SHORT LOANS NG LLC, a Missouri limited liability company with its principal office at 301 Westwood Ave, Columbia, MO 65203-2869, operates the Loans NG mobile application for iOS, the shortloansng.com website, and the loan-matching service that connects consumers with third-party lenders. In this policy we refer to that company as “we,” “us,” or “the company,” and to the application, website, and service together as “the app.” By downloading the app, opening the website, submitting an application, or otherwise interacting with the service, you confirm that you have read and accepted both this policy and our platform terms. The app is intended for adults aged eighteen or older, and only for use within the United States.
2. Laws that frame what we do
The information you give us is governed by a layered set of US laws. The Gramm-Leach-Bliley Act treats Social Security numbers, bank account information, income, and employment data as nonpublic personal financial information; we honor the special handling those rules require. The California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives California residents specific rights over how we use, share, and sell their information. The Fair Credit Reporting Act applies whenever a lender pulls a credit report in connection with your application. Federal Trade Commission rules and guidance, the CAN-SPAM Act, and the Telephone Consumer Protection Act govern marketing emails, calls, and text messages. State privacy laws — including those of Virginia, Colorado, Connecticut, Texas, and a growing number of other states — give residents of those states their own access, correction, deletion, and opt-out rights. Where laws apply differently to different categories of information, we follow the strictest rule that applies to the situation.
3. Information we collect
We collect information in three ways: information you give us directly through the app or the website, information that is generated automatically as you use the service, and information we receive from third parties.
The information you give us directly is the core of the app. To create your application profile we ask for your full legal name, your date of birth, your email address, your mobile phone number and any home phone number you choose to share, and your full residential address including street, city, state, and ZIP code. To verify your identity and to comply with the “know your customer” rules our lender partners follow, we collect your Social Security number or Individual Taxpayer Identification Number, and the number and issuing state of your driver’s license or other state-issued identification. To allow lenders to evaluate your application and to set up a possible disbursement or repayment, we collect your bank account number, your bank routing number, the name of your bank, the type of account you hold there, the name and phone number of your employer, your employment status and job title, your monthly or annual gross income, the source of that income, and the purpose for which you are requesting a loan or cash advance. If you write to support, we keep the contents of those messages and any documents you attach. If you use biometric authentication on your iOS device, the biometric data itself stays on your device and we do not see it.
The information that is generated automatically as you use the app includes technical signals such as your device type and model, your operating system version, the version of the app you are running, your IP address, the language settings on your device, your time zone, and diagnostic and crash data. It also includes usage signals — which screens you opened, which buttons you tapped, how long sessions lasted, and how you arrived at the app from advertising or referral sources. From your IP address and other device signals we derive an approximate location, which we use for fraud prevention, for state-eligibility checks, and for service improvement. On the website we use cookies, similar storage technologies, and analytics tags to keep you signed in, secure the site, and understand traffic.
The information we receive from third parties includes verification results from identity and fraud-prevention vendors, soft-pull credit results from credit bureaus or alternative data providers when permitted by law, status updates from lenders or financial partners after we have referred your application to them, and traffic information from the marketing or referral partners that introduced you to the app.
4. How we use it
We use the information described above to deliver the loan-matching service you signed up for, to verify who you are, to detect and prevent fraud, to package your application into a referable lead, and to share that lead with the third-party lenders and partners who may want to make you an offer. We use it to support transactions you initiate with a lender, to respond to your support requests, to send you transactional notifications about your application and your account, to send you marketing messages where you have separately consented, to comply with legal and regulatory obligations such as recordkeeping under financial-services laws, to enforce our platform terms, and to operate, secure, audit, and improve the app. We treat compensation we receive from lender partners as part of how we operate the service; that arrangement is described in section five.
5. Sale and sharing of personal information
This is the section that matters most. SHORT LOANS NG LLC sells personal information as that term is defined under the California Consumer Privacy Act and similar state laws. Specifically, we transfer the information you submit through the app to third-party lenders, financial institutions, marketing partners, data aggregators, and lead buyers, and we receive monetary compensation, referral fees, per-lead fees, marketing fees, revenue share, or other valuable consideration in exchange for that transfer. The categories of information we sell include your full legal name, your contact details, your residential address with ZIP, your Social Security number, your driver’s license number, your full bank account number, your bank routing number, the name of your bank, your employer’s name and phone number, your income, your employment status, your loan purpose, and the application metadata that travels with that data. The categories of recipients include licensed lenders that originate personal loans, installment loans, cash advances, or lines of credit; insurance and financial product providers; debt-relief and credit-counseling companies; marketing partners that may offer financial and non-financial products; and data aggregators that may further resell to other recipients. Once a recipient has your information, the recipient’s own privacy practices govern what they do with it, and we cannot recall data that has already been transferred.
