Privacy Policy - GoSBA Loans

Last Updated: May 12, 2026

GoSBA, LLC (“GoSBA,” “we,” “us,” or “our”) is committed to protecting the privacy and security of the personal and financial information you provide during the SBA loan brokerage process. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website gosbaloans.com (the “Website”) or engage with our loan brokerage services (the “Services”).

Important: GoSBA, LLC is an independent commercial loan brokerage firm. We are not a bank, credit union, direct lender, or financial institution. We do not underwrite, originate, or fund loans. We facilitate introductions between borrowers and SBA-participating lenders. We are not an agent, representative, or affiliate of the U.S. Small Business Administration (SBA).

Information We Collect
How We Use Your Information
How We Share Your Information
We Do Not Sell Your Personal Information
Cookies and Tracking Technologies
Data Security
Data Retention
Your Privacy Rights
California Privacy Rights (CCPA/CPRA)
Other U.S. State Privacy Rights
Children’s Privacy
Third-Party Links
Updates to This Policy
Contact Us

1. Information We Collect

We collect information that you voluntarily provide to us and information that is collected automatically when you use our Website or Services.

Information You Provide Directly

When you contact us, submit an inquiry form, schedule a consultation, or engage our brokerage services, we may collect:

Personal Identifiers: Full name, email address, phone number, mailing address.
Financial Information: Business revenue, profit and loss data, tax returns, personal financial statements, credit score ranges, bank statements, existing debt obligations, and other financial documents necessary for SBA loan packaging.
Business Information: Business name, entity type, industry, NAICS code, years in operation, number of employees, business address, ownership structure, and acquisition details (e.g., purchase price, deal structure, seller note terms).
Government-Issued Identifiers: Social Security Number (SSN), Employer Identification Number (EIN), and state-issued identification — collected only when required for loan packaging and lender submission.
Professional Background: Resume, employment history, management experience, and industry qualifications relevant to SBA borrower eligibility.
Communication Records: Emails, call notes, text messages, and other correspondence exchanged during the loan brokerage process.

Information Collected Automatically

When you visit our Website, we may automatically collect:

Device and Browser Data: IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
Usage Data: Pages visited, time spent on pages, referring URLs, click patterns, and navigation paths.
Cookies and Tracking Data: Information collected through cookies, pixels, web beacons, and similar technologies (see Section 5).
Location Data: Approximate geographic location derived from your IP address.

Information from Third-Party Sources

In connection with our brokerage services, we may receive information from:

SBA Lenders: Feedback on loan applications, term sheet details, underwriting questions, and approval/denial decisions.
Business Brokers and Sellers: Confidential Information Memoranda (CIMs), listing details, Letters of Intent (LOIs), and seller-provided financial data.
Third-Party Service Providers: Quality of Earnings (QoE) reports, business appraisals, environmental assessments, and other due diligence materials.
Public Sources: Publicly available business registration data, SBA FOIA loan data, and other government records.

2. How We Use Your Information

We use the information we collect for the following purposes:

Loan Brokerage Services: To evaluate your financing needs, package your loan application, match you with suitable SBA lenders, and facilitate the loan process from LOI to closing.
Lender Communication: To submit your deal package to prospective SBA lenders in our network, respond to underwriter questions on your behalf, and coordinate term sheet negotiations.
Deal Structuring: To analyze your financial profile and advise on deal structures, equity injection strategies, seller note arrangements, and other SBA-compliant financing options.
Client Communication: To respond to your inquiries, provide status updates, schedule consultations, and send service-related notifications.
Free Deliverables: To prepare business plans, financial projections, and loan summaries as part of our complimentary brokerage service.
Website Operations: To operate, maintain, and improve our Website, ensure security, and analyze usage patterns.
Marketing (with consent): To send newsletters, SBA market updates, deal insights, and information about our services. You may opt out at any time.
Legal Compliance: To comply with applicable laws, regulations, and legal processes, including SBA program requirements and state licensing obligations.
Fraud Prevention: To detect, prevent, and investigate fraudulent or illegal activity.

3. How We Share Your Information

We share your information only as necessary to provide our brokerage services or as required by law. We do not share your information for unrelated third-party marketing purposes.

SBA Lenders

The core function of our brokerage service is to present your deal to SBA-participating lenders in our network. When we submit your loan package, lenders receive personal, financial, and business information necessary for their underwriting review. By engaging our services, you authorize us to share your information with prospective lenders for the purpose of obtaining financing. The lenders who receive your information are bound by their own privacy policies, the Gramm-Leach-Bliley Act (GLBA), and applicable SBA program rules.

