Privacy

Privacy policy.

Last updated: August 13, 2026

This policy describes how JOGA Financial collects, uses, shares, secures, retains, and deletes information collected through jogafinancial.com and our related services.

1. Introduction & scope

JOGA Financial ("JOGA," "we," "us") arranges business-purpose real estate financing on non-owner-occupied investment property and co-invests as a principal. This policy governs all information we collect through our website, our deal-submission form, and any application or integration we operate, including integrations with Meta Platform products (Facebook, Instagram, WhatsApp, and the Meta developer platform).

It does not govern the privacy practices of third parties whose sites or services you reach from ours. If you do not agree with this policy, please do not submit information to us.

2. Information we collect

Information you provide directly

Name, email address, and phone number (if provided).
Property address, loan type, purchase price, and after-repair value, where provided.
Notes, messages, and any files or details you send us.
Your certification that the request is for a business purpose on non-owner-occupied property held by an entity borrower.

Platform Data obtained via Meta APIs

Where you connect a Meta account or interact with us through a Meta product, we may receive Platform Data as permitted by the permissions you grant and by Meta's Platform Terms and Developer Policies:

Meta user ID (app-scoped) and page- or business-scoped IDs.
Name, profile picture, and email address on your Meta profile.
Access tokens and refresh credentials needed to make authorized API calls on your behalf.
Pages, business assets, ad account metadata, and messaging threads, only where you have granted the relevant permission.
Message content you send us through WhatsApp, Messenger, or Instagram Direct.

We request the minimum permissions required for the feature you are using. We do not use Platform Data for any purpose other than providing and improving the feature you connected it to, and we never sell it.

Information collected automatically

Server and usage logs: pages requested, referring URL, timestamps, and a hashed form of your IP address for fraud prevention.
Device and browser information, including user agent.
Cookies and similar technologies. Strictly necessary cookies run the site. If you accept marketing cookies, we load Meta Pixel to measure our advertising. You can decline or change your mind at any time using the cookie banner.
When you submit a deal, we may send a hashed, server-to-server conversion event to Meta so ad performance can be measured without third-party cookies. Identifiers are hashed (SHA-256) before transmission.

3. How we use information

To evaluate your deal and respond to your inquiry.
To arrange business-purpose financing on your behalf if you engage us, and to evaluate co-investment as a principal.
To authenticate you and maintain your session or connection.
To provide, maintain, debug, secure, and improve the functionality of our site and integrations.
To communicate service updates, respond to support requests, and send messages you have asked to receive.
To measure the performance of our advertising.
To comply with legal, recordkeeping, and anti-fraud obligations.

Our legal bases under GDPR are: performance of a contract or steps taken at your request; our legitimate interests in operating and securing the service; your consent (for marketing cookies and optional communications); and compliance with legal obligations.

4. Data sharing & disclosure

We do not sell personal information. We share it only as follows:

Capital sources. Where we shop a deal on your behalf, we share only the information necessary to obtain a quote.
Service providers / sub-processors. Hosting, database, email delivery, analytics, and error monitoring vendors, each bound by contract to process data only on our instructions and to maintain appropriate security.
Meta. Hashed conversion events and measurement signals, where you have consented or where permitted by applicable law.
Legal and safety. Where required by law, legal process, or to protect the rights, property, or safety of JOGA, our users, or the public.
Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this policy.

Platform Data received through Meta APIs is handled in strict compliance with the Meta Platform Terms and Developer Policies. We do not transfer Platform Data to data brokers, ad networks, or monetization partners, and we do not use it to build user profiles for purposes unrelated to the feature you connected.

5. Data security

Encryption in transit using TLS 1.2 or higher.
Encryption at rest for our database and backups, provided by our managed hosting platform.
Access tokens and secrets stored in an encrypted secret store, never in client-side code or version control.
Row-level access controls on our database, with least-privilege access for personnel and services.
Hashing of identifiers used for advertising measurement before transmission.
Logging, monitoring, and periodic review of access and dependencies.

No method of transmission or storage is perfectly secure. If we become aware of a breach affecting your personal data, we will notify you and any applicable regulator as required by law.

6. Data retention & deletion

We retain deal submissions and related correspondence for as long as needed to serve your request and then for up to seven (7) years to meet recordkeeping and legal obligations. Server logs are retained for up to twelve (12) months. Meta Platform Data and access tokens are retained only while your connection is active, and are deleted or revoked within thirty (30) days of disconnection or of a deletion request, unless retention is legally required.

How to request deletion

Email jc@jogafinancial.com with the subject line "Data deletion request" and the email address, phone number, or property address you used.
Or visit our data deletion page and follow the instructions there.
For Meta-connected accounts: remove our app in Facebook Settings → Apps and Websites. Meta then calls our automated Data Deletion Callback at /api/public/meta/data-deletion, which queues deletion of the Platform Data associated with your app-scoped user ID and returns a confirmation code and status URL.
We acknowledge requests within 5 business days and complete them within 30 days, and we will confirm in writing when done.

7. Your rights

Depending on where you live, you may have the right to access a copy of your personal data; correct inaccurate data; delete your data; restrict or object to certain processing; withdraw consent at any time; port your data to another provider; and be free from discrimination for exercising these rights.

Under the CCPA/CPRA, California residents may also request disclosure of the categories and specific pieces of personal information collected, the purposes for collection, and the categories of third parties with whom it is shared. We do not sell or share personal information for cross-context behavioral advertising other than through the consent-gated advertising measurement described above, which you may decline via the cookie banner.

To exercise any right, email jc@jogafinancial.com. We will verify your identity before acting. You may use an authorized agent. EU/UK residents may also lodge a complaint with their local supervisory authority.

8. Children

Our services are intended for business users and are not directed to anyone under 18. We do not knowingly collect data from children.

9. International transfers

We operate in the United States. If you contact us from outside the U.S., your information will be transferred to and processed in the U.S. under appropriate safeguards, including standard contractual clauses where required.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date above, and where required we will seek your consent again.

11. Contact

JOGA Financial · Privacy inquiries: jc@jogafinancial.com

Business-purpose loans only

JOGA Financial arranges business-purpose financing on non-owner-occupied investment property. We do not originate consumer mortgages. See the footer disclosure for the full statement.

Questions? jc@jogafinancial.com. · Back to home