Moneytree Inc. California Privacy Notice

Information for California Residents

We collect Personal Data from Consumers and comply with the California Privacy Rights Act ("CPRA"). In addition to our general Privacy Notice, this California Privacy Notice applies to California residents ("Consumers", "you", or "your").

For the purposes of this California Privacy Notice, "Personal Data" means information that is linked or reasonably linkable to a particular individual or household. However, the following categories of information are not Personal Data:

Publicly available information;
Deidentified or aggregated data; or
Information otherwise excluded from the scope of the CPRA.

This Privacy Notice provides the following information to California Consumers:

Categories of Personal Data we collect;
Purposes for which we use Personal Data;
Categories of Personal Data we disclose to third parties;
Categories of third parties to which we disclose Personal Data; and
How Consumers can exercise their rights under the CPRA:
- The rights to access, correct, or delete Personal Data;
- The right to obtain a portable copy of Personal Data;
- The right to limit the use of sensitive personal data in certain circumstances; and
- The rights to opt out of the sharing of Personal Data for behavioral advertising, sales of personal data,or certain profiling.

Categories of Non-Sensitive Personal Data

The table below outlines the non-sensitive categories of Personal Data Moneytree Inc. collects about Consumers and whether and how they are disclosed to third parties.

We collect Non-Sensitive Personal Data from the following sources:

Directly from our users
From our business partners
From our advertising partners

Category of Personal Data: Identifiers

Examples	Identifiers may contain the following: Name, postal address, telephone number, email address, IP address, employee ID number, telephone number, email address, Social Security number, driver’s license number, passport number
Purpose(s)	Establishing and servicing consumer accounts, processing consumer transactions, collection purposes, customer service purposes, marketing purposes, facilitating hiring and employment processes, maintaining employment, payroll, benefit and other employment-related records, monitoring the security of network controls, fraud and ID theft prevention, complying with statutory and regulatory obligations, providing and improving services, and as required by applicable law
Targeted Advertising	We do not engage in targeted advertising or share Personal Information for targeted advertising purposes
Sale	We do not sell Personal Information to anyone
Sharing	This data may be shared with Processors, Business Partners, and Advertising Partners
Retention Period	We retain this data to the extent that it is needed for a business purpose or as required by applicable law or to prevent fraud

Category of Personal Data: Personal Characteristics

Examples	Personal Characteristics may contain the following: Self-disclosed race, gender or ethnicity, language preference.
Purpose(s)	Employment-related EEOC reporting and complaint investigation and reporting
Targeted Advertising	We do not engage in targeted advertising or share Personal Information for targeted advertising purposes
Sale	We do not sell Personal Information to anyone
Sharing	This data is not shared with third parties
Retention Period	We retain this data to the extent that it is needed for a business purpose or as required by applicable law or to prevent fraud

Category of Personal Data: Commercial Information

Examples	Commercial Information may contain the following: Consumer history, consumer referral information
Purpose(s)	Comply with statutory and regulatory obligations, improve services, processing consumer transactions, collections, promoting and marketing products and services
Targeted Advertising	We do not engage in targeted advertising or share Personal Information for targeted advertising purposes
Sale	We do not sell Personal Information to anyone
Sharing	This data is not shared with third parties
Retention Period	We retain this data to the extent that it is needed for a business purpose or as required by applicable law or to prevent fraud

Category of Personal Data: Internet/Electronic Activity

Examples	Internet/Electronic Activity may contain the following: Employee network access and activity history, consumer online account access and activity, IP address activity, web browser activity, pages viewed, time spent on pages, links clicked and conversion information
Purpose(s)	Monitoring network security controls, fraud and ID theft prevention, maintaining consumer history information, analyzing and tracking data, determining the popularity of certain content, delivering advertising and content targeted to consumer interests on our services and other websites and better understand consumer online activity, complying with statutory and regulatory obligations.
Targeted Advertising	We do not engage in targeted advertising or share Personal Information for targeted advertising purposes
Sale	We do not sell Personal Information to anyone
Sharing	This data is not shared with third parties
Retention Period	We retain this data to the extent that it is needed for a business purpose or as required by applicable law or to prevent fraud

Category of Personal Data: Imprecise Geolocational

Examples	Imprecise Geolocational may contain the following: Cookies, IP addresses
Purpose(s)	Directing consumers to state-specific product, service and location information
Targeted Advertising	We do not engage in targeted advertising or share Personal Information for targeted advertising purposes
Sale	We do not sell Personal Information to anyone
Sharing	This data is not shared with third parties
Retention Period	We retain this data to the extent that it is needed for a business purpose or as required by applicable law or to prevent fraud

Category of Personal Data: Professional Information

Examples	Professional Information may contain the following: Prior work history, education history, professional degrees and certifications
Purpose(s)	Facilitating hiring and employment processes
Targeted Advertising	We do not engage in targeted advertising or share Personal Information for targeted advertising purposes
Sale	We do not sell Personal Information to anyone
Sharing	This data is not shared with third parties
Retention Period	We retain this data to the extent that it is needed for a business purpose or as required by applicable law or to prevent fraud

Category of Personal Data: Educational Information

Examples	Educational Information may contain the following: Education history, highest degree earned, degree and certification information, continuing education and training
Purpose(s)	Facilitating hiring and employment processes, processing certain benefits, for account payable purposes
Targeted Advertising	We do not engage in targeted advertising or share Personal Information for targeted advertising purposes
Sale	We do not sell Personal Information to anyone
Sharing	This data is not shared with third parties
Retention Period	We retain this data to the extent that it is needed for a business purpose or as required by applicable law or to prevent fraud

Categories of Sensitive Personal Data

The table below outlines the categories of Sensitive Personal Data Moneytree Inc. collects about Consumers and whether they are shared with third parties. Moneytree Inc. obtains affirmative consent from Consumers to process the Sensitive Personal Data, in compliance with applicable law.

We collect Sensitive Personal Data from the following sources:

Directly from our users
From our business partners
From our advertising partners

Category of Sensitive Personal Data: Government ID Data

Examples	Government ID Data may contain the following: Social Security Number, ITIN, driver's license number, passport number, content of text and email
Purpose(s)	Complying with statutory obligations, prevention of fraud and ID theft
Targeted Advertising	We do not engage in targeted advertising or share Personal Information for targeted advertising purposes
Sale	We do not sell Personal Information to anyone
Sharing	This data is not shared with third parties
Retention Period	We retain this data to the extent that it is needed for a business purpose or as required by applicable law or to prevent fraud

Use of Personal Data

We use Personal Data for the purposes described in our general Privacy Notice. Personal Data may also be used or disclosed as otherwise permitted or required by applicable law.

Disclosing Personal Data

We share Personal Data with the following categories of third parties:

Processors: We use processors to securely handle Personal Data on our behalf and only on our instructions. These companies may not use your Personal Data for their own purposes.
Our Analytics and Advertising Partners: We use analytics services to collect and process certain data and to provide you with relevant advertising. These services may also collect information about your use of certain other websites, apps, and online resources.
Our Business Partners: We may share relevant personal data with our business partners to provide you with exclusive offers for products and services that may interest you.

See the tables above for more details about how different categories of Personal Data are shared.

We do not sell Personal Data to anyone.¹

Exercising Your Personal Data Rights

California Consumers have the following rights under the CPRA:

The right to access, correct, or delete Personal Data;
The right to know what Personal Data has been collected;
The right to limit the use of Sensitive Personal Data in certain circumstances; and
The rights to opt out of the sharing of Personal Data for behavioral advertising, sales of personal data, or certain profiling.

If you are a California Consumer, you can submit a request to exercise your personal data rights under the CPRA by visiting our online portal at California Data Privacy Rights or calling our toll-free number at 1-866-556-1376. To protect your privacy, we may need to authenticate your identity before we respond to your rights request. We will use commercially reasonable efforts to verify your identity for this purpose. Any information you provide to authenticate your identity will only be used to process your rights request. Please be aware that we do not accept or process rights requests through other means (e.g., via fax or social media).

¹ We do not sell or share for purposes of targeted advertising the Personal Data of any person, including any person under the age of 16.

After submitting your request online, you will receive a follow-up email, which may include a link you must click on in order to verify your identity. If you do not click on that link, we may be unable to complete your request due to lack of verification. It is important that you provide a valid email address in order for us to be able to process your request.

We will respond to your rights request within 45 days, though in certain cases we may inform you that we will need up to another 45 days to act on your request. If we suspect fraudulent or malicious activity on or from your account, we will delay taking action on your request until we can appropriately verify your identity and the request as authentic. Also note that each of the rights are subject to certain exceptions.

We reserve the right to decline to process, or charge a reasonable fee for, requests from a Consumer that are manifestly unfounded, excessive, or repetitive.

Limiting the Use of Sensitive Personal Data

The CPRA provides a right to limit some uses of Sensitive Personal Data. In particular, you may direct companies not to use Sensitive Personal Data except as necessary to provide goods or services you have requested. We do not use or share Sensitive Personal Data for any purposes other than those specifically authorized under the CPRA and applicable California law. We do not collect or process Sensitive Personal Data for the purpose of inferring characteristics about you.

You may submit a request to limit the use of your sensitive Personal Data by submitting a rights request as described above.

Authorized Agent Requests

The CPRA allows you to designate an authorized agent to make a rights request on your behalf. Your authorized agent may submit such a request by following the same method described above. We may require verification of your authorized agent in addition to the information for verification above for Consumers and households.

Non-Retaliation

We will not discriminate or retaliate against any California Consumer for exercising his or her rights under the CPRA.

Contact Us

If you have any questions or concerns regarding this California Privacy Notice, contact us at PrivacyOfficer@Moneytreeinc.com.

Last updated: November 19, 2024