1. Identity and Responsible Party

The InstantLoans.ai protocol is operated by InstantLoans.ai ("the Company"), a limited liability company registered in the State of Wyoming, USA. Under the Wyoming Limited Liability Company Act and applicable international regulations, we act as the Data Controller for the information collected through this portal.

2. Legal Basis for Processing (GDPR Compliance)

For users located in the European Economic Area (EEA), our legal basis for collecting and using the personal information described in this Privacy Policy depends on the Personal Information we collect and the specific context in which we collect it:

Contractual Necessity: To fulfill our obligation to connect you with financial partners.
Consent: You have given us permission to do so through the application process.
Legitimate Interests: For fraud prevention, security, and protocol optimization.
Legal Compliance (GLBA): To comply with financial regulations, anti-money laundering (AML) laws, and the Gramm-Leach-Bliley Act (GLBA) regarding the safeguarding of consumer financial data.

3. Data We Collect and Retain

Through our AI matching engine and Instant Bank Verification (IBV) protocols, we collect:

Identification: Full name, date of birth, and Social Security Number (SSN/ITIN) for credit pre-screening.
Contact: Verified email and mobile number for real-time offer notifications.
Socio-Economic: Monthly net income, employment history, and housing status.
Biometric & Technical: Device fingerprinting and behavioral analytics to prevent bot-driven applications.

Note: We do not store full bank credentials. IBV is handled through secure, read-only API bridges. All sensitive PII is encrypted at the client-side using the native Web Crypto API (AES-256-GCM) before transmission, ensuring mathematical data sovereignty.

4. Wyoming Data Jurisdiction & International Transfers

As a Wyoming entity, InstantLoans.ai processes data primarily in the United States. For international users, this means your data will be transferred and stored in US-based servers. We utilize Standard Contractual Clauses (SCCs) approved by the European Commission to ensure a level of protection equivalent to that of the EEA.

5. Data Subject Rights (ARCO & GDPR)

Regardless of your location, we grant you the following rights:

Access & Portability: Request a copy of your data in a structured format.
Rectification: Correct any inaccurate or incomplete information.
Erasure ("Right to be Forgotten"): Request the deletion of your data, subject to regulatory retention requirements for financial records (usually 5-7 years under US law).
Restriction of Processing: Limit how we use your data during a dispute.

To exercise these rights, contact our Data Protection Officer at legal@instantloans.ai.

6. California Consumer Privacy Act (CCPA) Rights

For residents of California, the CCPA grants specific rights regarding your personal information. InstantLoans.ai complies strictly with these requirements:

Right to Know: You may request disclosure of the specific pieces of personal data we have collected over the past 12 months.
Right to Delete: You can request the permanent "tombstoning" (deletion) of your data from our encrypted databases, subject to GLBA exemptions.
Right to Opt-Out ("Do Not Sell My Info"): While we route your profile to lenders to fulfill your request, you can opt-out of secondary data sharing.
Non-Discrimination: We will not deny you services or change pricing based on exercising these rights.