Privacy Policy.

Scope & application.

This Privacy Policy ("Policy") applies to information collected by Joco LLC, doing business as MCA Alleviation ("MCA Alleviation," "we," "us," "our"), through:

• Our website at mcaalleviation.com and any subdomains;
• Online forms, intake processes, and consultation requests;
• Email, telephone, SMS, and other electronic communications;
• Marketing materials and advertising campaigns.

By accessing our website or submitting information to us, you acknowledge that you have read and understood this Policy. If you do not agree with our practices, please do not use our services.

Information we collect.

We collect the following categories of information:

A. Identifiers and contact information

• Full legal name
• Business email address
• Phone number (mobile and/or business)
• Mailing address (when provided)
• IP address and approximate geographic location
• Device identifiers and browser information

B. Business and professional information

• Business name (DBA and legal entity)
• Industry and operational details
• State of business operation
• Position/title within the business
• Business website (if provided)

C. Financial information

To evaluate fit for our services, we collect financial details voluntarily provided during intake:

• Types of debt obligations (MCA, line of credit, term loan, etc.)
• Approximate total debt balances
• Monthly business revenue ranges
• Daily/weekly ACH withdrawal amounts
• Number of active funder positions
• Funder names (when shared by you)
• Personal guarantee status (if disclosed)

D. Engagement information

• Communication preferences (email, phone, SMS)
• Consultation timing preferences
• Free-text messages or descriptions you submit
• Records of communications with our team

E. Internet and device activity

• Pages visited and time spent on each
• Referring URLs and search terms used to find us
• Click patterns and form interactions
• Browser type, operating system, and screen resolution
• Cookies and similar tracking technologies (see Section 06)

F. Inferences

We may derive inferences from collected information to assess priority, segment communications, and improve our services (e.g., a "high priority" classification based on stated urgency and debt size).

How we collect information.

Directly from you

• When you complete an intake form, contact form, or consultation request
• When you communicate with us by phone, email, SMS, or video call
• When you provide documents or information during a consultation
• When you respond to our marketing communications

Automatically through technology

• Through cookies, tracking pixels, and similar technologies
• Through web server logs (IP, timestamps, pages requested)
• Through analytics tools (Google Analytics, etc.)
• Through advertising platforms (Google Ads, Meta Pixel, LinkedIn Insight Tag, etc.)

From third parties

• Marketing partners and lead-generation networks (when you submit a form on a partner site)
• Public business databases (for verification purposes)
• Referral partners (attorneys, CPAs, business advisors)
• Service providers (email platforms, CRM tools, analytics vendors)

How we use your information.

We use information for the following business purposes:

Service delivery

• Evaluate whether your situation is a fit for our placement services
• Match your case to appropriate workout providers in our network
• Schedule and conduct consultations
• Coordinate communications between you and engaged providers
• Respond to your inquiries and requests

Communications

• Send service-related emails and updates
• Send marketing communications (with your consent or where permitted)
• Conduct follow-up calls regarding your inquiry
• Send appointment reminders and confirmations

Business operations

• Maintain internal records and case files
• Improve our website, services, and marketing effectiveness
• Conduct research and analysis on aggregated, de-identified data
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations and respond to lawful requests

Legal basis for processing

• Consent — when you voluntarily provide information through our forms or opt in to communications
• Legitimate business interest — to evaluate fit, provide services, and improve operations
• Legal obligation — to comply with applicable laws, regulations, and lawful requests
• Performance of a contract — when you engage our services or those of a referred provider

When we share information.

We share information only as described in this Policy:

With workout providers in our network

If you decide to proceed beyond our initial review, we share relevant case information with one or more vetted third-party workout providers so they can evaluate your case and propose engagement terms. These providers operate under their own privacy practices, which we encourage you to review before engaging.

