Privacy Policy · v2.4

Privacy Policy

Last updated · July 27, 2026

  1. 01

    Data we collect

    We collect the information you provide when applying for a product — identity, contact, employment, and financial data — and information generated by your use of our site, including device, log, and cookie data. Sensitive data (SSN, income verification, banking details) is collected only when required to underwrite a specific request you initiate.

  2. 02

    How we use it

    Application data is used to underwrite requests, service accounts, prevent fraud, comply with federal and state legal obligations, and improve our products. Aggregate, de-identified data may be used for model training and portfolio reporting. We do not sell personal information, and we do not use your data for advertising outside our own products.

  3. 03

    Who we share with

    We share data with credit bureaus (Experian, Equifax, TransUnion), our funding partners, regulated service providers (KYC, ID verification, payment processors), and government regulators when legally required. Every third party is bound by contractual data-handling standards at least as strict as our own.

  4. 04

    Retention

    Application data is retained per federal recordkeeping requirements — typically a minimum of 25 months from application date, or the life of the loan plus 3 years for funded requests. Marketing preferences and non-financial account data can be deleted on request.

  5. 05

    Security controls

    AES-256 encryption at rest, TLS 1.3 in transit, SOC 2 Type II controls, quarterly third-party penetration testing, and mandatory MFA on every internal account with access to customer data. Incidents affecting your data are disclosed within 72 hours of discovery.

  6. 06

    Cookies & tracking

    We use first-party session cookies to keep you signed in and analytics cookies to measure product performance. We do not use third-party advertising trackers, session replay tools, or cross-site fingerprinting. You can disable non-essential cookies at any time from the site footer.

  7. 07

    Your rights

    You can request access to, correction of, or deletion of your personal data by contacting privacy@advanceamerica.com. California, Virginia, Colorado, and Connecticut residents have additional statutory rights under CCPA, VCDPA, CPA, and CTDPA — we honor every jurisdiction's controls without geographic gating.

  8. 08

    Children's data

    Advance America products are only available to applicants 18 years or older. We do not knowingly collect data from minors. If we discover a minor has submitted data, that data is deleted within one business day.

  9. 09

    Changes to this policy

    Material changes are communicated via email to all active customers at least 30 days before taking effect. The version number and last-updated date at the top of this page reflect the most recent revision.

  10. 10

    Contact

    Data protection inquiries: privacy@advanceamerica.com. Postal: Advance America Privacy Office, 135 N. Church Street, Spartanburg, SC 29306.