Security & privacy
You are about to tell a website how much you owe and how far behind you are. That deserves a straight account of where it goes and what protects it.
What we do
-
Encrypted from your screen to ours
Every page and every form submission travels over HTTPS with modern TLS. The site sends strict transport security, content security and frame-protection headers, so the pages cannot be wrapped inside somebody else's site or downgraded to plain HTTP.
-
Your Social Security number is never stored
On the personal loan path only, a marketplace requires an SSN to return real offers. It is passed straight through to that marketplace from our server and never written to our database, never sent to our CRM, never sent to any other partner, and redacted from every log and error report. No other path asks for it at all.
-
Nothing in the address bar
Your answers are never put into a URL or a query string, so they cannot leak into browser history, a shared link, a screenshot, or a referrer header on the next site you visit.
-
One provider, after you say yes
Your information sits with us until you choose a named provider on the results page and tick that provider's consent box. Only then does anything leave, and only to them. There is no auction, no aggregator, and no second buyer.
-
A record of what you agreed to
We store the exact wording of every consent you gave, the version of that wording, and the moment you gave it — and, where the form session was certified by an independent service, that certificate too. That record protects you as much as us: it is the evidence of what was actually on the screen when you agreed.
-
Opt-outs are enforced, not filed
A do-not-call or unsubscribe request goes onto a suppression list that is checked before anything is sent to a provider and before any message is sent to you. Reply STOP to any text from us and the number is added to that list.
-
Bot and abuse protection
Form submissions pass an invisible challenge before they are accepted, which keeps automated junk out of the system — and out of the hands of providers who would otherwise call a number that was never yours.
-
Old data is anonymized
Personal details are anonymized on a schedule once they are no longer needed for the introduction you asked for or for a legal obligation. Access to lead records is limited, phone numbers and emails are masked by default, and every time a staff member reveals or exports one it is logged.
What we deliberately do not claim
Plenty of sites in this category carry a badge that means nothing. We would rather list what we have not done than imply we have.
- We hold no SOC 2 report, ISO certification, or third-party security audit.
- We are not a bank, and "bank-level security" is a phrase with no definition, so we do not use it.
- We do not carry a license in any state, because a matching service does not hold one — and any site that implies otherwise is telling you something untrue.
What we can point at is the list above, every item of which is a decision made in the build rather than a line of copy.
What you can ask us to do
- See what we hold. Ask for a copy of the information associated with your email or phone number.
- Correct it. If something is wrong, tell us and we will fix it.
- Delete it. Ask us to erase your record. We will, except where a law requires us to keep a specific item for a set period.
- Stop contact. Ask to be added to our do-not-contact list, and nothing further is sent to you or to a provider.
- Opt out of sharing. Use the Do Not Sell or Share My Information page, which works for everyone and not only California residents.
Requests go to [email protected]. We will confirm what we did rather than just confirming we received it.
The full detail — categories of information, retention periods, California and other state rights, and the list of who information can be disclosed to — lives in the Privacy Policy.
If someone contacts you claiming to be us
We will never ask you for a password, a full Social Security number by email or text, a bank login, a gift card, a wire transfer, or a payment of any kind. We never charge you anything, so anyone asking you to pay Mannah Financial is not us. If a message looks like it came from us and asks for any of that, forward it to [email protected] and do not reply to it.
Ready when you are
Free to use, no obligation, and nothing leaves until you choose a provider by name.