With service providers

We share information with vendors that perform services on our behalf:

• Email and CRM platforms
• SMS and call-routing services
• Cloud storage and hosting providers
• Analytics, advertising, and marketing platforms
• Payment processors (when applicable)
• IT support and cybersecurity vendors

These vendors are contractually required to protect information and use it only for the purposes we specify.

With legal and regulatory authorities

We may share information when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with subpoenas, court orders, or other legal process
• Respond to lawful requests from federal, state, or local authorities
• Protect the rights, property, or safety of MCA Alleviation, our clients, or others
• Investigate, prevent, or address fraud, security, or technical issues
• Enforce our terms of service or other legal agreements

In business transfers

If MCA Alleviation is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you (by email and/or prominent website notice) of any such transfer and any choices you may have.

With your consent

We may share information for any other purpose disclosed to you with your consent.

Cookies & tracking.

We use cookies and similar technologies (pixels, web beacons, local storage) to operate our website and improve user experience.

Categories of cookies we use

Managing cookies

You can manage cookies through your browser settings. Most browsers allow you to view what cookies are set, delete existing cookies, block cookies from specific or all websites, and block third-party cookies. Disabling cookies may affect functionality.

Opting out of advertising tracking

• Network Advertising Initiative (NAI) Opt-Out
• Digital Advertising Alliance (DAA) Opt-Out
• Google Ads Settings: adssettings.google.com

SMS, email & phone communications.

SMS / Text messaging

By providing your mobile number and opting in, you consent to receive text messages from MCA Alleviation related to your inquiry, including appointment reminders, follow-ups, and case updates. Standard message and data rates may apply.

• To opt out: Reply STOP to any text message from us.
• For help: Reply HELP or contact contact@mcaalleviation.com.
• We do not share mobile information with third parties or affiliates for marketing or promotional purposes.

Email communications

We comply with the CAN-SPAM Act. All marketing emails include clear sender identification, working unsubscribe link, our physical address, and honest subject lines. Transactional emails (responses to your inquiry, case updates) are not subject to opt-out and will continue while your case is active.

Telephone communications

By providing your phone number, you consent to receive calls from MCA Alleviation regarding your inquiry. We comply with the Telephone Consumer Protection Act (TCPA) and applicable state telemarketing laws. To stop receiving calls, request placement on our internal Do-Not-Call list by emailing contact@mcaalleviation.com.

Data retention.

We retain information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements.

When information is no longer needed, we securely delete or anonymize it. You may request deletion as described in Sections 10–12.

Information security.

We implement reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, and destruction:

• SSL/TLS encryption for all data transmitted to and from our website
• Access controls limiting who can view information internally
• Secure cloud storage with industry-standard encryption at rest
• Regular security reviews and software updates
• Vendor due diligence and contractual data-protection requirements
• Internal training on data privacy and security

No security system is impenetrable. While we work to protect information, we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you as required by applicable law.

Your privacy rights.

Depending on your state of residence, you may have the following rights:

• Right to know / access — request information about what data we hold about you
• Right to delete — request deletion of your personal information (subject to legal exceptions)
• Right to correct — request correction of inaccurate information
• Right to opt out — opt out of "sale" or "sharing" of personal information for cross-context behavioral advertising
• Right to limit — limit use and disclosure of sensitive personal information
• Right to portability — receive a copy of your information in a portable format
• Right to non-discrimination — exercise rights without facing retaliatory treatment
• Right to appeal — appeal a denied request (in applicable states)

How to exercise your rights

• Email: privacy@mcaalleviation.com
• Phone: +1 (602) 902-0895
• Mail: Joco LLC, Attn: Privacy Officer, 2398 E. Camelback Rd, Phoenix, AZ 85016

We will verify your identity before responding. We will respond within the timeframes required by applicable law (typically 45 days, extendable to 90 days when reasonably necessary). You may designate an authorized agent.

California residents (CCPA / CPRA).

This section provides additional disclosures required under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) and applicable regulations effective January 1, 2026.

