Privacy Policy
VFE is a commercial finance company. We buy accounts receivable from businesses. This policy explains what information we collect, why we collect it, who we share it with, and how long we keep it.
1 · Who this covers
This policy applies to vfe.capital, the VFE carrier application, and every service VFE operates.
VFE is a business-to-business company. Our clients are trucking companies and other businesses that sell us their invoices; the parties who owe those invoices are freight brokers, shippers and other companies. We do not offer consumer products, we do not extend consumer credit, and we do not produce consumer reports. Some of the information we handle relates to individuals - an owner, an officer, an accounts-payable contact - and that information is covered by this policy.
2 · What we collect
Information you give us
- Business information. Legal entity name, trade name, address, EIN or TIN, DOT and MC numbers, entity type and formation details.
- Individual information about owners and officers. Name, business contact details, role, and ownership percentage, where required to verify the business or meet an obligation we are subject to.
- Transaction information. Invoices, load and rate confirmations, bills of lading, proof of delivery, and payment instructions.
- Contact information for the people we deal with at your company and at the companies that owe you money.
Bank account information, through Plaid
With your permission, VFE connects your business bank account using Plaid Inc. Plaid presents its own consent screen before anything is shared, and you choose which account to connect.
We may receive, through Plaid: account and routing numbers, the name and address on file for the account, account balances, and transaction history for the connected account.
Plaid handles your bank credentials directly. VFE never sees, receives or stores your online banking username or password. Plaid's own handling of your information is governed by the Plaid End User Privacy Policy. By connecting an account you also agree to that policy.
Information we obtain from others
- Public and commercial business records - Secretary of State registration and standing, UCC lien filings, bankruptcy filings, business credit data, and government watchlist and sanctions screening.
- Federal motor carrier records from FMCSA, including authority, insurance and safety data.
- Tax standing, where you have authorised us to obtain it.
Information collected automatically
Standard server logs (IP address, browser type, pages requested, timestamps) for security and reliability. vfe.capital does not use advertising cookies and does not run third-party advertising trackers.
3 · Why we use it
| Purpose | What it means in practice |
|---|---|
| Verify the business | Confirm a company is real, registered, in good standing, properly authorised to operate, and not sanctioned. |
| Verify the bank account | Confirm the account you give us for funding is genuinely yours before we send money to it. This is our primary defence against misdirected-payment fraud. |
| Decide whether to buy an invoice | Assess the invoice, the party who owes it, and whether another party has already filed a lien against your receivables. |
| Fund and service the account | Send funds, issue statements, serve notices of assignment, apply payments, and collect what is owed. |
| Detect misdirected payment | After a notice of assignment is served, payment on a purchased invoice is owed to VFE. We monitor for payments that were sent to you instead, so we can correct it early. |
| Meet legal obligations | Anti-money-laundering, sanctions screening, tax reporting, recordkeeping, and responding to lawful requests. |
| Secure our systems | Prevent fraud, abuse and unauthorised access. |
We do not sell your information. We do not license it, monetise it, or share it for anyone else's advertising. We do not use Plaid-sourced data for any purpose other than the ones listed above.
4 · Who we share it with
We share information only where it is necessary to do the work, and only with these categories:
- Service providers who act for us - identity and business verification, lien and public records search, sanctions and watchlist screening, bank data access, payment processing, document delivery, cloud hosting, and email delivery. They may use the information only to provide the service to us.
- Parties who owe you money, when we serve a notice of assignment. That notice identifies you as our client and directs payment to VFE. This is required by Article 9 of the Uniform Commercial Code and is the legal foundation of the transaction.
- Capital partners and auditors, where necessary and under confidentiality obligations.
- Regulators, law enforcement and courts, where we are legally required to.
- A successor, in a merger, acquisition or sale of assets. This policy travels with the information.
5 · How we protect it
- All data in transit is encrypted using TLS 1.2 or better.
- All data at rest, including anything received from Plaid, is encrypted.
- Access to production systems is role-based, managed through a centralised identity provider, and limited to those who need it.
- Multi-factor authentication is required on the accounts that administer systems holding financial data.
- Service-to-service access uses scoped credentials, never shared passwords.
No system is perfectly secure, and we will not claim otherwise. We maintain a written information security policy and review it at least annually.
6 · How long we keep it
We keep information for as long as we have an active relationship with you, and afterwards for as long as we are required to.
- Transaction and funding records are retained for seven years after the account closes, to meet financial recordkeeping and tax obligations.
- Verification and screening records are retained for five years after the account closes, to meet anti-money-laundering recordkeeping obligations.
- Bank account data obtained through Plaid is retained only while the connection is active and the account is open, and is deleted within 90 days of the earlier of your disconnecting the account or the account closing - except where a specific record is part of a transaction record above.
- Server and security logs are retained for 13 months.
Our full retention schedule is maintained internally and reviewed at least annually.
7 · Your choices and rights
Disconnecting your bank account
You can disconnect a linked bank account at any time by contacting us at privacy@vfe.capital. We will revoke the connection and stop collecting new data from it. You can also manage connections directly at my.plaid.com.
Access, correction and deletion
You may ask us what information we hold about you, ask us to correct it, or ask us to delete it. Write to privacy@vfe.capital. We will respond within 45 days.
We will honour deletion requests except where we are legally required to keep a record - for example the financial and anti-money-laundering retention periods above, or an active dispute. Where we cannot delete something, we will tell you what we are keeping and why.
Residents of California and other states with privacy laws
Depending on where you live you may have additional rights, including the right to know, delete, correct, and to not be discriminated against for exercising them. VFE does not sell or share personal information for cross-context behavioural advertising. Use the same address above and identify the right you are exercising.
8 · Children
VFE's services are for businesses. We do not knowingly collect information from anyone under 18. If we learn we have, we will delete it.
9 · Changes
If we change this policy we will update the date at the top of this page. If a change materially affects how we handle your information, we will notify you directly before it takes effect.
10 · Contact
Vasquez Factoring Exchange, Inc.
Privacy: privacy@vfe.capital
Security: security@vfe.capital
General: rob@vfe.capital