Privacy Policy

Last Updated and Effective Date: October 12, 2026

Version: 2026-10-12

1. Scope and responsibility

This Privacy Policy describes how OnPurpose Real Estate Solutions LLC, a Georgia limited liability company (OnPurpose, we, us or our), handles information in connection with our websites and services. It covers onpurposerealestate.com and the funding, re, commercial, businesscreditandfunding, bf, bc, partner and onpurposeai subdomains, including their shared inquiry and intake forms, appointments, support, CRM records and relevant checkout experiences.

Our services include real estate investment funding, business funding, the OnPurpose Business Credit & Fundability Program, OnPurpose AI and automation services, partner relationships and Proof of Funds coordination. Independent lenders, closing participants and other providers have their own responsibilities and notices. When we configure or manage a business customer's systems, we handle its customer information for the contracted service and under applicable instructions; that business is responsible for its own customer notices and permissions, without displacing our legal duties.

This Policy explains information practices. Visiting a website or submitting an inquiry is not, by itself, consent to marketing, a credit inquiry, call recording, payment, or an executed service or partner agreement. Separate authorizations apply where required.

2. Information we receive and its sources

Information you or an authorized representative provide can include names, contact details, business and entity information, service selections, property and financing scenarios, application information, transaction references, appointment details, support requests, messages and communication preferences. Financing and transaction records can include income, assets, liabilities, bank and credit information, identity records and signed documents when relevant to the requested service and lawfully provided.

Partner administration includes proposed and approved classifications, jurisdiction and eligibility information, referral submission and acceptance records, agreement versions, signatures, and transaction-specific compensation, payment verification, holds and adjustments. AI project onboarding includes business content, FAQs, scheduling rules, project requirements, approved knowledge materials and authorized account-access arrangements. Do not put passwords, private API keys or other secrets in ordinary questionnaires, chat or general inquiry forms.

Our forms, CRM, document and communication tools record submissions, contact and opportunity activity, document status, timestamps and available source or attribution information. Website hosting, chat, security and diagnostic tools process technical information such as IP address, browser or device information, page interactions and service errors. Relevant information can also come from authorized referral partners, lenders, closing or escrow participants, payment processors and other providers involved in your requested service. Access to a credit report or another restricted record requires the appropriate legal basis and any required authorization.

3. How information is used

We use relevant information to respond to requests; identify and route services; review and coordinate financing inquiries; schedule consultations; deliver agreed services; administer projects and documents; maintain contract and permission records; process or reconcile authorized payments; support customers; review referrals and commissions; investigate suspected misuse; resolve disputes; and meet applicable legal, accounting and recordkeeping obligations.

One person may have multiple loans, service purchases or AI projects. Contact information and transaction records are used to associate each submission or payment with the relevant matter. An ambiguous match requires review; a form submission or CRM stage alone does not establish funding approval, payment receipt or commission eligibility. Referral status does not authorize unrestricted access to a customer's confidential records.

4. CRM, automation, chat and communications

We use GoHighLevel/LeadConnector technology for our websites, forms, CRM, calendars, workflows, documents and communications. Those tools and their connected service providers process information needed to operate the features you use. Automated workflow steps can route submissions, create review tasks, send permitted messages and track activity. Administrative automation does not itself make a final lending or partner-eligibility decision.

Information submitted through a chat or messaging feature becomes part of the related service or communication record. Where a service uses AI-assisted responses, voice or transcription, the relevant feature can process the information supplied to it and the approved business knowledge used for that service. AI responses can be inaccurate; request human assistance for important questions. Do not provide sensitive identity, financial or credential information in a general chat. A configured feature is not necessarily active for every customer or website.

Calls or conversations that are recorded or transcribed require the notices and permissions applicable to the particular communication and jurisdictions. This Policy is not recording consent. Contact us if you need a human response or want to ask about the handling of a particular conversation.

5. Communication choices

You can use the unsubscribe link in marketing email, reply STOP to supported text messages, or contact us at [email protected] or 602-497-4682 to request a change in communication preferences. Message and data rates may apply. Include the email address or phone number and the channel affected so the request can be applied correctly. Marketing permissions are separate from an ordinary inquiry or privacy acknowledgment.

We distinguish marketing from communications needed to address a request, administer an existing service, or provide legally required information. This distinction does not override an applicable opt-out or authorize otherwise prohibited automated calls or messages. A partner supplying a person's contact details does not, by itself, establish that person's marketing consent.

6. Payments and financial tracking

Real estate and business funding fees are generally handled through external lenders, closing offices, title companies, escrow arrangements or other authorized payment channels. Our CRM records can contain receipt evidence, amounts, transaction references and reconciliation information even when the payment is not processed through our website.

Authorized AI purchases, Proof of Funds orders and other enabled offers can use a GHL-connected checkout and payment provider. Relevant records include billing details, purchase amounts, payment status, refunds, disputes and transaction references. The specific checkout and purchase agreement identify the actual payment arrangement. Optional third-party credit monitoring is paid directly to its provider and is not required merely to request funding assistance. Preparation of a product or price does not establish that billing or fulfillment is active.

Enter payment information only through the designated payment process. Do not place full card numbers, banking credentials or unnecessary financial documents in general contact forms, chat, email or CRM notes.