Categories of personal information collected (last 12 months)

• Identifiers (name, email, phone, IP address)
• Customer records information (business contact details)
• Commercial information (services inquired about)
• Internet activity (browsing on our site)
• Geolocation (general, derived from IP)
• Inferences (priority classifications, segmentation)
• Professional information (industry, role)

Sensitive personal information

To the extent we collect financial details voluntarily provided (debt amounts, MCA positions), this may constitute "sensitive personal information" under CPRA. We use this information only to provide the services you requested. You have the right to limit our use of this information by emailing privacy@mcaalleviation.com with the subject line "Limit Sensitive Information Use."

"Sale" and "sharing" disclosures

MCA Alleviation does not sell personal information for monetary consideration. However, our use of advertising cookies and pixels (Google Ads, Meta Pixel, etc.) may constitute "sharing" for cross-context behavioral advertising under the CCPA/CPRA. To opt out, click "Do Not Sell or Share My Personal Information" at the footer of our website, or email privacy@mcaalleviation.com with the subject line "Do Not Sell or Share My Information."

Right to non-discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA rights.

Authorized agents

You may designate an authorized agent to submit requests on your behalf. The agent must provide signed permission. We may require you to verify your own identity in addition to the agent.

Right to appeal

If we deny your request, you may appeal by emailing privacy@mcaalleviation.com with the subject line "Privacy Request Appeal" within 60 days of our denial.

Shine the Light

We do not share personal information with third parties for their direct marketing purposes.

Other state privacy rights.

Residents of the following states have rights under their respective comprehensive privacy laws:

Common rights across these states

• Right to confirm processing and access personal data
• Right to correction and deletion
• Right to data portability
• Right to opt out of targeted advertising
• Right to opt out of "sale" of personal data
• Right to opt out of profiling for legal or similarly significant decisions
• Right to appeal denied requests

Universal opt-out mechanisms

We honor opt-out preference signals (such as the Global Privacy Control / GPC) where required by law.

Submitting a request

Use the contact methods in Section 10. Specify your state of residence so we can apply the correct law.

Financial privacy (GLBA).

To the extent the Gramm-Leach-Bliley Act (GLBA) applies to certain information we receive, we comply with the GLBA Privacy Rule and Safeguards Rule.

Information covered by GLBA

This may include nonpublic personal financial information (NPI) you provide during intake (debt amounts, business revenue, financial obligations) when used in connection with placement of financial workout services.

Information sharing under GLBA

• With workout providers you engage
• With service providers performing functions on our behalf under confidentiality requirements
• As required by law or in response to lawful requests

We do not share NPI with affiliates or non-affiliated third parties for their own marketing purposes.

Safeguards

We maintain administrative, technical, and physical safeguards consistent with GLBA Safeguards Rule, including encryption, access controls, vendor management, and incident response procedures.

Children's privacy.

Our services are directed to business owners and adult decision-makers. We do not knowingly collect personal information from anyone under the age of 18. We comply with the Children's Online Privacy Protection Act (COPPA), which requires verifiable parental consent for collection of personal information from children under 13. If you believe a minor has provided us information, contact privacy@mcaalleviation.com.

Third-party links.

Our website may link to third-party websites operated by workout providers, service providers, partners, or other parties. We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policies of any third-party site you visit.

Do Not Track signals.

Some browsers transmit "Do Not Track" (DNT) signals. There is no industry-standard interpretation of these signals, and we do not currently respond to DNT signals. However, we honor universal opt-out preference signals (such as Global Privacy Control / GPC) where required by applicable law.

Changes to this policy.

We may update this Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent changes. Material changes will be communicated by:

• Posting a prominent notice on our website
• Sending an email notification (where we have your email)
• Other means as required by applicable law

Your continued use of our website or services after the effective date of any update constitutes acceptance of the updated Policy.

Contact us.

For questions about this Policy or to exercise your privacy rights:

If you are unsatisfied with our response, you may also have the right to file a complaint with your state Attorney General or applicable data protection authority.