Effective as of January 1, 2020
Last updated April, 2023
1. INFORMATION WE COLLECT ONLINE
2. HOW WE USE YOUR INFORMATION
3. HOW WE SHARE YOUR INFORMATION
4. COOKIES AND OTHER TRACKING TECHNOLOGIES
6. CHOICES ABOUT YOUR INFORMATION
10. NOTICE TO NEVADA RESIDENTS
11. NOTICE TO VIRGINIA RESIDENTS
12. NOTICE TO CALIFORNIA RESIDENTS
Through your use of the Sites and Services, we may collect Personally Identifiable Information from you. “Personally Identifiable Information” is individually identifiable information about an individual consumer that we collect online and that we maintain in an accessible form.
Information You Provide
We may collect the following Personally Identifiable Information that you voluntarily provide to us in using our Sites and Services:
Information as You Navigate Our Sites
We automatically collect certain Personally Identifiable Information through your use of the Sites and Services, such as the following:
Third Party Information
Information from Other Sources
When you apply for a loan, we may obtain Personally Identifiable Information about you from other sources, such as information about your credit profile or other information from Experian, TransUnion, and Equifax. We also may collect information about you from other sources to verify the information you provided in your loan application.
We use the Personally Identifiable Information we collect to provide the Services to you, to improve our Sites and Services, and to protect our legal rights. In addition, we may use the Personally Identifiable Information we collect to:
We may share the information that we collect about you in the following ways:
How You Can Opt-Out of Cookies
Cookies can be blocked by changing your Internet browser settings to refuse all or some Cookies. If you choose to block all Cookies (including essential Cookies) you may not be able to access all or parts of the Sites.
You can find out more about Cookies and how to manage Cookies by visiting www.AboutCookies.org.
You can opt out of Cookies set by specific entities by following the instructions found at these links:
Advertising Industry Resources
You can understand which entities have currently enabled Cookies for your browser or mobile device and how to opt-out of some of those Cookies by accessing the Network Advertising Initiative’s website or the Digital Advertising Alliance’s website. For more information on mobile specific opt-out choices, visit the Network Advertising Initiative’s Mobile Choices website.
We use OneSignal to send you push notifications if you voluntarily agree to receive them. OneSignal collects the following types of information from end users: mobile advertising identifiers, email addresses, IP addresses, device push tokens, precise location (e.g., GPS-level) data, network information,
Some internet browsers incorporate a “Do Not Track” feature that signals to websites you visit that you do not want to have your online activity tracked. Given that there is not a uniform way that browsers communicate the “Do Not Track” signal, the Sites do not currently interpret, respond to or alter their practices when they receive “Do Not Track” signals.
Review and Request Changes to Your Information
You may use your account to access, correct, or view certain Personally Identifiable Information we have collected and which is associated with your account. To review or request changes to any of your Personally Identifiable Information, please contact us at firstname.lastname@example.org.
To unsubscribe from our marketing emails, please click the unsubscribe link included in the footer of our emails. You also may submit a request to us at email@example.com.
We maintain commercially reasonable security measures to protect the Personally Identifiable Information we collect and store from loss, misuse, destruction, or unauthorized access. However, no security measure or modality of data transmission over the Internet is 100% secure. Although we strive to use commercially acceptable means to protect your Personally Identifiable Information, we cannot guarantee absolute security.
The Sites are not intended for children under 13 years of age. We do not knowingly collect, use, or disclose personal information from children under 13.
Nevada law allows Nevada residents to opt-out of the sale of certain types of personal information. Subject to several exceptions, Nevada law defines “sale” to mean the exchange of certain types of personal information for monetary consideration to another person. We do not currently sell personal information as defined in the Nevada law. However, if you are a Nevada resident, you still may submit a verified request to opt-out of sales and we will record your instructions and incorporate them in the future if our policy changes. Opt-out requests may be sent to firstname.lastname@example.org or toll-free at (855) 350-7900.
The Virginia Consumer Data Protection Act (“VCDPA”) provides Virginia residents with the right to receive certain disclosures regarding the personal data we process about them. For purposes of this section, personal data means any information that is linked or reasonably linkable to an identified or identifiable natural person. Personal data does not include de-identified or publicly available information as the VCDPA defines those terms.
For a discussion of the categories of personal data we process, the purposes for our processing, the categories of personal data that we share with third parties, and the categories of third parties with whom we share personal data, please see Sections 1 through 3, above, and Section 12, below.
If you are a Virginia resident, the VCDPA grants you the right to: (1) confirm whether or not we are processing your personal data and to access such personal data; (2) correct inaccuracies in your personal data, taking into account the nature of the personal data and the purposes of the processing of your personal data; (3) delete personal data you have provided or we have obtained about you; (4) obtain a copy of your personal data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another controller without hindrance, where the processing is carried out by automated means; and (5) opt out of the processing of your personal data for purposes of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
We sell personal data to third parties as defined in the VCDPA and process personal data for targeted advertising.
To exercise your rights, please email us at email@example.com with your name, the fact that you are a Virginia resident, and specifying the right(s) you wish to invoke. If we refuse to take action regarding your request, you may appeal our decision by emailing us at firstname.lastname@example.org.
