California privacy rights
California residents may have rights to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive information, and avoid discrimination where the CCPA applies.
Review California rightsPrivacy Policy · Last updated September 15, 2026
Privacy Policy
This Privacy Policy explains information that may be handled when you use the Catapult Funding website, contact Catapult or complete an application.
On this page · 10 sections
Who this policy covers.
This policy applies to the Catapult Funding website at www.catapultfundinginc.com and to information submitted through Catapult website features, including the application experience.
Some application functions may rely on technical service providers or transmit information to a financial provider that evaluates the application. Those parties may provide additional privacy notices that apply to their own processing.
Information that may be collected.
| Category | Examples | How it is collected / handled |
|---|---|---|
| Site / device data | IP address, browser/device characteristics, requested pages, date/time, referrer and security data. | Standard hosting, logs, security and site systems. |
| Catapult contact data | Name, email, phone or message content you send directly to Catapult. | Phone, email or another Catapult contact channel. |
| Application data | Name, address, email, telephone number, date of birth, identity, income, banking or other information requested by the application. | Entered voluntarily into the Catapult application form. |
| Consent / transaction records | Consent choices, form version, timestamp and application or response identifiers. | Generated as part of the application and electronic-consent flow. |
| Privacy-request records | Information needed to identify and process a privacy request. | When you exercise a privacy right or opt-out request. |
How information may be used.
- Operate, secure, troubleshoot and improve the website and application.
- Respond to questions, support requests and privacy requests.
- Process an application according to the disclosures and consent shown with the form.
- Transmit application information to service providers that support the application and to a financial provider where permitted by the displayed consent and applicable law.
- Detect fraud, abuse, security incidents or duplicate/invalid submissions.
- Maintain consent, compliance, audit and dispute records where appropriate.
- Send service or marketing communications only as permitted by applicable consent and law.
- Comply with lawful requests, legal obligations or protect rights and security.
When information may be disclosed.
Personal information may be disclosed to vendors and service providers that support website hosting, security, communications, application processing or related operations. Application information may also be disclosed to the financial provider evaluating the application when permitted by the consent shown with the application and applicable law.
A financial provider that receives application information may use it for its own eligibility review, pricing, offer, fraud prevention, compliance and servicing purposes according to its own disclosures and legal obligations.
For Catapult-specific privacy questions, use [email protected] or the Contact page.
Follow the data by event, not by marketing label.
| Data / event | Catapult website | Application service providers | Financial provider | Your control |
|---|---|---|---|---|
| Ordinary page visit | May process normal website/server data. | May support hosting, security or site functionality. | Not involved merely because you read a page. | Browser/cookie controls where available. |
| Application entry | Displays the application and applicable Catapult disclosures. | May host, secure, process or transmit the application fields you enter. | May receive application information where permitted by the displayed consent. | Read the disclosures before submitting; exercise applicable privacy choices. |
| Credit / underwriting data | Catapult content/calculators do not make the provider’s final credit decision. | May support secure data processing or transmission. | May use credit, identity, income or alternative data as authorized/disclosed for the actual product. | Review the authorization and provider agreement. |
| Marketing contact | May respond to direct Catapult inquiries according to applicable consent. | May support communications on behalf of the relevant service. | Provider communications are governed by its own consent and policy. | Use STOP / unsubscribe / opt-out / privacy routes applicable to the sender. |
Cookies, browser storage and similar technologies.
The website may use cookies, local storage or similar technologies that are necessary for site functionality, security, preference handling or measurement when those technologies are enabled on the website. Third-party application, analytics or security services may have their own data practices.
Where applicable law gives you a right to opt out of sale or sharing for cross-context behavioral advertising, use the California Privacy Rights page. A valid Global Privacy Control signal is treated according to applicable law and the technologies in use.
Retention and security.
Information is retained only for as long as reasonably necessary for the purpose for which it was collected, to maintain consent and transaction records, to prevent fraud, resolve disputes, comply with legal obligations or enforce rights. Retention periods can differ by data type and recipient.
Catapult uses reasonable administrative and technical safeguards appropriate to the website and the information handled. No transmission, storage system or online service can be guaranteed to be completely secure. Do not send bank passwords, full account credentials or sensitive identity documents through ordinary email or an unverified message channel.
Sources: Website privacy & data handling
Your privacy choices.
Electronic delivery
Electronic records are governed by the E-Consent presented for the website/application process.
Read E-ConsentText messages
SMS consent and opt-out instructions are governed by the Text Message Policy.
Read Text Message PolicyThird-party provider data
For information held by a lender, servicer or other recipient, use the privacy contact in that company’s own notice or agreement.
Find the right partyAge and children.
The online application experience is intended for adults who are legally able to enter a binding financial agreement. The website is not directed to children. Do not submit information for a child through a online application form.
Policy changes and contact.
We may update this Privacy Policy when the website, application process, service providers, legal requirements or data practices materially change. The “Last updated” date identifies the current version.
For a Catapult website privacy question or request, use the Contact page, call (813) 400-0402, or write to Catapult Funding, Inc., 100 Ashley Dr S #600, Tampa, FL 33602. Do not include a Social Security number, bank password or full account credentials in an ordinary privacy inquiry.
Need help with a different question?
Use the loan guides or support routes to get to the page that owns your question.