Last Updated: July 25, 2022

This Privacy Policy explains how Possible Financial Inc. d/b/a Possible Finance (collectively, “Possible,” “Company”, “we”, “our” or “us”) collects, uses, discloses, and protects information we collect through our online services, websites, and mobile applications (“apps”) provided on or in connection with the services and also any and all communications with us via phone, email, text or otherwise (each, a “Service” and collectively, “Services”). Capitalized terms that are not defined in this Privacy Policy have the meaning given to them in our Terms of Use.

When you use the Services, you consent to our collection, use, disclosure, and protection of information about you as described in this Privacy Policy.

BY ACCESSING OR USING THE SERVICES, YOU AGREE TO THIS POLICY. IF YOU DO NOT AGREE TO THIS POLICY, PLEASE DO NOT USE THE SERVICE.

1. Collection of Your Information

We may collect and store various information about you including, for example, information that you provide to us, information that we automatically collect through your use of the Service (such as information obtained from our third party partners such as Plaid, Yodlee, etc.), and information from publicly available sources or third parties, as further detailed below. If you are an individual who utilizes our Services to obtain a financial product or service through us, we will use and share any information that we collect from or about you in accordance with our U.S. Consumer GLBA Financial Privacy Notice. Information subject to our Financial Privacy Notice is referred to as Non-Public Personal Information (“NPI”).

A. Information you provide us directly

The information we collect from you may vary depending on the product or service requested. We may ask for certain information such as your username, first and last name, birth date, telephone number, email address, social security number, income, and other details related to your financial situation when you use our Service. We may collect information that you voluntarily provide to us when using the Service. All of the information that we collect from you directly is identified in the forms, other places where you respond to questions, or where you indicate preferences throughout the Service, either online, through our app, or communicated through our customer service representatives.

We may also retain any messages you send through the Service, customer service correspondence (via telephone, chat, text (SMS or MMS), email or otherwise), and may collect information you provide in User Content you post to the Service. Communications to Possible or to third-parties through Possible by you or to you may be recorded or monitored for quality assurance, customer service, training and/or risk management purposes.

B. Information That Is Collected Automatically

In addition to the information you provide to us directly, we may automatically collect information about your use of the Service, as described below.

Log file information. Log file information is automatically reported by your browser each time you access the Service. When you use our Service, our servers may automatically record certain log file information. These server logs may include information such as your web request, Internet Protocol (“IP”) address, browser type, browser language, operating system, platform type, the state or country from which you accessed the Service, software and hardware attributes (including Device ID), referring / exit pages and URLs, number of clicks and how you interact with links on the Service, domain names, landing pages, pages viewed and the order of those pages, the date and time you used the Service and uploaded or posted content, error logs, files you download, and other such information.

Location information. When you use the Service, we may automatically collect general location information (e.g., IP address, city/state and or zip code associated with an IP address) from your computer or mobile device. Please note that if you disable such features, you may not be able to access or receive some or all of the services, content, features and/or products made available via the Service.

Cookies and other technologies. We and our third-party service providers may use cookies, clear GIFs, pixel tags, beacons, and other technologies that help us better understand user behavior, personalize preferences, perform research and analytics, deliver tailored advertising, and improve the products and services we provide. You can choose to accept or decline certain cookies. Most web browsers automatically accept cookies, but your browser may allow you to modify your browser settings to decline certain cookies if you prefer. If you disable cookies, you may be prevented from accessing or taking full advantage of the Services.

1. Cookies. When you visit the Service, we may send one or more cookies — a small text file containing a string of alphanumeric characters — to your computer that uniquely identifies your browser or stores information or settings on your device. Cookies let us help you log in faster and enhance your navigation through the site. A cookie may also convey information to us about how you use the Service (e.g., the pages you view, the links you click and other actions you take on the Service), and allow us or our business partners to track your usage of the Service over time. A persistent cookie remains on your hard drive after you close your browser. Persistent cookies may be used by your browser on subsequent visits to the site. Persistent cookies can be removed by following your web browser’s directions. A session cookie is temporary and disappears after you close your browser. Our Service may use HTTP cookies, HTML5 cookies and other types of local storage (such as browser-based or plugin-based local storage).

2. Clear gifs/web beacons. When you use the Service, we may employ clear gifs (also known as web beacons) which are used to anonymously track the online usage patterns of our Users. In addition, we may also use clear gifs in HTML-based emails sent to our users to track which emails are opened, which links are clicked by recipients, and whether our emails are forwarded. The information allows for more accurate reporting and improvement of the Service.

3. Web analytics. We may use third-party Web analytics services on our Service, such as those of Google Analytics. These service providers use the technology described above to help us analyze how users use the Service. The information collected by the technology (including your IP address) will be disclosed to or collected directly by these service providers. To prevent Google Analytics from using information for analytics, a user may install the Google Analytics Opt-Out Browser Add-on by clicking here.

4. Third-Party Ad Targeting. We sometimes use the above technologies for interest-based advertising, which may be based on your device or browser’s signals received across websites or applications, and over time. Please see the section titled “Tailored Advertising” to learn how you can opt out of these marketing methods and technologies.

We may use this information in a number of ways, including: (a) to remember information so that you will not have to re-enter it during your visit or the next time you visit Us; (b) to provide custom, personalized content and information; (c) to provide our Service and monitor its effectiveness; (d) to monitor aggregate metrics such as total number of visitors, traffic, and demographic patterns; (e) to diagnose or fix technology problems; (f) to help you efficiently access your information after you sign in; and (g) to deliver advertising to you.

C. Information from Third-Party Sources

We may receive information about you from publicly and commercially available sources, as permitted by law, which we may combine with other information we receive from or about you. For example, when you apply for a loan, we conduct due diligence about who you are as well as conduct a soft credit inquiry. We may use third party service providers who provide information about you in order for us to perform this due diligence such as credit reporting agencies.

In order to display information to you or to fulfill your requests for certain products and services we may collect, on your behalf, your account and other personal information from third-party sites that you register under your account via the Service. We may also collect information about you from mailing list providers, publicly available sources, identification verification services and other third parties. For example, Possible uses Plaid, Inc. and Yodlee to gather your bank account and other financial data from financial institutions. Likewise, Possible may also use a third party to verify your income.

By using our Service, you grant Possible, Plaid, and Yodlee, and other third-party service providers the right, power, and authority to act on your behalf to access and transmit your personal and financial information from the relevant financial institution. You understand and agree that we may use Plaid, and Yodlee to access your bank account and other financial information as long as you are registered with our Service and your connection(s) with these companies are still active to evaluate you for future credit options with us. You understand and agree to your personal and financial information being transferred, stored, and processed by Plaid, Yodlee and in accordance with the Plaid’s, and Yodlee’s privacy policy. Possible does not bear any responsibility for any actions or policies of third parties.If you choose to access, visit and/or use any third party social networking service(s) that may be integrated with or linked to the Service, we may receive Personal Information and other information about you and your computer, mobile or other device that you have made available to those services. We reserve the right to use, transfer, assign, sell, share, and provide access to all Personal Information and other information about you and your computer, mobile or other device that we receive through third-party social networking services in the same ways described in this Privacy Policy as all of your other information.

2. Tailored Advertising

We neither have access to, nor does this Privacy Policy govern, the use of cookies or other tracking technologies that may be placed on your computer, mobile phone, or other device you use to access the Service by non-affiliated, third-party ad technology, ad servers, ad networks or any other non-affiliated third-parties. Those parties that use these technologies may offer you a way to opt out of ad targeting as described below. If you receive tailored advertising on your computer through a web browser, you can learn more about such tailored browser advertising and how you can generally control cookies from being put on your computer to deliver tailored advertising, by visiting the Network Advertising Initiative’s Consumer Opt-Out link or the Digital Advertising Alliance’s Consumer Opt-Out link to opt-out of receiving tailored advertising from companies that participate in those programs.

To opt out of Google Analytics for display advertising or customize Google display network ads, you can visit the Google Ads Settings page on your browser.

We may use Facebook Inc. remarketing services. You can learn more about interest-based advertising and how ads work from Facebook by visiting this page: https://www.facebook.com/help/516147308587266/how-ads-work-on-facebook/. To opt-out from Facebook’s interest-based ads follow these instructions from Facebook: https://www.facebook.com/help/568137493302217. Facebook adheres to the Self-Regulatory Principles for Online Behavioral Advertising established by the Digital Advertising Alliance. You can also opt-out from Facebook and other participating companies through the Digital Advertising Alliance in the USA http://www.aboutads.info/choices/. For more information on the privacy practices of Facebook, please visit Facebook’s Data Policy: https://www.facebook.com/privacy/explanation.