7. Information disclosure and provider responsibilities

In connection with your requested service, relevant information may be provided to lenders, financing sources, title or escrow companies and other closing participants; technology, hosting, CRM, communications, payment, business-platform and fulfillment providers; authorized representatives acting for you; and professional advisers or authorities where appropriate and lawful. Disclosures remain subject to the purpose of the service, applicable authorization, confidentiality duties and legal restrictions. A lawful business transfer is subject to any required notice, consent and protection of existing information.

OnPurpose branding does not change the identity or responsibilities of an actual contracting party, lender, processor or service provider. Where a transaction or applicable law requires a named recipient or separate notice, that disclosure must be provided through the relevant process. Provider policies govern their independent processing and do not eliminate our responsibilities for information we handle.

Partner reporting is for accepted-referral attribution and compensation administration. It does not grant partners access to complete credit reports, identity documents, bank statements or unrelated customer transactions. A general referral relationship is not permission to sell or redistribute customer information or communication-consent records.

8. Cookies, attribution and privacy choices

Our sites use hosted website and embedded communication technology, together with security and diagnostic resources. Cookies or similar technologies can support page functionality, sessions, submission and source attribution, and measurement of interactions. For example, the current Privacy page uses LeadConnector website/chat resources and a Cloudflare diagnostic resource. Different pages and embedded tools can process different technical information.

Browser settings can restrict or remove cookies, although doing so can affect forms, scheduling, chat or other functionality. Cookie settings alone do not necessarily exercise every applicable privacy right. Advertising, lead-generation or referral activity must respect applicable disclosure, permission and opt-out requirements; this Policy is not blanket permission to use sensitive financial information for advertising or to disregard privacy choices.

Contact us using the methods below to ask about a particular tool or to submit an applicable objection or opt-out of sale, sharing or targeted advertising. Where applicable law requires an additional method or recognition of a preference signal, that requirement is not waived by this Policy. We do not represent that a universal browser preference-signal implementation or a comprehensive privacy-compliance certification has been verified across every feature.

9. Sensitive records, security and incidents

Identity documents, Social Security information, credit reports, financial statements and bank records require handling appropriate to their sensitivity and the particular transaction. Before sending these records, ask for the authorized transaction-specific collection method. Do not send unnecessary sensitive attachments through routine SMS, general email, chat, support tickets or general inquiry forms. The existence of an upload field is not a representation that every category of sensitive document is appropriate for that channel.

Security responsibilities depend on the information, service, account permissions and applicable requirements. No transmission or storage method provides absolute security. This Policy does not claim a particular encryption implementation, independent security audit, certification, guaranteed prevention of unauthorized access, or blanket GDPR, GLBA or CCPA compliance. These qualifications do not limit any mandatory duty to safeguard information. Report suspected unauthorized access or a misdirected document to [email protected] or 602-497-4682 without resending the sensitive record. Required incident notifications are governed by applicable law and contractual duties.

10. Retention, deletion and processing locations

Retention needs vary by record and can include providing a service, maintaining transaction and accounting evidence, preserving consent and executed agreements, resolving disputes, complying with legal obligations and applying lawful holds. No single fixed retention period is stated for all records. Contact us about a particular record or a deletion request. Legal duties, identity verification where permitted, pending disputes and other lawful exceptions can affect deletion; immediate removal of every provider backup is not promised.

Information can be accessed or processed in the United States and other locations used by authorized personnel and service providers. We do not represent that all storage or access is exclusively within the United States. Website use alone is not treated as consent to an international transfer where another legal basis or safeguard is required. Any applicable international or jurisdiction-specific obligations remain in effect.

11. Privacy requests and applicable rights

Contact [email protected] or 602-497-4682 with a description of your request and a way to respond. You can request information about processing, seek access or correction, request deletion or a copy, withdraw consent, or exercise applicable rights concerning sensitive information, sale, sharing or targeted advertising. The rights available and any exceptions depend on the applicable law and our role. We will not unlawfully discriminate for exercising a protected right.

We may request proportionate information to verify identity or an authorized representative where permitted. Do not include full Social Security numbers, bank records, passwords or identity-document attachments in the initial request. We will explain any additional verification needed, applicable exception or denial as required. If you disagree with a response, reply to the designated email with “Privacy Request Appeal” and the request reference for review; applicable legal response periods and further complaint rights remain available. This process does not impose verification on an opt-out where law prohibits it.

12. Children and third-party destinations

Our services are directed to adults and authorized business representatives, not children. Please contact us if a child has submitted information so the circumstances and appropriate lawful response can be reviewed. Do not provide children's information unless an expressly authorized service and lawful process require it.

Links and independently operated lender, payment, monitoring or other service destinations can have separate privacy terms. Review those notices before submitting information. Our own duties continue to apply to information we disclose or otherwise handle.

13. Changes, contact and related documents

Revisions show their effective date on this page. Changes to contractual program terms remain subject to the applicable agreement, including the approved requirement for at least 30 days' advance written notice where lawful and any additional required consent. Posting a revised privacy notice or continued website use alone does not authorize an incompatible use of previously collected information, retroactively change an executed agreement, or waive required notice or consent.

OnPurpose Real Estate Solutions LLC

Email: [email protected]

Phone: 602-497-4682

Business mailing address: 16220 N. Scottsdale Road, Suite 300, Scottsdale, Arizona 85254

Terms & Conditions: https://onpurposerealestate.com/terms

Accessibility assistance: https://onpurposerealestate.com/ada