Compensation we receive from a lender or partner may influence which lenders see your application first, the order in which their offers are displayed inside the app, and how prominently a particular lender’s offer is presented. Compensation does not change the substantive economic terms — APR, fees, schedule — that the lender itself sets under applicable law.
You can opt out of the future sale or sharing of your personal information at any time. To do so, send us an email at support@shortloansng.com with the subject line “Do Not Sell My Information,” or use the “Do Not Sell or Share My Personal Information” option that is available inside the app. We will process your opt-out within fifteen business days. Opting out stops future sales but does not delete information that has already been shared with a recipient, and it does not prevent us from sharing data we are required to share by law or that is necessary for a function you specifically asked us to perform.
6. Legal basis for processing
We rely on consent for activities that require it, including the sharing of your information with lenders and the sending of marketing communications; you can withdraw consent at any time, with the practical understanding that we cannot match you with lenders if you do not consent to share information with them. We rely on contractual necessity to operate the matching service you requested. We rely on legal obligations such as KYC, AML, and financial recordkeeping rules to keep certain records on file for the periods the law specifies. And we rely on our legitimate business interests in fraud prevention, system security, and product improvement, balanced against your privacy interests.
7. How long we keep data
We retain personal information only for as long as we need it for the purposes described in this policy and for as long as applicable law requires. A complete applicant profile — including name, date of birth, address, contact details, SSN, bank account information, income, and employment data — is retained for the duration of our business relationship with you and then for an additional five to seven years after your last activity, with longer retention if a regulator, an audit, a legal hold, or active litigation requires it. Records of leads we sold and the recipients who received them are retained for five to seven years to satisfy FTC recordkeeping expectations and to support possible dispute resolution. Records of marketing consents, email and SMS opt-ins, and campaign responses are retained for two to three years after your last interaction or until you opt out plus ninety days. Device and usage logs, including IP addresses, session data, and clickstream events, are retained for twelve to twenty-four months. Records of opt-out requests under the Do Not Sell or Share program are retained for at least five years to demonstrate compliance. Support communications are retained for three years after the ticket is closed. Where law requires longer retention than the periods above, the legal minimum applies.
8. Security
We protect personal information using a layered set of administrative, technical, and physical safeguards. Data in transit between your device and our servers is encrypted using TLS at version 1.2 or higher; sensitive fields such as your Social Security number, your full bank account number, and your routing number are encrypted at rest using AES-256. Access to systems that hold personal information is granted on a least-privilege, role-based basis, with mandatory multi-factor authentication for personnel. We monitor systems for anomalous activity, run periodic security audits, and contractually require security and confidentiality obligations of every vendor and lender partner that receives data from us. Despite these measures, no system can be guaranteed to be completely secure; if a security incident affects sensitive personal information, we will notify the people involved and the regulators that need to be told, in the manner and within the time periods that applicable law requires. Please protect your account credentials, do not share one-time passcodes, and write to support@shortloansng.com immediately if you suspect that someone has gained unauthorized access to your account.
9. Your rights
Depending on where you live, you may have the right to ask us to confirm whether we hold personal information about you and to provide you a copy in a portable form, the right to correct information that is inaccurate or incomplete, the right to ask us to delete information subject to legal exceptions such as recordkeeping requirements, the right to receive certain information in a structured machine-readable format, the right to opt out of the sale or sharing of your information for cross-context behavioral advertising, the right to limit our use of sensitive personal information beyond what is necessary to deliver the service, and the right not to be discriminated against for exercising any of these rights. Some of these rights do not apply to information that is governed by GLBA, FCRA, or other sectoral federal laws. To submit any of these requests, write to support@shortloansng.com with the subject line “Privacy Request” and tell us your full name, your state of residence, and what you want us to do. We may need to verify your identity before responding. We aim to respond within forty-five days for California-style requests and within thirty days for requests under other applicable state laws.
10. Marketing choices
If you receive marketing emails from us you can opt out at any time by clicking the unsubscribe link inside any of those emails or by writing to support@shortloansng.com; we process opt-outs within ten business days, consistent with the CAN-SPAM Act, and you will continue to receive transactional and service communications related to your account. If you have separately consented to receive marketing text messages, you can stop them at any time by replying STOP to any message; reply HELP for help; standard message and data rates may apply. Opting out of marketing SMS does not affect transactional messages such as one-time verification codes. Push notifications can be turned on or off through your iOS device settings. To opt out of marketing phone calls, write to support@shortloansng.com. As required by federal law, your consent to marketing calls or text messages is never a condition of applying for a loan, and opting out of marketing communications is a separate request from opting out of the sale of your data — you may need to do both.
