WarmedUpp.com Privacy Policy

WarmedUpp.com is operated by Peanut Butter Marketing LLC, a Florida limited liability company, 433 Plaza Real, Boca Raton FL 33432; mailing address 11426 NW 81st Pl, Parkland FL 33076. We are responsible for the information handling described here. Contact support@warmedupp.com for privacy questions or requests, or use our Privacy Choices page at https://www.warmedupp.com/opt-out.

1. Who and what this policy covers

This policy covers site visitors, buyer applicants and customers, and business owners and contacts whose information appears in a financing lead ("merchants"). A merchant does not need a marketplace account to have privacy rights or contact us. The service is intended for adults and business-financing activities in the United States. We do not knowingly seek information from children under 18.

We prepare business-financing leads and provide access to approved lenders, funders and brokers for payment. That disclosure may be a sale of personal information under applicable privacy law. Charging for preparation does not mean the information is outside privacy law. A buyer receives information for its own financing activities and is responsible for its subsequent handling under applicable law and our contract. Its own privacy notice also applies to its activities.

2. Information, sources and purposes

What we collect depends on your interaction and the functions you use. The table also serves as a description of the information involved when merchant leads and purchases are available.

Each lead's information comprises a phone number checked against lead information and short message service (SMS) responses; the merchant's preferred email address supplied to the SMS bot; a self-reported credit score; monthly revenue calculated as a three-month average from bank statements; time in business; application information; the full SMS conversation with us, including our bot, as a PDF or screenshots; and bank statement PDFs. Supplying an email address does not establish independent email verification, and an SMS response does not establish permission for every use or recipient.

The table also includes account and operational information separate from the confirmed lead package. Sensitive application and financial details are disclosed only to eligible purchasing buyers among marketplace customers; they are not shown in previews. Necessary staff and provider access is described separately below. Restricted fields and documents may be withheld even after a purchase. Please do not send us bank statements or unrelated financial, identity, health or other sensitive records in ordinary support email.

A self-reported credit score is not independently verified merely because it is supplied, and is not a financing decision. Collection of a phone number, email address, application or statement does not by itself establish permission for every use or recipient. The purposes above remain subject to the actual notices, permissions, source restrictions and applicable law.

Intake relies on opt-in given in the SMS conversation. The exact wording and response determine what that opt-in supports. Participation in our text conversation is not blanket permission for every purchasing buyer's outreach or for sale or sharing of every sensitive record.

3. Lead previews and disclosures to buyers

Administrators list leads manually. Before purchase, buyers see only approved ranges for lead information; all other lead details, including contact information, exact application fields and documents, remain hidden until purchase. The offer's sale type and price describe the transaction. Ranges do not guarantee that no one could ever infer a business's identity.

After purchase, an eligible buyer can receive the permitted contact details, financing information, supporting documents and the merchant's full SMS conversation with us for that lead. Our launch model allows one exclusive buyer or at most three shared buyers for a lead. These limits govern marketplace sales, not all disclosures: our staff and necessary service providers may also handle the information to operate the service, and a merchant may independently approach other financing businesses.

The proposed financing disclosure includes the permitted self-reported credit score, average monthly revenue, time in business, application information, the merchant's full SMS conversation with us, including our bot, as a PDF or screenshots, and bank statement PDFs. A buyer's purchase does not authorise bank-account access, payments or an additional credit inquiry.

If a merchant opts out of marketplace sharing or is otherwise suppressed on the platform, every buyer loses access to the entire lead file, including contact information, application fields and documents such as bank statement PDFs. This applies to exclusive and shared buyers, including those who purchased before the request or suppression. Access loss does not by itself erase retained transaction or compliance records; the retention and deletion rules below still apply.

We require purchasing buyers to limit use to the permitted financing purpose, protect information, honour applicable requests, and refrain from resale or onward distribution for another business's use, except disclosure to a funding source solely for underwriting the merchant's requested commercial financing, under equivalent confidentiality and security obligations. A buyer's processors may handle information on its behalf under restrictions. Revoking platform access stops future access through our service; it does not remotely erase a file someone already downloaded. Buyers must stop using affected copies and follow the Buyer Agreement's deletion and lawful-retention duties. We use contractual instructions and request handling to address those copies.

4. Service providers and other disclosures

Our service providers support hosting, database operations, authentication, security, communications, payments and protected document storage. They receive information needed for their functions, subject to applicable contractual and legal restrictions. Our hosting and database services use Vercel and Neon. Where enabled, Cloudflare Turnstile processes browser and network information to prevent automated abuse; Stripe processes payment details and provides card-matching and risk information; and Resend delivers service email.

When you use hosted payment fields, payment details go to the payment provider. We receive transaction references, amounts, status information, and the card-matching and risk information in section 2, rather than storing full card numbers or card security codes in our marketplace database.

Referral program. If a business signs up with a buyer's referral code or invite link, that buyer sees the first name of the business's sign-up contact, a masked email address showing its first letter and domain, whether the account is approved, its top-up progress toward the program's threshold and the days left, and whether and when a bonus was paid. The referring buyer does not see the full email address, the business name, top-up amounts above the threshold, or the reasons for any review. The sign-up form says this beside the referral field.

Published Lead Success proofs. With the buyer's permission under our Lead Success Program Terms, we may publish an edited image of a buyer's proof that a lead worked, with a short caption and the month, on our landing page and on the sold lead's marketplace page. Before publishing, we black out or crop names, contact details, account and reference numbers, signatures, logos and anything else that could identify the merchant, the buyer, a funder or anyone else. For a lead sold to more than one buyer, the proof appears only once every share of the lead has been sold. A merchant who believes a published proof concerns them can ask us to take it down through our Privacy Choices page or by emailing support@warmedupp.com. If a merchant opts out through that page, or we block the source a lead came from, we take down any published proof for that lead automatically.

