California Privacy Policy

Effective date: 31/12/2025

This California Privacy Policy outlines the disclosures required under the California Consumer Privacy Act (“CCPA”) and applies solely to personal information covered by that law. In most cases, our collection, use, and disclosure of information are governed by our Gramm-Leach-Bliley Privacy Policy. However, for California residents, the CCPA may apply to our Services in connection with business-related products featured on our platform, such as business credit cards and small business loans. This policy should be read together with the Finsery Privacy Policy and Terms of Use, which are incorporated by reference.

A. Collection, Use, and Disclosure of Personal Information

We may collect the categories of personal information of California residents described in the table below and use or disclose this information to third parties for business or commercial purposes. As is common for online platforms, we also permit certain third parties, such as unaffiliated business partners, advertising networks, analytics providers, and other advertising service providers, to automatically collect information about your interactions with our Site and your use of browsers and devices through technologies including cookies, web beacons, mobile advertising identifiers, and similar tools.

These third parties may use the collected information to deliver interest-based advertisements, measure and analyze advertising campaigns and Site performance, detect and prevent fraud, or conduct their own business and commercial activities. Under the California Consumer Privacy Act (“CCPA”), some of these data-sharing practices may be considered a “sale” of personal information.

For additional details about these practices, please review the Third-Party Tracking Technologies section of the Finsery Privacy Policy. To learn more about your rights and how to opt out of personal information sharing that may be considered a sale under the CCPA, please refer to the Your Rights Regarding Personal Information section below.

B. Purposes for Collecting, Using, and Sharing Personal Information

We collect, use, and disclose personal information for our business and commercial purposes, as described throughout this Privacy Policy.

Our commercial purposes include, but are not limited to, marketing and advertising activities; user authentication and identity verification; fraud detection and prevention; order and service fulfillment; and responding to user requests.

Our business purposes, as defined under the California Consumer Privacy Act (“CCPA”), include conducting audits and related functions; complying with legal and regulatory obligations; identifying, preventing, and addressing security incidents, fraudulent activity, and unlawful conduct; debugging and maintaining our systems and Services; providing administrative, operational, and support functions such as payment processing and analytics; performing internal research and operational activities; improving and maintaining our Services; and other limited or one-time uses consistent with applicable law.

We may disclose the categories of personal information described above to the following categories of third parties: service providers; lending partners; referral and joint marketing partners; credit reporting agencies; financial services aggregators; government authorities; advertising networks; internet service providers; data analytics providers; operating system providers; professional service firms; and social media platforms.

In addition, we permit certain third parties to collect information about your interactions with our Site through third-party cookies and similar technologies. Information collected through these technologies may be used to deliver cross-context behavioral advertising tailored to your interests and preferences across your browsers and devices, or to measure the effectiveness of advertising campaigns.

C. Consumer Rights Regarding Personal Information

California residents are granted specific rights concerning their personal information under applicable privacy laws. If you are a California resident, you may exercise the following rights, subject to certain legal exceptions and limitations:

  • Right to request disclosure for direct marketing purposes: For certain categories of personal information, you may request information about whether we disclosed your personal information to third parties for their own direct marketing purposes during the prior calendar year, as well as the names and addresses of those third parties.
  • Right to know: You have the right to request details about the personal information we collect about you, including the categories and specific pieces of information collected, used, disclosed, or sold or shared; the sources from which the information was obtained; the purposes for collecting, selling, or sharing the information; the categories of personal information disclosed for business purposes or sold or shared; and the categories of third parties involved.
  • Right to deletion: You may request that we delete personal information we have collected from you, subject to applicable legal exceptions.
  • Right to data portability: You have the right to receive your personal information in a portable and usable format that allows you to transfer or reuse it for your own purposes, where applicable.
  • Right to limit use of sensitive personal information: You may request that we restrict the use of your sensitive personal information to purposes permitted under applicable law.
  • Right to correction: You have the right to request correction of inaccurate personal information we maintain about you.
  • Right to opt out of sale or sharing: You may direct us to stop the sale or sharing of your personal information, as defined under California law.
  • Right to non-discrimination: You have the right not to be discriminated against for exercising any of your privacy rights under the California Consumer Privacy Act (“CCPA”).

D. How We Retain Your Personal Information

Unless you request that your personal information be deleted, we retain it for as long as necessary to meet our data retention obligations, deliver the Services you request, and operate our business. Even where a deletion request is submitted, we may be required to retain certain information for a limited period to:

  • comply with applicable legal and regulatory requirements, such as maintaining records of transactions;
  • establish, exercise, or defend legal rights or claims; and
  • detect, prevent, or address fraudulent, abusive, or unlawful activity on our Services.

Retention periods may vary depending on the type of information and how it is used. In some cases, information may be deleted promptly, such as when an account is closed due to prolonged inactivity.

In certain circumstances, we may be unable to fully delete, anonymize, or de-identify personal information because of technical, legal, regulatory, or operational constraints. When this occurs, we will take reasonable steps to securely restrict access to the information and prevent further processing until deletion, anonymization, or de-identification becomes feasible.

E. Submitting Requests Under the California Consumer Privacy Act

Submitting Requests to Know, Access, or Delete

To exercise your California privacy rights, including the right to request access to or deletion of your personal information, please visit our Privacy Preferences page. You may also submit a request by:

  • emailing us at contactus@finsery.com with the subject line “CCPA Request” and clearly stating the specific right you wish to exercise in the body of the message; or
  • visiting our Support Center, selecting “Other Questions or Concerns,” and submitting your request with “CCPA Request” included in the subject line along with the relevant right identified in your message.

Opting Out of the Sale or Sharing of Personal Information

To the extent that certain third-party data collection activities on our Site may be considered a sale or sharing of personal information under California law, we provide options for opting out of cookie-based data collection and related uses.

On some of our websites, you may manage your preferences through a cookie consent or cookie management tool. On other Finsery digital properties, you may also:

  • Use industry opt-out tools that allow you to limit the sale or sharing of personal information by participating third-party businesses;
  • manage advertising personalization settings through your device, browser, or account preferences; and
  • Follow the instructions provided in the Third-Party Tracking Technologies section of this Privacy Policy to opt out of interest-based advertising and similar data-collection practices.

Exercising Other California Privacy Rights

To exercise any additional rights available to California residents under the California Consumer Privacy Act (“CCPA”), please visit our Privacy Preferences page or submit a request through our Support Center using “CCPA Request” in the subject line and specifying the right you wish to exercise.

F. Identity Verification and Request Requirements

We may request additional information from you in order to verify your identity or to clarify the scope of your request. You are not required to create an account to submit a request or to have it processed. For verification purposes, we will ask you to provide information that matches records we maintain.

In certain situations, we may be unable to fulfill a request to access or delete personal information if we cannot reasonably verify your identity. In such cases, the request may be denied in accordance with applicable law.

G. Minors’ Right to Opt-In

We do not sell the personal information of individuals whom we know to be under the age of 16.