11. California residents
If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act gives you the rights described in this section. You have the right to know what categories of personal information we have collected about you, the categories of sources from which we collected it, the business and commercial purposes for collecting it, the categories of third parties to whom we have disclosed or sold it, and, where technically feasible, the specific pieces of personal information we hold. You have the right to delete personal information we have collected from you, subject to the exceptions the CCPA permits, including for legal compliance and for completing transactions you initiated. You have the right to correct personal information we maintain about you that is inaccurate. You have the right to opt out of the sale or sharing of your personal information; we honor this request as described in section five, and we treat a Global Privacy Control signal received from a supported browser as a valid opt-out for cross-context behavioral advertising. You have the right to limit our use of sensitive personal information — including your Social Security number, your driver’s license number, and your bank account information — beyond the purposes that the CPRA permits without limitation. And you have the right not to be discriminated against for exercising any of these rights, although some features of the app naturally require us to process certain data and so cannot be offered without it. To submit a California request, write to support@shortloansng.com with the subject line “California Privacy Request” and provide your full name, your address in California, and a brief description of what you would like us to do; we will verify your identity and respond within forty-five days, with one extension where allowed by law. You may designate an authorized agent to submit a request on your behalf, subject to the verification rules under California regulations. As noted above, certain rights under the CCPA do not apply to information that is governed by GLBA or FCRA.
12. Other state privacy rights
Residents of Virginia under the Virginia Consumer Data Protection Act, Colorado under the Colorado Privacy Act, Connecticut under the Connecticut Data Privacy Act, Texas under the Texas Data Privacy and Security Act, Utah, Oregon, Montana, Iowa, Tennessee, and other states with comprehensive consumer privacy laws have rights that are similar to those granted under the CCPA, including rights of access, correction, deletion, portability, and opt-out of targeted advertising and the sale of personal data. To exercise these rights, please write to support@shortloansng.com and identify your state of residence and your specific request.
13. Do Not Track and Global Privacy Control
Web browsers have for years offered a “Do Not Track” signal that asks websites not to track a user’s online activity. Because there is still no agreed industry standard for what websites should do in response to that signal, we do not currently change our data practices when we receive it. We do, however, honor the Global Privacy Control signal where it is recognized by law — including for California residents under the CCPA and CPRA — by treating it as a valid opt-out of cross-context behavioral advertising and the sharing of personal information for that purpose.
14. GLBA and FCRA
Some of the information we collect — including your Social Security number, your bank account number and routing number, your income, and your employment data — is nonpublic personal financial information under the Gramm-Leach-Bliley Act. Where GLBA applies, we follow its safeguards, opt-out, and notice rules, and a separate GLBA initial privacy notice may be delivered to you and may govern that information for purposes that GLBA covers. If a lender within our network performs a credit pull on you in connection with your application, your rights under the Fair Credit Reporting Act apply to that pull, and the lender — not SHORT LOANS NG LLC — is responsible for any FCRA-required disclosures, including any adverse-action notice. Hard credit inquiries are never initiated by us; they happen only when a specific lender, with your express prior authorization, performs one as part of its underwriting.
15. Cookies and tracking technologies
On the website we use cookies and similar storage technologies for authentication, security, session management, preference storage, and analytics. Inside the app we use mobile SDKs and pixels for crash reporting, analytics, and fraud prevention; if these tools collect device-level identifiers in a way that constitutes tracking under Apple’s App Tracking Transparency framework, we ask for your permission through the iOS prompt before doing so, and you can change your decision at any time in your iOS settings. Disabling cookies, mobile SDKs, or App Tracking Transparency permission may limit some features of the app or the website.
16. Children
The app is intended for adults aged eighteen or older. We do not knowingly collect personal information from anyone under the age of eighteen, and we do not target the app at children. If we learn that we have collected information from someone under that age, we will delete it promptly. If you believe a minor has submitted information to the app, please write to support@shortloansng.com so we can investigate and remove it.
17. Users outside the United States
The app is designed for and directed at users in the United States, and the underlying technical infrastructure processes information in the United States. If you access the app from another country, you understand that your information will be transferred to and processed in the United States, where data-protection rules differ from those that may apply where you live, and by using the app you consent to that transfer and processing.
18. Updates to this policy
We may update this policy from time to time to reflect changes in our practices, our technologies, or applicable law. When we make material changes we will revise the effective date at the top of this page and provide additional notice through the app or by email, where required. Your continued use of the app after a revised policy becomes effective is your acceptance of it; if you do not agree, please stop using the app and feel free to ask us to delete your account.
19. How to reach us
Privacy questions, opt-out requests, and access or deletion requests should go to support@shortloansng.com. You can also reach us in writing at SHORT LOANS NG LLC, 301 Westwood Ave, Columbia, MO 65203-2869. We do not operate a customer service phone line; all support and legal correspondence goes through email or mail so we can keep an accurate written record of every request. Our platform terms are published at platform-terms.html and should be read together with this policy.