Privacy Policy

Effective date: May 22, 2026

1. Introduction

This Privacy Policy describes how Viktor Budanovic LLC, a Wyoming limited liability company (operating as Thunder Systems (“Thunder,” “we,” “us,” or “our”), collects, uses, shares, and protects information about visitors and applicants on thunder.systems and any sub-pages of it (the “Site”). Thunder is an MCA-specialized Independent Sales Organization that routes US small business funding applications to its network of funder partners.

This Policy applies to information collected through the Site and through any application you submit to us. It does not apply to information collected directly by funder partners or other third parties through their own websites, products, or services, even where Thunder introduces or refers you to them. Please review the privacy policies of any funder partner you choose to work with.

2. Information We Collect

2.1 Information you provide

When you submit an application or contact us, we collect information you provide, which may include:

• Your first and last name
• Email address
• Telephone number
• Business name
• State of operation
• Industry
• Time in business
• Average monthly revenue range
• Estimated personal credit score range
• Requested funding amount
• Any additional information you choose to provide in a free-text field or in correspondence with us

2.2 Information collected automatically

When you visit the Site, we and our service providers automatically collect certain information, including:

• IP address and approximate geographic location
• Browser type and version, operating system, device type
• Referring URL, pages viewed, links clicked, time spent on the Site
• Date and time of visit, session identifiers

We use Google Analytics and similar tools to understand how the Site is used. These tools may set their own cookies.

2.3 Cookies and similar technologies

We use cookies and similar technologies for two purposes: (a) essential cookies that are required for the Site to function (for example, to remember the state of a multi-step application), and (b) analytics cookies that help us understand how visitors use the Site. You may disable non-essential cookies through your browser settings or, where applicable, by submitting an opt-out request via our Your Privacy Choices page.

3. How We Use Your Information

We use the information we collect to:

• Match your application with one or more funder partners whose underwriting criteria best fit your business profile
• Send you transactional emails about your application, including confirmations, status updates, and requests for additional information
• Respond to inquiries you submit through the Site, by email, or by phone
• Operate, maintain, secure, and improve the Site and our Services
• Detect, investigate, and prevent fraud, abuse, and unauthorized access
• Comply with applicable laws, regulations, court orders, and lawful government requests
• Send you marketing communications about Thunder products and services, where permitted by law and subject to your right to opt out

4. How We Share Information

4.1 Funder partners

The core of our Service is routing your application to one or more MCA funder partners. When you submit an application, we share the information in that application with the partner(s) we determine to be the best fit. Once your information has been shared with a funder partner, that partner’s use of your information is governed by its own privacy policy and any agreement you enter into with it. We encourage you to review each partner’s policy before accepting an offer.

4.2 Service providers

We share information with third-party service providers that perform functions on our behalf, including hosting and edge infrastructure (Cloudflare), transactional and marketing email delivery (SendKit), product and traffic analytics (Google Analytics), scheduling (Cal.com), and similar operational vendors. These providers are contractually limited to using your information for the purposes for which we engage them and may not sell or use your information for their own marketing.

4.3 Legal compliance

We may disclose information when we believe in good faith that disclosure is required by law or legal process, including in response to subpoenas, court orders, regulatory inquiries, or government investigations, or to protect the rights, property, or safety of Thunder, our users, or others.

4.4 Business transactions

If Thunder is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, your information may be transferred as part of that transaction. We will take reasonable steps to ensure that any successor handles your information consistent with this Policy or provides notice and a choice where required by law.

4.5 What we do not do

We do not sell your personal information to advertisers or to unrelated third parties. We do not rent or trade contact lists. We do not share applicant information with parties other than as described in this Policy.

5. Your Rights and Choices

5.1 Access, correction, and deletion

You may request access to, correction of, or deletion of the personal information we hold about you by emailing privacy@thunder.systems. We will respond within the time period required by applicable law. Some information may need to be retained to comply with our legal obligations or to resolve disputes; we will explain any limits on a request when we respond to it.

5.2 California, Virginia, Colorado, and other US state rights

Residents of certain US states, including California (under the California Consumer Privacy Act, as amended by the California Privacy Rights Act), Virginia, Colorado, Connecticut, and other states with comprehensive privacy laws, have additional rights with respect to their personal information. These rights typically include the right to know what categories of personal information we collect and disclose, the right to correct inaccurate personal information, the right to delete personal information, and the right to opt out of certain types of sharing.

Thunder does not sell your personal information for money. However, routing your application to a funder partner may be considered a “sale” or “sharing” under certain state laws, because we share your information with a third party for that third party’s use. You have the right to opt out of this sharing. Note that opting out of sharing with funder partners will prevent us from routing your application and is effectively a withdrawal of your application. To submit an opt-out request, please visit our Your Privacy Choices page or email privacy@thunder.systems.

5.3 GDPR (visitors from outside the United States)

Thunder serves US small businesses and does not actively market its Services to residents of the European Economic Area, the United Kingdom, or other jurisdictions outside the United States. If you submit information to Thunder from outside the United States, you understand that your information will be processed in the United States, where data protection laws may differ from those in your jurisdiction. To the extent the EU General Data Protection Regulation, the UK GDPR, or comparable laws apply, you may have rights of access, rectification, erasure, restriction, objection, and portability with respect to your personal data, and you may exercise these rights by emailing privacy@thunder.systems.

5.4 Marketing opt-out

You can opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email, or by emailing privacy@thunder.systems. You may opt out of SMS messages by replying STOP to any SMS we send. Transactional communications about an active application may continue regardless of marketing opt-out.

6. Data Retention

We retain personal information for as long as your relationship with Thunder is active and for a reasonable period afterward to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements. Application records associated with funded deals are typically retained for the duration required by applicable consumer protection, anti-money-laundering, and commercial-finance laws. Information collected for analytics purposes is typically retained on a rolling basis and de-identified or aggregated after a reasonable period.

7. Security

We implement commercially reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, disclosure, alteration, or destruction. These measures include encryption in transit (TLS), encrypted storage, access controls, and contractual confidentiality obligations on our service providers. For more detail, please see our Security page. No method of transmission over the internet or storage on electronic media is 100% secure, and we cannot guarantee absolute security.

8. Children

The Site is directed to adults operating businesses and is not intended for or directed at individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a person under 18, please contact us at privacy@thunder.systems and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Effective date” at the top of this page and, where the change is material, provide additional notice (such as by email or a notice on the Site). Your continued use of the Site after the effective date constitutes your acceptance of the revised Policy.

10. Contact

For questions about this Privacy Policy or to exercise any of the rights described above, please contact us at:

Thunder Systems (Viktor Budanovic LLC)
30 N Gould St Ste R
Sheridan, WY 82801
Email: privacy@thunder.systems