Sunlight Finance (“we,” “our,” or “us”) operates the website sunlightfinanceapp.com. This privacy policy explains what data we collect, how we use it, and your rights.
What we collect
We collect two categories of information:
- Information you provide directly. When you submit a contact form, quote request, or email us, we collect the data you enter — name, email, phone, address, and any other fields you complete.
- Information collected automatically. When you visit the site, we collect standard web analytics — IP address, browser type, pages visited, time on page, referring URL. This data is aggregated and used to improve the site.
How we use it
- To respond to your messages and quote requests
- To match you with relevant installers (only with your consent)
- To improve site content and performance
- To detect and prevent fraud or abuse
- To comply with legal obligations
Who we share it with
- Matched lenders, only when you submit the application form and consent to be contacted.
- Our application partner network (operated by a third-party loan-matching platform at apiflag.com) processes form submissions to match you with lenders. They are bound to use your data only for that matching purpose and follow GLBA + state-specific lending privacy requirements.
- Service providers (analytics, hosting, email) under written confidentiality agreements. See the Cookies and tracking section for the analytics tools we use.
- Law enforcement, when required by valid legal process.
We do not sell your personal data. We do not use your information for cross-site advertising.
Cookies and tracking
We use two analytics services to measure how the site is used: Google Analytics 4 (with IP anonymization) and Microsoft Clarity (for anonymous session replay). Both load only after you accept the cookie banner. If you reject the banner, no analytics scripts load and no analytics cookies are set.
You can change your cookie preference at any time via the “Cookie preferences” link in the site footer.
The application form on /apply.html is hosted via our partner network (apiflag.com). That form may set its own cookies necessary for form operation and fraud prevention — those cookies are treated as “strictly necessary” under GDPR (i.e., they load when you visit the form because you intentionally requested the service).
Your rights
Depending on your jurisdiction (California, EU, UK, etc.), you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Opt out of certain processing
To exercise these rights, email [email protected].
Data retention
We retain quote-request data for up to 24 months unless you request earlier deletion. Editorial correspondence is retained for 36 months. Aggregated analytics are retained indefinitely.
Security
We use industry-standard encryption for data in transit (HTTPS) and at rest. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you per applicable law.
Children
Our services are not directed to anyone under 18. We do not knowingly collect data from minors.
Changes to this policy
We may update this policy from time to time. Material changes will be announced on the site for at least 30 days before taking effect.
Contact
Questions about this policy? Email [email protected].