CCPA Disclosure and Notice at Collection

Notice at Collection

This Notice at Collection applies to California consumers and describes the categories of personal information IncoXchange collects about you and the purposes for which we will use such information. This notice is provided pursuant to the California Consumer Privacy Act (CCPA).

Categories of Personal Information Collected

We collect the following categories of personal information:

• • Identifiers: Such as name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers
• • Customer Records: Such as bank account number, credit or debit card number, or any other financial or payment information
• • Protected Classification Characteristics: Such as age, citizenship status, marital status, disability status
• • Commercial Information: Including records of services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies
• • Internet or Network Activity: Including browsing history, search history, and information regarding interaction with an internet website, application, or advertisement
• • Geolocation Data: Physical location or movements
• • Audio, Electronic, Visual, or Similar Information: Such as call recordings and photographs
• • Professional or Employment Information: Current or past job history, performance evaluations, business contact information
• • Education Information: Records maintained by educational institutions or parties acting on their behalf
• • Inferences: Drawn from any of the information identified above to create a profile reflecting preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes

Sensitive Personal Information

We may also collect the following categories of sensitive personal information:

• • Social Security number, driver's license number, state identification card number, or passport number
• • Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account
• • Precise geolocation
• • Racial or ethnic origin, religious or philosophical beliefs, or union membership
• • Contents of mail, email, and text messages where we are not the intended recipient
• • Genetic data, biometric information, health information

We use and disclose sensitive personal information only for purposes authorized by CCPA regulations, including to provide the services you request, prevent fraud and ensure security, and comply with legal obligations.

Sources of Personal Information

We collect personal information from the following sources:

• • Directly from you when you apply for services, create an account, or communicate with us
• • Automatically through your use of our website, mobile applications, or services
• • From third-party sources including credit bureaus, identity verification services, fraud prevention services, payment processors, and public databases
• • From our business partners and affiliates
• • From social media platforms

Purposes for Collection and Use

We collect and use personal information for the following business and commercial purposes:

• • Service Delivery: To provide factoring, invoice financing, asset-based lending, and related financial services
• • Account Management: To create and maintain your account, process transactions, and manage your relationship with us
• • Credit and Risk Assessment: To evaluate creditworthiness, assess financial risk, and make lending decisions
• • Identity Verification: To verify your identity and comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements
• • Fraud Prevention: To detect, prevent, and investigate fraud and other illegal activities
• • Communication: To respond to inquiries, provide customer support, and send service-related communications
• • Marketing: To provide personalized content, recommendations, and promotional offers
• • Analytics and Improvement: To analyze usage patterns, improve our services, and develop new products and features
• • Legal Compliance: To comply with applicable laws, regulations, legal processes, and governmental requests
• • Security: To maintain the security and integrity of our systems and protect against cybersecurity threats
• • Business Operations: To conduct audits, financial reporting, and other internal business operations

Disclosure of Personal Information

We may disclose personal information to the following categories of third parties:

• • Service providers that perform services on our behalf
• • Financial institutions and payment processors
• • Credit bureaus and consumer reporting agencies
• • Identity verification and fraud prevention services
• • Professional advisors including attorneys, accountants, and auditors
• • Government agencies and law enforcement
• • Affiliates within the IncoXchange corporate family
• • Third parties in connection with corporate transactions such as mergers or acquisitions

We do not sell personal information to third parties for monetary consideration.

Retention

We retain personal information for as long as necessary to fulfill the purposes described in this notice, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of information, the purpose for which it was collected, and legal requirements.

Your California Privacy Rights

As a California resident, you have the following rights under the CCPA:

• • Right to Know: Request information about the personal information we collect, use, disclose, and sell
• • Right to Delete: Request deletion of your personal information, subject to certain exceptions
• • Right to Correct: Request correction of inaccurate personal information
• • Right to Opt-Out: Opt out of the sale or sharing of your personal information
• • Right to Limit: Limit the use and disclosure of sensitive personal information
• • Right to Non-Discrimination: Not receive discriminatory treatment for exercising your CCPA rights

For more information about these rights and how to exercise them, please see our California Consumer Privacy Notice.

How to Exercise Your Rights

To exercise your CCPA rights, you may:

• • Call us at +1 (888) 893-3263
• • Email us at privacy@incoxchange.com
• • Submit a request through your account settings

We will verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf.

Updates to This Notice

We may update this CCPA Disclosure and Notice at Collection from time to time. When we make material changes, we will update the "Last Updated" date at the top of this notice and may provide additional notice as required by law.

Contact Us

If you have questions about this CCPA Disclosure or our privacy practices, please contact us: