Privacy Policy

1. Scope & Applicability

This Privacy Policy applies to all personal information collected by CreditHaven through our website (www.credithaven.ai), our platform, mobile applications, and any related services, tools, or features (collectively, the "Services"). This policy applies to all users of the Services, including consumers seeking financial products, lending partners, advertisers, and administrative users.

This Privacy Policy does not apply to information collected by third parties, including our lending partners, financial service providers, and advertisers, who may have their own privacy policies. We encourage you to read the privacy policies of any third-party services you access through our platform.

By using the Services, you agree to the terms of this Privacy Policy and our Terms of Service. If you do not agree with the practices described in this policy, please do not use the Services.

2. Information We Collect

a) Information You Provide Directly

We collect information that you voluntarily provide when using the Services, including:

• Account Information: Name, email address, phone number, username, and password when you create an account;
• Profile Information: Job title, company name, business address, and other professional details;
• Financial Information: Income, employment status, credit score range, loan amounts, property information, and other details you provide when requesting financial product matches;
• Identity Verification: Social Security number (or last four digits), date of birth, and government-issued identification when required for identity verification;
• Communications: Information you provide when you contact us for support, submit feedback, or participate in surveys;
• Transaction Information: Records of the financial products you inquire about, applications you submit, and offers you receive through the Services.

b) Information Collected Automatically

When you access the Services, we automatically collect certain information, including:

• Device Information: IP address, browser type and version, operating system, device type, unique device identifiers, and device settings;
• Usage Information: Pages viewed, links clicked, time spent on pages, search queries, referring URLs, and other interaction data;
• Location Information: General geographic location based on your IP address or, with your consent, more precise location data from your device;
• Log Data: Server logs that record information about your use of the Services, including access times, error logs, and crash data.

c) Information from Third-Party Sources

We may receive information about you from third-party sources, including:

• Credit Bureaus: Credit report data, credit scores, and credit history when you authorize us to obtain such information;
• Lending Partners: Status updates on applications you submit, including approval, denial, or pending status;
• Data Providers: Demographic data, consumer behavior data, and publicly available information from data aggregation services;
• Analytics Providers: Information about your online activities across websites and applications;
• Social Media Platforms: If you connect a social media account, we may receive profile information based on your privacy settings on those platforms.

d) Mobile Phone and SMS Data

When you provide a mobile telephone number through the Services, we collect and use that number to:

• Send transactional text messages (e.g., application status updates, verification codes, account alerts);
• Send promotional SMS/MMS messages about insurance products and services, subject to your consent;
• Share with our network of insurance and financial partners who may contact you by text message, as described in Section 4 and in our Terms of Service.

Your consent to receive SMS communications from CreditHaven and its partners is governed by the SMS/Text Message Terms in our Terms of Service (Section 21). You may opt out of SMS messages at any time by replying STOP to any message from CreditHaven. Standard message and data rates may apply.

We do not collect or retain the content of SMS messages you send or receive; we only collect the mobile number and associated opt-in/opt-out status for compliance purposes.

3. How We Use Your Information

We use the information we collect for the following purposes:

a) Providing and Improving the Services

• Matching you with relevant financial products and lending partners;
• Processing your applications and transmitting them to our partner network;
• Personalizing your experience and the content and offers presented to you;
• Operating, maintaining, and improving the Services;
• Developing new features, products, and services.

b) Communications

• Sending you transactional emails, such as account confirmations and password resets;
• Providing customer support and responding to your inquiries;
• Sending marketing communications about products, services, and offers (with your consent where required);
• Sending surveys and requests for feedback to improve our Services.

c) Analytics and Research

• Analyzing usage patterns and trends to understand how users interact with the Services;
• Conducting market research and data analysis;
• Generating aggregated, de-identified data for statistical analysis and business intelligence;
• Measuring the effectiveness of our marketing campaigns and partner programs.

d) Security and Compliance

• Detecting, investigating, and preventing fraudulent transactions and unauthorized access;
• Verifying your identity and preventing impersonation;
• Complying with legal obligations, regulatory requirements, and law enforcement requests;
• Enforcing our Terms of Service and protecting the rights and safety of CreditHaven and our users.