Service Providers

We may share information with trusted third-party vendors who assist us in operating our business, including:

Website hosting and analytics providers
Customer relationship management (CRM) platforms
Email and communication service providers
Cloud storage and document management services
Scheduling and calendar tools

These providers are contractually obligated to use your information only as directed by us and to maintain appropriate security safeguards.

Professional Advisors

With your knowledge and at your direction, we may share relevant deal information with business brokers, attorneys, CPAs, Quality of Earnings providers, appraisers, and other professionals involved in your transaction.

Legal and Regulatory Disclosures

We may disclose your information when required to comply with applicable law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of GoSBA, our clients, or the public.

Business Transfers

If GoSBA is involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

4. We Do Not Sell Your Personal Information

GoSBA does not sell your personal information for monetary consideration. We do not sell or share your Social Security Number, financial account numbers, tax returns, or other sensitive personal information with data brokers, advertisers, or any unrelated third parties.

The sharing of your loan application data with SBA lenders is done solely to fulfill our brokerage services at your request — not for the lenders’ independent marketing purposes. This activity is not a “sale” of personal information as defined by the California Consumer Privacy Act (CCPA) or other state privacy laws.

We do not engage in cross-context behavioral advertising using your sensitive financial information. Any use of cookies or analytics on our Website for advertising purposes is limited to non-sensitive browsing data (see Section 5).

5. Cookies and Tracking Technologies

Our Website uses cookies and similar technologies to improve your experience and analyze site performance.

Types of Cookies We Use

Category	Purpose	Duration
Essential	Required for the Website to function (e.g., form submissions, security).	Session or up to 12 months
Analytics	Help us understand how visitors interact with our Website (e.g., Google Analytics). Data is aggregated and anonymized where possible.	Up to 24 months
Functional	Remember your preferences and settings to enhance your experience.	Up to 12 months
Marketing	Used to deliver relevant content and measure the effectiveness of our marketing campaigns (e.g., Facebook Pixel, Google Ads).	Up to 24 months

Your Cookie Choices

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Website. You can also opt out of interest-based advertising through:

Do-Not-Track and Global Privacy Control

There is no uniform standard for Do-Not-Track (“DNT”) signals. Where required by applicable law, we recognize and process valid Global Privacy Control (“GPC”) signals as requests to opt out of any “sale” or “sharing” of your personal information for targeted advertising purposes for the browser or device sending the signal. For more information, visit globalprivacycontrol.org.

6. Data Security

We take the security of your personal and financial information seriously and have implemented appropriate technical and organizational safeguards, including:

Encryption: Data transmitted through our Website is protected using SSL/TLS encryption (256-bit). Sensitive documents are encrypted at rest within our cloud storage systems.
Access Controls: Access to borrower files is limited to authorized GoSBA team members on a need-to-know basis. We use multi-factor authentication on all internal systems.
Secure File Sharing: Loan documents and financial records are shared with lenders through secure, password-protected channels — never via unencrypted email attachments.
Vendor Security: Our third-party service providers are vetted for their security practices and are contractually required to maintain appropriate safeguards.
Employee Training: Our team members are trained on data privacy and security best practices.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly notifying affected parties in the event of a data breach as required by applicable law.

7. Data Retention

We retain your personal and business information only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable law.

Information Type	Retention Period
Active client loan files (closed deals)	Duration of engagement plus 5 years after closing
Declined or withdrawn deal files	90 days from date of decline or withdrawal, then permanently deleted
SBA Form 159 and referral fee records	7 years (tax and regulatory compliance)
Email and communication records (closed deals)	Up to 3 years after closing
Email and communication records (declined/withdrawn deals)	90 days from date of decline or withdrawal, deleted alongside the deal file
Marketing contact information	Until you opt out or unsubscribe, or 3 years of inactivity
Website analytics and cookie data	Up to 24 months
Inquiry form submissions (non-clients)	Up to 2 years

Automatic Deletion for Deals That Do Not Close

We believe your sensitive data should not sit in our systems longer than necessary. If a deal is declined by all lenders, withdrawn by you, or otherwise does not proceed to closing, we automatically initiate deletion of your complete deal file — including tax returns, financial statements, personal financial statements, and all supporting documents — within 90 days of the final disposition. Associated email and communication records are deleted on the same schedule.

