Effective Date: July 1, 2026 · Last Updated: June 25, 2026
capTRU Business Debt Relief is a service of Velocity Business LLC, 202 Bradley Street, Suite 5, Carrollton, Georgia 30117
Velocity Business LLC ("Company," "we," "us," or "our"), a Georgia limited liability company located at 202 Bradley Street, Suite 5, Carrollton, Georgia 30117, operates the capTRU Business Debt Relief platform at captru.com and all associated subdomains and services (collectively, the "Platform"). We are committed to protecting the privacy and security of the personal information entrusted to us by our clients, prospective clients, and visitors.
This Privacy Policy describes how we collect, use, disclose, retain, and protect personal information in connection with the Platform and our services. It applies to all individuals who interact with us through the Platform, by telephone, by SMS, by email, through AI-assisted voice communications, or through any other channel.
When you submit an inquiry, register, enroll, or communicate with us, we collect: Identity Information (full legal name, date of birth, government-issued ID data, biometric facial image data for identity verification); Contact Information (address, email, telephone numbers); Business Information (business name, EIN, business type, revenue); Financial Information (MCA agreement details, bank account information, outstanding debts); Document Content (bank statements, MCA contracts, UCC filings, court documents); and Communications Content (messages and notes you send us).
When you access the Platform, we automatically collect: IP address, browser type, operating system, device type; pages visited, time and date, referring URLs; session data and cookie identifiers; and geolocation data derived from IP address (city, region, country, ISP).
When you communicate with us by telephone, SMS, or AI-assisted voice, we collect: Call Records (number, date, time, duration, disposition); Call Recordings (audio recordings retained for quality assurance, compliance, and legal documentation); Consent Records (when, how, and for what purpose you provided consent); SMS Content; and AI Interaction Data (transcripts and metadata from AI voice agent interactions).
We may receive information from: Stripe (identity verification results, financial account data, payment processing data); IP geolocation providers; public records (UCC filings, court records); and referral partners.
We use the personal information we collect for the purposes described in the table below. We do not sell your personal information to third parties. We do not share your personal information with MCA funders, creditors, or adverse parties except as expressly authorized by you or as necessary to perform the services you have engaged us to provide.
| Purpose | Legal Basis |
|---|---|
| Providing, managing, and improving the Platform and services | Contract performance; legitimate interests |
| Client intake, identity verification, and account creation | Contract performance; legal obligation |
| Financial analysis, budget assessment, and negotiation strategy | Contract performance |
| Communicating via telephone, SMS, email, and AI voice | Contract performance; consent (for marketing) |
| Processing payments and managing escrow | Contract performance |
| Detecting and preventing fraud and security incidents | Legitimate interests; legal obligation |
| Complying with TCPA, TSR, FCRA, and applicable state laws | Legal obligation |
| Maintaining call records and consent logs | Legal obligation |
| Sending marketing and promotional communications | Consent |
| Training and quality assurance for AI voice systems | Legitimate interests |
We use AI-generated voice technology, including large language model (LLM)-based conversational agents, for certain outbound and inbound telephone communications. In compliance with the FCC's February 2024 Declaratory Ruling and proposed regulations under the FCC's September 2024 NPRM, any AI-generated call will: identify itself as AI-generated at the beginning of the call; identify Velocity Business LLC / capTRU Business Debt Relief as the responsible entity; provide a callback telephone number; and provide an automated opt-out mechanism within two (2) seconds of the initial message.
The Platform uses automated processing, including AI-powered analysis, to assist with financial risk assessment, budget analysis, legal contract review, and security threat detection. These automated processes support, but do not replace, human decision-making. You have the right to request human review of any automated output that materially affects your case by contacting info@captru.com.
Anonymized and de-identified interaction data may be used to improve the accuracy and performance of our AI systems. We do not use personally identifiable information for AI training without your explicit consent.
Service Providers: Third-party vendors who perform services on our behalf, including identity verification (Stripe Identity), payment processing (Stripe), cloud hosting, data storage, IP geolocation, and communications infrastructure. These vendors are contractually bound to use your information only as directed by us.
Legal and Compliance: We may disclose your information when required by law, subpoena, court order, or regulatory inquiry, or when necessary to protect the rights, property, or safety of the Company, our clients, or the public.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity, subject to the same privacy protections described in this Policy.
With Your Consent: We may share your information with MCA funders, attorneys, or other parties as expressly authorized by you in connection with your case.
We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.
We retain personal information for as long as necessary to fulfill the purposes described in this Policy and to comply with applicable legal obligations.
| Category | Minimum Retention Period |
|---|---|
| Call records and recordings | 4 years (TCPA statute of limitations) |
| Consent records | 4 years from last communication |
| Case files and financial records | 7 years from case closure |
| Identity verification records | 5 years from verification date |
| Security event logs | 3 years |
| AI interaction transcripts | 3 years |
| Account and enrollment records | 7 years from program completion |
We implement a multi-layered security program including: Encryption (all data encrypted in transit using TLS 1.2+ and at rest using AES-256 or equivalent); Access Controls (role-based access control limits access to authorized personnel on a need-to-know basis); Audit Logging (all access and modifications logged with timestamp, user identity, IP address, and action); Trusted Device Registry (clients can register trusted devices to reduce unauthorized access risk); Anomaly Detection (new-country login detection automatically escalates suspicious events); and Bank Statement Redaction (bank identifiers are redacted from documents shared with MCA funders).
Despite these measures, no security system is impenetrable. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.
California residents have the right to know what personal information we collect and how it is used; the right to delete personal information; the right to correct inaccurate information; the right to opt out of sale or sharing (we do not sell personal information); the right to limit use of sensitive personal information; and the right to non-discrimination for exercising these rights. Submit a verifiable consumer request to info@captru.com or call (470) 298-7891. We respond within 45 days (with one possible 45-day extension).
Residents of states with comprehensive privacy laws (VCDPA, CPA, CTDPA, TDPSA, and others) have similar rights to access, correct, delete, and port their personal information, and to opt out of certain processing activities. Contact us at info@captru.com to exercise these rights.
EEA and UK residents have rights of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing. You also have rights related to automated decision-making, including the right to request human review. Contact info@captru.com. We respond within 30 days. You may also lodge a complaint with your local supervisory authority.
Residents of Illinois, Texas, Washington, and other states with biometric privacy laws have specific rights regarding biometric data collected during identity verification. We collect biometric data solely for identity verification, retain it only for the period necessary to complete verification, and do not sell it to third parties. To request deletion of biometric data, contact info@captru.com.
The Platform is not directed to individuals under the age of eighteen (18). We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately at info@captru.com and we will promptly delete such information.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated by posting the updated Policy on the Platform with a revised "Last Updated" date and, where practicable, by email notification to enrolled clients. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy.
For questions about this Privacy Policy, to exercise any of your privacy rights, to submit a data subject access request, or to report a privacy concern:
Velocity Business LLC
Attn: Privacy / Data Protection
202 Bradley Street, Suite 5
Carrollton, Georgia 30117
Created, Customized and Powered by Velocity Business LLC