Security Policy

1. Our Commitment to Security

Excel Capital Funding LLC takes data security seriously. In this policy, “Excel Capital Funding,” “we,” “us,” and “our” mean Excel Capital Funding LLC. We use safeguards for our systems, staff, and offices. These safeguards help keep your data private, correct, and ready to use.

This policy covers our website and online platform. It also covers any business funding form you send us. We check our security steps often. We update them when threats, laws, or accepted standards change.

2. Data Encryption

We encrypt data as it moves between your browser and our site. We use Transport Layer Security (TLS) with 256-bit encryption. This helps stop others from reading data in transit. The data may include personal, business, or financial details.

Every page uses HTTPS. We send each HTTP request to its secure HTTPS page.

We use AES-256 to encrypt sensitive data stored by us. This includes financial files and data that can identify a person. We protect encryption keys with secure key management. We also rotate the keys on a set schedule.

3. Access Controls

We limit who can use your personal and financial data. A worker may use it only when the job requires it. Our controls include:

• •Role-based access control (RBAC) gives each worker only needed access.
• •Multi-factor authentication (MFA) protects every staff account with access to sensitive systems.
• •Each worker has a unique account. We do not allow shared accounts.
• •A session closes after a set time with no activity.
• •We check access often. We remove it at once when a worker leaves.
• •We log access to each system that holds sensitive customer data.

4. Network and Infrastructure Security

We use layers of protection against attacks and access without permission:

• •Firewalls and IDS/IPS inspect and filter network traffic.
• •Qualified security experts run regular scans and penetration tests.
• •A web application firewall (WAF) helps block SQL injection, cross-site scripting (XSS), and other common attacks.
• •We use DDoS protection to help keep the site available.
• •We separate sensitive systems from the general network.
• •Secure data centers use physical access controls, cameras, and systems that limit physical harm. We monitor these sites.

5. Secure Data Handling

We follow set steps to protect data from collection to disposal:

Collection: We collect only data needed to review and process your application. We do not collect personal data we do not need.

Storage: We keep data in secure, encrypted systems. We control and track access. We keep full Social Security numbers only as long as we need them to process the application.

Transmission: We use encrypted channels to send data to funding providers. We require them to use proper security controls.

Retention: We keep data only for reasons listed in our Privacy Policy. We also keep it when the law requires. When we no longer need data, we delete it or remove names and other identifiers.

Disposal: We shred paper files. We securely wipe digital data before we discard storage media.

6. Third-Party Security

We check the security of funding providers and service vendors. We do this when they receive your data. Our steps include:

• •Contracts require reasonable security controls.
• •We review each provider that handles sensitive customer data.
• •We share only the data needed for the stated purpose.
• •Our rules bar partners from selling or misusing shared data.

We cannot promise that a third party will always keep data safe. Even so, it must use proper safeguards to work with us.

7. Employee Training and Awareness

Our staff play a key role in our security program. We train them to protect customer data. The program includes:

• •Security training for each new worker.
• •Regular lessons on phishing, fraud by phone or online, passwords, and data handling.
• •Clear rules for handling, storing, and sending sensitive data.
• •Background checks for workers who can access sensitive customer data.
• •Discipline for workers who break our security rules.

8. Incident Response

No system can stop every threat. We have a written plan for incidents that affect personal data. The plan calls for us to:

• •Find and contain the incident quickly.
• •Check its scope and impact.
• •Notify affected people when state or federal breach laws require it.
• •Notify regulators when required.
• •Fix the cause and help stop it from happening again.
• •Review the incident and improve our controls.

If an incident puts your personal data at risk, we will notify you promptly. We will explain steps you can take to protect yourself.

9. Your Role in Security

You can help keep your data safe:

• •Do not send application login details or sensitive financial data through unsafe channels. This includes email that is not encrypted.
• •Watch for phishing. We never ask for your password or sensitive data by email or text.
• •Check that you are on excelcapitalfunding.com before you submit information.
• •Use a strong, unique password for each online account.
• •Keep your devices and software current with the latest security updates.
• •Report messages that falsely claim to be from Excel Capital Funding. Email info@excelcapitalfunding.com at once.

10. Cookies and Tracking Security

Our site uses cookies and similar tools. Our Privacy Policy explains how we use them. Key security facts are:

• •Google Analytics may set first-party cookies, such as `_ga`. These cookies tell visits apart and measure site use.
• •Google creates and manages these cookies. Browser scripts can read them. They are not HttpOnly cookies used for sign-in.
• •Our public site does not use cookies to log in or keep users signed in.
• •We do not put sensitive application data in cookies on purpose. This includes Social Security numbers, bank details, and uploaded financial files.

You can review, block, or delete cookies in your browser. Blocking analytics cookies may limit how well we measure site use. Our public pages and forms do not use these cookies to sign users in.

11. Reporting a Security Concern

Contact us at once if you find a possible security flaw on our site. Also contact us if you think your data was exposed:

Email: info@excelcapitalfunding.com Phone: +1 (754) 335-7575 Hours: Monday – Friday, 9:00 AM – 6:00 PM EST

Tell us what happened and how you found it. Add screenshots or facts about the issue that may help. We review every report and respond promptly.

We work with reporters to fix confirmed security problems fast and with care.

12. Updates to This Policy

We review this policy from time to time. We update it when our work, technology, or laws change. After a material change, we update the “Last Updated” date on this page.

Please review this policy from time to time. If you keep using our website or services, you accept the updated policy.

Report a Security Concern

Found a vulnerability or suspect a breach? Contact us immediately.