Comprehensive Privacy Policy

• Application information (name, address, Social Security number, income, debts)
• Account documentation and signed agreements
• Communication preferences and contact information
• Bank account information for payment processing

• Transaction records and payment history
• Account balance and settlement activity
• Login activity and system usage
• Device and browser information for security

• Credit reports from credit reporting agencies
• Bank account verification from third-party services
• Information from Debt Resolution Company regarding your program
• Public records as permitted by law

• Process your payments and maintain your account
• Respond to court orders and legal investigations
• Report to credit bureaus and regulatory authorities
• Verify your identity and prevent fraud

• Send information about our services and programs
• Communicate program updates and account notifications

We do not share for joint marketing purposes.

• With Debt Resolution Company — Account activity, payment status, and program progress to facilitate debt resolution services.
• With Service Providers — Third-party vendors who assist with account management, payment processing, and customer service under strict confidentiality agreements.
• With our Bank Partner — Account information necessary to maintain your FDIC insured special purpose account.
• With Credit Reporting Agencies — Payment history and account status as required for accurate credit reporting.
• As Required by Law — Court orders, legal investigations, regulatory examinations, and compliance requirements.
• With Your Permission — When you authorize us to share your data with other companies or individuals.
• Business Transfers — If we are involved in a merger, sale, or financing, your information may be transferred as part of that process.

• For marketing purposes by other companies
• For other companies to market to you
• With affiliates for marketing purposes

We have not sold personal information for any monetary value in the past 12 months and do not "share" personal information as defined by the Delaware Personal Data Privacy Act.

• Access your personal information in our files
• Request correction of inaccurate information
• Opt out of marketing communications
• Request deletion of information (subject to legal and regulatory requirements)
• Receive your personal data in a portable format (right to portability)
• Instruct us not to sell or share your personal data
• Limit how we use your sensitive personal information
• File a complaint with regulatory authorities

Depending on your state of residence, you may have additional privacy rights:

• California (CCPA): Request details about third parties with whom we have shared personal information and limit use and disclosure of sensitive personal information.
• Oregon (OCPA): Rights under the Oregon Consumer Privacy Act.
• Nevada: Opt out of the sale of your personal information.

Contact our Privacy Officer for detailed information on exercising these rights.

• Email: Opt out of marketing emails by clicking the unsubscribe link or contacting us directly.
• Text and SMS: Opt out of receiving text messages by following instructions in the message or contacting us.
• Cookies: Manage cookie settings through your browser.

When visiting our website, we may create and send your browser cookies that may be stored on your device. We use cookies to provide a consistent experience throughout the pages and services you may use. You have the ability to decline cookies through your browser settings. Choosing to do so may impact your experience with our website.

As is true of most websites, we gather certain information automatically and store it in log files. This information may include internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data.

To protect both you and us, we use services provided by our partners to help decide whether to accept transactions from personal computers, mobile phones, or other devices. These services check whether these devices have been identified with fraudulent or abusive transactions in the past, such as reported instances of identity theft, account takeovers, or malware attacks. For these purposes, a cookie file, flash storage token, beacon, tag, script, or other code file may be placed on your device to identify it in the future when you visit our website. On connection with our site or service, we will transmit that device identification code to the third party's server, along with data concerning certain technical attributes of your device such as the model, operating system, browser version, and IP address, all used to confirm device identification. The third party's server returns a response recommending that transactions be accepted or denied. If you set your browser or device to reject these cookies or tokens, you may not be able to conclude some transactions through our website.

Our analytics partners use technologies such as cookies, beacons, tags, and scripts to analyze trends, administer the site, track users' movements around the site, and gather demographic information about our user base as a whole. We may receive reports based on the use of these technologies by these partners on an individual as well as aggregated basis. Please note that our system may not respond to Do Not Track requests or headers from some or all browsers.

• Secure facilities with restricted access
• Locked storage for physical documents
• Employee access controls and monitoring

• 256-bit SSL encryption for all data transmission
• Multi-factor authentication requirements
• Regular security audits and vulnerability testing
• Secure data centers with 24/7 monitoring

• Employee background checks and privacy training
• Regular security awareness programs
• Incident response procedures
• Data retention and disposal policies

Purpose Account — Privacy Office

• Email: privacy@purposeaccount.com
• Phone: 1-800-000-0000

• Consumer Financial Protection Bureau: consumerfinance.gov
• Federal Trade Commission: consumer.ftc.gov