4. How We Share Your Information

We may share your personal information with the following categories of recipients:

a) Lending and Financial Partners

When you request financial product matches or submit applications, we share your information with our network of lending partners, credit card issuers, insurance providers, and other financial service companies who may offer you products and services. These partners have their own privacy policies and terms of use.

b) Service Providers

We engage third-party companies and individuals to perform services on our behalf, including hosting, data analytics, email delivery, customer support, marketing, and payment processing. These service providers have access to your information only to perform tasks on our behalf and are obligated to protect your information.

c) Advertising and Analytics Partners

We share information with advertising networks, analytics providers, and social media platforms to deliver targeted advertising, measure ad performance, and understand user behavior. This may include sharing your information through cookies, pixels, and similar technologies.

d) Corporate Transactions

If CreditHaven is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your personal information.

e) Legal and Regulatory Compliance

We may disclose your information when we believe in good faith that disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or governmental request;
• Enforce our Terms of Service and other agreements;
• Protect the rights, property, or safety of CreditHaven, our users, or the public;
• Detect, prevent, or address fraud, security, or technical issues.

f) Aggregated and De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other purposes.

5. Cookies & Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your interactions with the Services. These technologies help us:

• Remember your preferences and settings;
• Authenticate your identity and maintain your session;
• Analyze traffic patterns and measure the effectiveness of our Services;
• Deliver targeted advertising and measure ad performance;
• Detect and prevent fraud and security threats.

Types of Cookies We Use:

• Essential Cookies: Required for the operation of the Services. These include cookies that enable you to log into your account and navigate the platform.
• Performance Cookies: Collect information about how you use the Services, such as which pages you visit most often. This data is used to optimize the platform.
• Functional Cookies: Allow the Services to remember choices you make (such as language or region) and provide enhanced features.
• Advertising Cookies: Used to deliver advertisements relevant to your interests and to measure the effectiveness of advertising campaigns.

Managing Cookies: Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all or some cookies, or to alert you when cookies are being sent. However, if you disable or refuse cookies, some parts of the Services may become inaccessible or not function properly.

Do Not Track: Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to be tracked. Because there is no accepted standard for how to respond to DNT signals, the Services do not currently respond to DNT signals.

Partner Tracking Technologies: When you click through to a partner's website from CreditHaven, or when our partners deliver ads to you across the web, those partners may set their own cookies, pixels, and tracking technologies on your device. CreditHaven does not control these third-party tracking technologies and is not responsible for the information they collect. We encourage you to review the privacy policies of any partner websites you visit. Additionally, our advertising partners may use their own pixels on our site to measure ad performance and attribute conversions — these partners operate under their own privacy policies and may collect device identifiers, IP addresses, and behavioral data independently of CreditHaven.

6. Your Rights & Choices

Depending on your location and applicable law, you may have certain rights regarding your personal information:

a) Access and Portability

You may request access to the personal information we hold about you and receive a copy in a structured, commonly used, and machine-readable format.

b) Correction

You may request that we correct inaccurate or incomplete personal information we hold about you.

c) Deletion

You may request that we delete your personal information, subject to certain exceptions provided by law (such as compliance with legal obligations or completion of pending transactions).

d) Opt-Out of Marketing

You may opt out of receiving marketing communications from us by clicking the "unsubscribe" link in any marketing email, or by contacting us directly. Please note that even after opting out, you may continue to receive transactional and service-related communications.

e) Opt-Out of Sale or Sharing

If applicable under your state's privacy laws, you may have the right to opt out of the "sale" or "sharing" of your personal information. To exercise this right, please contact us using the information provided in the Contact section below.

f) Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. However, some features of the Services may require certain personal information, and opting out of providing that information may limit your ability to use those features.

g) Global Privacy Control (GPC)

CreditHaven recognizes and responds to the Global Privacy Control (GPC) browser signal as a valid opt-out of the "sale" and "sharing" of personal information for California residents (under CPRA) and Colorado residents (under the Colorado Privacy Act). If your browser transmits a GPC signal when you visit our website, we will treat it as a request to opt out of the sale or sharing of your personal information with our advertising and analytics partners. Please note that GPC opt-out does not apply to data shared with our insurance and financial partners for the purpose of fulfilling your quote or application requests, as that sharing is necessary to provide the Services you have requested.

h) Internal Do Not Call List

In addition to any rights you may have under the Federal or state Do Not Call registries, you have the right to request that CreditHaven place your telephone number on our internal Do Not Call list, which will restrict CreditHaven from making telephone solicitation calls to you. To make this request, please contact us at:

• Email: privacy@credithaven.ai (subject line: "Internal DNC Request")
• Mail: CreditHaven, Inc., Attn: Privacy Team — DNC, 1209 Orange Street, Wilmington, DE 19801

Please note that placing your number on CreditHaven's internal Do Not Call list does not prevent our insurance or financial partners, who received your information in connection with a quote request, from contacting you. To stop communications from those partners, you must contact each partner directly.

To exercise any of these rights, please contact us at privacy@credithaven.ai. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request.

7. Data Retention & Security

Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Services. We may also retain your information as necessary to:

• Comply with our legal and regulatory obligations (including financial record-keeping requirements);
• Resolve disputes and enforce our agreements;
• Prevent fraud and maintain security;
• Support business operations, including analytics and auditing.

When your information is no longer needed for these purposes, we will securely delete or anonymize it in accordance with our data retention policies.

Security

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect the security, confidentiality, and integrity of your personal information. These measures include:

• Encryption of sensitive data in transit and at rest;
• Access controls and authentication mechanisms;
• Regular security assessments and vulnerability testing;
• Employee training on data protection and privacy;
• Incident response procedures for data breaches.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials.

8. Children's Privacy

The Services are not intended for children under the age of 18. We do not knowingly collect, use, or disclose personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information as soon as possible.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@credithaven.ai so that we can take appropriate action.

9. State-Specific Disclosures

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected, the categories of sources from which we collected it, the business or commercial purpose for collection, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request that we delete personal information we collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: You have the right to opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information to purposes necessary to provide the Services.

CreditHaven does not sell personal information in the traditional sense. However, some of our data sharing practices with lending partners and advertising networks may constitute a "sale" or "sharing" under the CCPA/CPRA. To opt out, please contact us at privacy@credithaven.ai.

We will not discriminate against you for exercising your CCPA/CPRA rights.

Virginia, Colorado, Connecticut, Utah, and Other States

Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others) may have similar rights to access, correct, delete, and opt out of certain data processing activities. Please contact us to exercise your rights under your state's applicable privacy law.

Financial Privacy (Gramm-Leach-Bliley Act)

To the extent that CreditHaven is subject to the Gramm-Leach-Bliley Act (GLBA), we maintain policies and procedures to protect the security and confidentiality of nonpublic personal information as required by that Act and its implementing regulations.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy;
• Provide notice through the Services or via email;
• Obtain your consent where required by applicable law.

We encourage you to review this Privacy Policy periodically to stay informed about our data practices. Your continued use of the Services after the effective date of any changes constitutes your acceptance of the updated policy.

11. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

CreditHaven, Inc.
Attn: Privacy Team
Email: privacy@credithaven.ai
Website: www.credithaven.ai

For California-specific requests, you may also contact us at:

Email: ccpa@credithaven.ai

We will respond to all privacy-related requests within the timeframe required by applicable law, typically within 30 to 45 days of receiving your verified request.