You do not need to request this — it happens automatically. However, if you would like your information deleted sooner, you may request immediate deletion at any time by contacting us at [email protected] or calling 1-855-381-6448. We will confirm deletion in writing within 10 business days.

When your information is no longer needed, we will securely delete or anonymize it. If deletion is not immediately possible (e.g., data stored in backup archives), we will isolate it from further processing and delete it as soon as practicable.

8. Your Privacy Rights

Depending on your state of residence, you may have the following rights regarding your personal information:

Right to Know / Access: Request to know what personal information we have collected about you, the sources, purposes, and third parties with whom we shared it. You may also request a copy of the specific data we hold.
Right to Correction: Request that we correct inaccurate personal information.
Right to Deletion: Request that we delete your personal information, subject to certain legal exceptions (e.g., to comply with regulatory retention requirements, complete a transaction, or detect fraud).
Right to Data Portability: Request a copy of your information in a portable, machine-readable format where technically feasible.
Right to Opt Out: Opt out of any “sale” or “sharing” of your personal information, or the use of your information for targeted advertising.
Right to Non-Discrimination: We will not deny services, charge different prices, or provide a different level of quality because you exercised any privacy right.

How to Exercise Your Rights

To submit a privacy rights request, you may:

Email: [email protected]
Use the subject line “Privacy Rights Request” and include your full name, email address, state of residence, and the specific right(s) you wish to exercise.

Mail: GoSBA, LLC — Attn: Privacy Request
3333 La Cienega Blvd #4003, Los Angeles, CA 90016

Phone: 1-855-381-6448

Verification

To protect your privacy, we will verify your identity before fulfilling your request. This may include confirming information that matches our records or requesting additional identification for sensitive requests.

Response Time

We will acknowledge your request within 10 business days and provide a substantive response within 45 days. If additional time is needed for complex requests, we will notify you and may extend the response period by an additional 45 days.

Authorized Agents

You may designate an authorized agent to submit a request on your behalf. Authorized agents must provide proof of authority (e.g., a signed letter or power of attorney), and we may require the consumer to verify their identity directly.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

In addition to the rights described in Section 8, California residents have the right to:

Limit Use of Sensitive Personal Information: Request that we limit our use and disclosure of your sensitive personal information (such as SSN and financial account data) to purposes that are necessary to perform our services. GoSBA already limits the use of sensitive information to these permitted purposes.
Know About Automated Decision-Making: We do not use automated decision-making technology to make material decisions about your loan eligibility. All deal assessments involve human review by our team.

California 12-Month Disclosure

In the preceding 12 months:

Categories Collected: Personal Identifiers, Government-Issued Identifiers, Financial Information, Business/Commercial Information, Internet/Network Activity, Professional Information.
Categories Disclosed for Business Purposes: Personal Identifiers, Financial Information, and Business Information — disclosed to SBA lenders, service providers, and professional advisors as described in Section 3.
Categories Sold or Shared: None. We do not sell personal information. Website browsing data (IP address, device identifiers, browsing behavior) may be disclosed to analytics and advertising partners through cookies in ways that could constitute “sharing” under CCPA — you may opt out as described in Section 5.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

10. Other U.S. State Privacy Rights

Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with comprehensive privacy laws may have similar rights to those described in Sections 8 and 9, including the right to access, correct, delete, and opt out of targeted advertising.

To exercise your rights under any applicable state law, please contact us using the methods described in Section 8. If we deny your request, you may appeal by emailing [email protected] with the subject line “Privacy Rights Appeal.” We will respond to your appeal within the timeframe required by your state’s law. If your appeal is denied, you may have the right to file a complaint with your state attorney general.

11. Children’s Privacy

Our Website and Services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we learn that we have inadvertently collected information from a person under 18, we will take prompt steps to delete it. If you believe we have collected information from a minor, please contact us at [email protected].

12. Third-Party Links

Our Website may contain links to third-party websites, including SBA lender websites, business broker platforms, service provider sites, and educational resources. This Privacy Policy applies only to GoSBA’s Website and Services. We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any external site before providing personal information.

13. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or regulatory requirements. The updated version will be indicated by the “Last Updated” date at the top of this page. We encourage you to review this page periodically. For material changes, we will make reasonable efforts to provide notice through our Website or by email.

14. Contact Us

If you have any questions about this Privacy Policy, how your information is handled, or wish to exercise any of your privacy rights, please contact us:

GoSBA, LLC

Email: [email protected]