We may also disclose information to professional advisers, to comply with lawful legal process, to protect legal rights and security, or in a business transaction such as a merger or sale, subject to applicable restrictions. A transfer of the business does not by itself authorise a new incompatible use of personal information.

5. Cookies, local storage and communications

The site uses authentication cookies to maintain login sessions and pending two-factor sign-in challenges. Opening a buyer's invite link can set a cookie that remembers the referral code for 30 days, so the sign-up form can fill it in. Browser local storage remembers your selected display theme. Our Cookie Notice lists the cookies, storage purposes, durations and browser controls. Providers supporting forms, security or payments may receive device and usage information when their functions load. Blocking essential cookies may prevent sign-in or purchasing.

We do not use analytics or advertising cookies.

Account verification, password reset, security and transaction messages support the service when those messaging functions are available. Optional promotional messages require separate treatment and include a way to unsubscribe. Accepting a buyer agreement is not agreement to receive unrelated marketing. A promotional-email opt-out does not prevent a necessary security or transaction notice.

6. Your choices and requests

Contact support@warmedupp.com or use our Privacy Choices page at https://www.warmedupp.com/opt-out to ask about access to your information, correction, deletion, recipients, or stopping further lead sales or marketing contact. You do not need to create an account or pay a fee. Give enough information to locate the relevant records, such as the contact email or phone used for the financing request; do not send a password, full bank number or Social Security number. We may use proportionate verification for access, correction or deletion where needed to protect information. An opt-out of sale or sharing does not require identity verification; asking for information necessary to find the affected records is different from verifying your identity.

Tell us whether your request concerns contact from us, further marketplace disclosure, a particular buyer, or all of these. We honour the scope of your request and applicable law, including reasonable revocation methods. We can help route a request to a buyer where authorised or legally required. You may also contact that buyer directly. A request to stop new sales and contact is different from deleting transaction or compliance records we must retain.

Depending on your location and applicable law, you may have rights to know and obtain a portable copy of information, correct it, delete it, identify disclosures, opt out of sale or sharing or targeted advertising, limit certain uses of sensitive information, use an authorised agent, and appeal a denied request. To appeal, contact support@warmedupp.com and identify the decision. We explain denials and available further steps, and respond within the periods required by applicable law. We do not unlawfully discriminate against you for exercising rights.

An authorised agent may submit a request through the same channels, identify the right being exercised and provide permission to act for you where required. For an access, correction or deletion request, we may ask for signed authorisation and direct verification or confirmation where permitted; applicable power-of-attorney rules remain available. An agent's sale/sharing opt-out does not require identity verification.

For California residents, where the California Consumer Privacy Act applies, the merchant identifier, business/financial, sensitive-document and permission categories described above may be sold to approved financing buyers for the stated purpose. Buyer account credentials and buyer application records are not offered as lead inventory. We provide a "Do Not Sell or Share My Personal Information" request mechanism on our Privacy Choices page at https://www.warmedupp.com/opt-out.

California historical disclosure. Our marketplace opened in September 2026, so there is no earlier 12-month period of sales or sharing to report. The categories we collect, sell and disclose are those described in sections 2 to 4.

An opt-out does not depend on also requesting deletion. When deletion has a lawful exception, we limit retained information to the purpose supporting that exception. Where required, we pass applicable correction, deletion or opt-out instructions to recipients and service providers and take the required follow-up steps. Statutory exceptions do not create permission for unrestricted further marketing.

7. Retention

Buyer download availability, operator record retention and buyers' own copies have separate rules. The default bank-statement download period is five days after purchase, subject to any different period disclosed for the purchase and earlier access restrictions such as merchant opt-out or suppression. Expiry of download access does not delete bank statements from our backend or remotely erase copies a buyer already downloaded.

Bank statements and associated lead records are retained in our backend without a scheduled deletion date. This describes the current retention design; applicable privacy requests and legal limits still apply. Keeping a record in the backend does not permit unrelated marketing or continued buyer access after suppression.

We keep bank statements and other lead records in our systems after a buyer's download period ends, for as long as they are needed for the purposes in this policy, to keep records of sales, returns and opt-outs, and to meet legal obligations. You may ask us to delete information as described in section 6.

Account information is kept while needed to administer the relationship and then for documented closure, security or legal purposes. Payment, agreement and dispute records may need to be retained for applicable accounting, claims and legal periods. We retain only necessary consent evidence and suppression identifiers where needed to demonstrate permission or prevent renewed contact. An append-only audit record is not an exemption from privacy law.

Referral records, acceptances of the Referral Program Terms and card-fingerprint hashes are kept with transaction records, without a scheduled deletion date, to pay bonuses, prevent repeated abuse and meet legal obligations. This describes the current retention design; applicable privacy requests and legal limits still apply.

Lead Success claims, proof files and notes are kept like return evidence, with transaction records and without a scheduled deletion date; a privacy deletion request can remove a proof file. When a published proof is taken down, the edited image is deleted, and only its record remains (its size and a checksum).

Required retention exceptions must be limited to their lawful purpose, with restricted access.

8. Security, location and changes

We use access controls and other measures intended to protect personal information. No system or transmission is completely secure. Report suspected misuse to support@warmedupp.com. Please use the secure facilities we provide for sensitive documents rather than ordinary email.

We and our providers may process information in the United States and other countries where those providers operate. Confirming a location or making a contractual choice does not remove applicable privacy obligations.

We will publish an updated date when this policy changes and provide any additional notice or permission required for material changes. An updated policy does not retroactively authorise a new use of information. Contact support@warmedupp.com or write to 11426 NW 81st Pl, Parkland FL 33076 with questions.