The CCPA defines “personal information” to mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. Personal information does not include information publicly available, deidentified or aggregated information. For purposes of this “NOTICE TO CALIFORNIA RESIDENTS” section we will refer to this information as “Personal Information.”
Right to Know About Personal Information Collected, Disclosed, or Sold
If you are a California resident, you have the right to request that we disclose what Personal Information we have collected about you in the 12-month period preceding your request. This right includes the right to request any or all of the following:
(1) Specific pieces of Personal Information that we have collected about you;
(2) Categories of Personal Information that we have collected about you;
(3) Categories of sources from which the Personal Information was collected;
(4) Categories of Personal Information that we sold (if applicable) or disclosed for a business purpose about you;
(5) Categories of third parties to whom the Personal Information was sold (if applicable) or disclosed for a business purp
(6) The business or commercial purpose for collecting or, if applicable, selling Personal Information.
The CCPA defines “sell” to mean selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a California resident’s Personal Information to another business or a third party for monetary or other valuable consideration.
Collection of Personal Information
We collected the above Personal Information for the following business or commercial purposes:
Disclosure or Sale of Personal Information
Category of Personal Information
Category of Service Providers
Category of Third Parties
Identifiers (name, email address, telephone number, and postal address)
Stip Collection, Employment Verification, Cloud Hosting (IaaS)
Marketing automation, Push notifications, Chat providers, Credit Bureaus, SMS Providers, Lenders, Cloud Hosting Services
Cookies, beacons, pixel tags, mobile ad identifiers, or other similar technology
Cloud Hosting providers
Internet Protocol address
Cloud Hosting providers
Data analytics providers, Advertising networks
Social security number
Cloud Hosting providers
Credit Bureaus, Lenders
Other financial information/banking information
Cloud Hosting providers, Credit Card Processing
Lenders Credit Card Pmt Services
We do not knowingly collect or sell the Personal Information of minors under 16 years of age.
Right to Request Deletion of Personal Information
If you are a California resident, you have the right to request that we delete the Personal Information about you that we have collected or maintain. However, per the CCPA, we are not required to comply with a request to delete if it is necessary for us to maintain the Personal Information in order to, for example, complete a transaction, detect security incidents, comply with a legal obligation, or otherwise use the Personal Information, internally, in a lawful manner that is compatible with the context in which you provided the information.
How to Submit a Request to Know or Delete
You may submit a request to know or delete by completing our online request form available here, emailing email@example.com or by calling us at (855) 350-7900. If you submit a request to delete online, you may be asked to confirm separately that you want your Personal Information deleted.
Our Process for Verifying a Request to Know or Delete
We will comply with your request upon verification of your identity and, to the extent applicable, the identity of the California resident on whose behalf you are making such request.
For requests to access categories of Personal Information and for requests to delete Personal Information that is not sensitive and does not pose a risk of harm by unauthorized deletion, we will verify your identity to a “reasonable degree of certainty” by verifying at least two data points that you previously provided to us and which we have determined to be reliable for the purpose of verifying identities.
For requests to access specific pieces of Personal Information or for requests to delete Personal Information that is sensitive and poses a risk of harm by unauthorized deletion, we will verify your identity to a “reasonably high degree of certainty” by verifying at least three pieces of Personal Information previously provided to us and which we have determined to be reliable for the purpose of verifying identities. In addition, you will be required to submit a signed declaration under penalty of perjury stating that you are the individual whose Personal Information is being requested.
Right to Opt-Out of Sale of Personal Information
If you are a California resident, you have the right to direct us to stop selling your Personal Information. To opt-out of our use of third-party advertising Cookies, please see the section “How You Can Opt-Out of Cookies” above. In addition, you may submit a request to opt-out of sales through our interactive webform available by clicking on this link: “Do Not Sell My Personal Information.” You also may submit a request by calling us toll-free at 855.350.7900 or emailing us at firstname.lastname@example.org.
Right to Non-Discrimination for the Exercise of a California Resident’s Privacy Rights
We will not discriminate against California residents if they exercise any of the rights provided in the CCPA as described in this section “Notice to California Residents.” As such, we will not deny goods or services to that California
resident; charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; provide a different level or quality of goods or services to the California resident; or suggest that the California resident will receive a different price or rate for goods or services or a different level or quality of goods or services. However, we are permitted to charge a California resident a different price or rate, or provide a different level or quality of goods or services, if that difference is reasonably related to the value provided to us by the individual’s data.
If you are submitting a request on behalf of a California resident, please submit the request through one of the designated methods discussed above. After submitting the request, we will require additional information to verify your authority to act on behalf of the California resident.
Shine the Light Law
If you are a California resident, California Civil Code § 1798.83 permits you to request information regarding the disclosure of your personal information by us to third parties for the third-parties’ direct marketing purposes (as those terms are defined in that statute). To make such a request, please send an email to email@example.com or write to us at 9300 United Drive, Ste 180, Austin, Texas 78758.
To contact us for questions or concerns about our privacy policies or practices please call RateGenius at 866-728-3436; AUTOPAY at 844-276-3272; Tresl at 866-504-3272 or email us at firstname.lastname@example.org.