This policy explains what Sterlo collects, why, and the choices you have. It covers this website, the Sterlo application used by funding companies ("customers"), and the application and signing pages customers share with business owners and brokers.
For our customers' deal data we act as a service provider. When a funder uses Sterlo, the applications, bank statements, contracts and payment records they upload or receive belong to that funder. We process them only to provide the service, keep each company's data separate from every other company's, and do not sell it, share it between customers, or use it to train models for anyone else. If you applied for funding through a funder's link, that funder is responsible for your data — contact them first.
For this website and customer accounts we decide how data is used, as described below.
Essential first-party cookies keep you signed in and remember your cookie choice (uw_consent,
one year). Third-party analytics or marketing tags, if we use them, load only after you click Accept on the
banner; the site works fully if you decline. You can change your choice any time with "Cookie settings" in the
site footer.
| Purpose | Provider type |
|---|---|
| Hosting and database | Cloud hosting provider |
| Payments and subscriptions | Payment processor |
| AI-assisted features (risk read, business verification, chat intake) | AI model provider; data is sent only for the request and not used to train its models |
| Email sending and inbound forwarding | Email providers |
| Bank connections and lien searches, when a customer turns them on | Bank-data and public-records providers |
| Sign-in with Google, when used | Identity provider |
| Analytics, only after consent | Analytics provider |
Each processes data only to provide its service to us. We may also disclose information when required by law or to protect rights and safety.
Customer deal data is kept while the customer's account is active and deleted on request or after the account closes, except where the customer or the law requires longer retention. Logs are kept for a limited period for security.
Data is encrypted in transit, company data is isolated at the database layer, stored credentials for connected services are encrypted, and API keys are stored only as hashes. No system is perfectly secure; tell us right away if you suspect a problem.
You can ask to access, correct or delete personal information we hold about you, and decline analytics cookies at any time. Depending on where you live (for example California), you may have additional rights; we don't sell personal information or share it for cross-context advertising. If your data reached us through a funder, we'll pass your request to them.
Sterlo is a business service and isn't directed to children.
We'll post changes here and update the date above; material changes are announced to customers in advance.
Questions or requests: joe@appfundingbeta.com.