Please note that to the extent advertising technology is integrated into the Service, you may still receive advertisements even if you opt out. In that case, the advertising will not be tailored to your interests. Also, we do not control any of the above opt-out links or whether any particular company chooses to participate in these opt-out programs. We are not responsible for any choices you make using these mechanisms or the continued availability or accuracy of these mechanisms.

3. Do Not Track Signals and Similar Mechanisms

Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

4. Use of Your Information

We may use your information and/or combine any or all elements of your information for a number of purposes, including:

To provide you with and manage the Service. We use your information to provide, develop, maintain and improve our Service and the features and functionality of the Service. This may include customization and tailoring the Service features according to the information that you provide.

To process and fulfill a request or other transaction submitted to us. We use your information to process or fulfill requests or transactions that you have requested.

To communicate with you. We use the information we collect or receive to communicate directly with you. We may send you emails containing newsletters, promotions and special offers. If you do not want to receive such email messages, you will be given the option to opt out or change your preferences. We also use your information to send you Service-related emails (e.g., account verification, changes/updates to features of the Service, technical and security notices). You may not opt out of Service-related emails.

Provide personalized services, including content, products or services. We may use the information we collect to provide personalized services and advertising to you. To learn more about your choices in connection with the use of your information for this purpose, please see the section above titled, “Tailored Advertising.”

Surveys, Offers. We may use your information to conduct surveys or provide you special offers.

Marketing and Advertising. We may use your information to market and advertise our services and the services of certain third parties we work with.

Unique Identifiers. Sometimes, we (or our service providers) may use the information we collect – for instance, log-in credentials, IP addresses and unique mobile device identifiers – to locate or try to locate the same unique users across multiple browsers or devices (such as smartphones, tablets, or computer), or work with providers that do this, in order to better tailor advertising, content, and features, and provide you with a seamless experience across devices. If you wish to opt out of cross device tracking for purposes of interest-based advertising, you may do so through your Android or Apple device-based settings.

Research and Analytics. We may use your information for research and analytical purposes, for example, to identify trends and effectiveness of certain marketing campaigns we run.

Business Operations. We may use your information for certain operational purposes including, for example, performing audits and quality control.

To protect the rights of Possible and others. We may use your information as we believe is necessary or appropriate to protect, enforce, or defend the legal rights, privacy, safety, security, or property of Possible, its employees or agents, or other users and to comply with applicable law.

With your consent. We may otherwise use your information with your consent or at your direction.

To aggregate/de-identify data. We may aggregate and/or de-identify information collected through the Service. We may use de-identified and/or aggregated data for any purpose and without any restrictions, including without limitation for research and marketing purposes, and may also share such data with any third parties, including advertisers, promotional partners, sponsors, event promoters, and/or others.

5. Sharing of your information

We may share the information we collect or receive from you in a variety of circumstances, including as listed below.

Service providers. We may share your personal information with third parties who work on behalf of, or with, us such as vendors, processors, agents and other representatives. Service providers assist us with a variety of functions. This includes, for example, assisting with customer service-related functions, providing advertising (including interest-based advertising) and analytics services (e.g., Google Analytics and Facebook Custom Audiences), helping us verify your identity, providing website hosting services (e.g., Amazon Web Services), assisting with auditing functions, and helping us with marketing and related research activities.

Marketing partners. We may share your personal information with third-party marketing partners including partners who we conduct joint-marketing activities with or who we offer a co-branded service with. Marketing partners also include those entities who maintain a link to our Services on their site, or a Possible widget on their site, when you interact with that widget or click from their site to our Services.

Other parties when required by law or as necessary to protect our users and services. Possible may share your information where required to do so by law or subpoena or if we reasonably believe that such action is necessary to (a) comply with the law and the reasonable requests of law enforcement; (b) enforce our Terms of Use or to protect the security or integrity of our Service; and/or (c) exercise or protect the rights, property, or personal safety of Possible, our Users or others.

Business transfers. We may buy or sell/divest/transfer Possible (including any shares in Possible), or any combination of its products, services, assets and/or businesses. Your information, which may include NPI, user names and email addresses, User Content and other user information related to the Service may be among the items sold or otherwise transferred in these types of transactions. We may also sell, assign or otherwise transfer such information in the course of corporate divestitures, mergers, acquisitions, bankruptcies, dissolutions, reorganizations, liquidations, similar transactions or proceedings involving all or a portion of Possible.

Public Forums. Any information or content that you voluntarily disclose for posting to the Service, such as User Content, becomes available to the public, as controlled by any applicable privacy settings. Subject to your profile and privacy settings, any User Content that you make public is searchable by other Users. If we remove information that you posted to the Service, copies may remain viewable in cached and archived pages of the Service, or if other Users have copied or saved that information. We are not responsible for the information that you choose to submit in your User Content.

Aggregated or de-identified information. We may also aggregate or de-identify data and may share that data without restriction.

Otherwise with your consent or at your direction. In addition to the sharing described in this Privacy Policy, we may share information about you with third-parties whenever you consent to or direct such sharing.

6. How We Store and Protect Your Information

Possible takes technical and organizational measures to protect your data against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access. These measures vary depending on the sensitivity of the information we have collected from you. However, no method of transmission over the Internet or via mobile device, or method of electronic storage, is absolutely secure. Therefore, while we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security. Possible is not responsible for the functionality or security measures of any third-party.

To protect your privacy and security, we take steps (such as requesting a unique password) to verify your identity before granting you access to your account. You are responsible for maintaining the secrecy of your unique password and account information, and for controlling access to your email communications from Possible, at all times. Do not share your password with anyone and do limit your access to your computer or other devices by signing off after you have finished accessing your account.For information about how to protect yourself against identity theft, please refer to the Federal Trade Commission’s website at www.ftc.gov/news-events/media-resources/identity-theft-and-data-security.

7. Your Choices About Your Information

A. Your Account Information and Settings

If you choose to set up an account, you may update your account information at any time by logging into your account and changing your profile settings. You can also contact us at [email protected] to change your preferences.

B. Email Promotions

You can stop receiving promotional email communications from us by clicking on the “unsubscribe link” provided in such communications. We make every effort to promptly process all unsubscribe requests. You may not opt out of Service-related communications (e.g., account verification, transaction-related updates, changes/updates to features of the Service, and technical and security notices). If you have any questions about reviewing or modifying your account information, you can contact us directly at [email protected].

C. Opt-Out and Annual Notice

If you are an individual and have a financial product or service with us, we will use and share any information that we collect from or about you in accordance with our Financial Privacy Notice.

D. Choices Relating to Tailored Advertising

Please see the section above titled, “Tailored Advertising,” for your choices relating to certain interest-based advertising.

8. How Long We Keep Your User Content

Following termination or deactivation of your User account, Possible may retain your profile information and User Content for an additional period of time for backup, archival, or audit purposes. In certain circumstances, we are required by Federal and State regulations to store various information. In order to comply with those requirements, we may be unable to delete your information from our database until the legally required retention period expires. You may instruct us to remove your personal information within the Possible app or by contacting us at [email protected], and we will delete your information to the extent it is not prohibited by law or it is not necessary to comply with legal obligations, resolve disputes, or enforce our agreements.

9. Children’s Privacy

Possible does not knowingly collect or solicit any information from anyone under the age of 13 or allow such persons to register as Users. In the event that we learn that we have collected personal information from a child under the age of 13, we will promptly delete that information. If you believe that we might have collected any information from a child under 13, please contact us at [email protected].

10. Links to Other Web Sites and Services

We are not responsible for the practices employed by websites or services linked to or from the Service or to which you direct Possible to retrieve information, including the information or content contained therein. Please remember that when you use a link to go from the Service to another website, our Privacy Policy does not apply to third-party websites or services. Your browsing and interaction on any third-party website or service, including those that have a link or advertisement on our website, are subject to that third-party’s own rules and policies. In addition, you agree that we are not responsible for, and we do not have control over, any third-parties that you authorize to access your User Content. If you are using a third-party website or service and you allow such a third-party access to your User Content, you do so at your own risk. Possible is also not responsible for sites directing you to Possible. Our Terms of Use and Privacy Policy do not apply to those third-party sites either.

11. Your California Privacy Rights

California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits Users who are California residents to request and obtain from us once a year, free of charge, information about the personal information (if any) we disclosed to third-parties for direct marketing purposes in the preceding calendar year. If applicable, this information would include a list of the categories of personal information that were shared and the names and addresses of all third-parties with whom we shared information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to:

Attention: Legal Department

Possible Financial Inc.

2231 1st Avenue Suite B

Seattle, WA 98121