Effective Date: May 23, 2026

Location of Operations: Montgomery County, TexasThis Privacy Policy explains how our lending company ("Company," "we," "us," or "our") collects, uses, maintains, protects, and discloses personal information, including Sensitive Personal Information and Social Security Numbers (SSNs), provided by applicants, customers, and visitors to our platform.We operate in compliance with the Texas Business and Commerce Code Chapter 501 (Protection of Social Security Numbers), Chapter 521 (Identity Theft Enforcement and Protection Act), and federal financial privacy laws including the Gramm-Leach-Bliley Act (GLBA).1. Information We CollectIn the regular course of assessing creditworthiness, underwriting loans, and processing transactions, we collect information that identifies you, including:

Personal Identifying Information: Full name, date of birth, driver’s license number, or other government-issued identification.

Sensitive Financial Information: Social Security Number (SSN), bank account numbers, credit history, income statements, employment history, and payment records

.Contact Information: Physical address, billing address, email address, and telephone numbers.2. Statutory Social Security Number (SSN) Protection PolicyPursuant to

Texas Business & Commerce Code § 501.052, this company has implemented strict measures to protect the confidentiality and security of Social Security Numbers.How

We Collect SSNs: We only collect SSNs through secure, encrypted online loan applications or through direct, verified physical documentation provided by the applicant.

Permitted Uses: SSNs are collected exclusively for lawful business purposes, including verifying your identity, pulling credit reports from consumer reporting agencies, preventing fraud, and fulfilling state and federal regulatory reporting mandates.

Access Limitations: We restrict access to SSNs to authorized employees, underwriters, and contract vendors who require the information to perform critical, defined administrative duties related to your loan application or account management.

Prohibition of Public Disclosure: We do not publicly display, sell, lease, or disclose your SSN to unauthorized third parties. We do not print SSNs on membership or access cards, nor do we send them via unencrypted mailings unless required by law.3. How We Share Your InformationWe share nonpublic personal information with third parties only as permitted or required by law to facilitate your lending transaction. This includes sharing with:Consumer reporting bureaus (to pull credit histories and report payment histories).Technology and software vendors assisting in loan processing, document verification, and servicing.State or federal regulatory and law enforcement entities in response to legal subpoenas or mandatory compliance reporting.4. Data Security & Storage ControlsWe maintain robust physical, electronic, and procedural safeguards designed to protect your sensitive data from unauthorized access, alteration, or disclosure:

Digital Data: Electronic records containing sensitive info are maintained on restricted, password-protected, and firewalled database networks. All digital transmissions of SSNs require secure encryption protocols

.Physical Records: Any physical or paper documents containing personal identifying details are held within restricted-access locking storage files located at our corporate offices in Montgomery County, Texas.5. Mandatory Record Disposal PolicyIn compliance with

Texas Bus. & Com. Code § 521.052, when customer records containing sensitive personal information (such as an SSN or financial account number) are no longer required to be retained by state or federal financial recordkeeping laws, they are systematically destroyed:Paper records are rendered completely unreadable via secure, industrial shredding.Electronic media files are permanently erased, degaussed, or overwritten using industry-standard digital data sanitization practices to ensure the information is entirely indecipherable.6. Data Breach Notification CommitmentsIn the event of an unauthorized acquisition of computerized data that compromises the security, confidentiality, or integrity of your sensitive personal information, we adhere strictly to the

Texas Identity Theft Enforcement and Protection Act (§ 521.053). We will notify affected individuals without unreasonable delay, and no later than 60 days after determining a breach occurred. If a breach impacts 250 or more Texas residents, we will concurrently report the event directly to the Office of the Texas Attorney General within 30 days.7. Contact InformationFor questions regarding this Privacy Policy, your data rights, or our security protocols regarding your Social Security Number, please reach out to our compliance department directly.Disclaimer: While this draft directly addresses the core text-based requirements of Texas Business and Commerce Code Chapters 501 and 521, financial privacy laws are heavily dependent on your specific loan products, licensing (such as OCCC regulation in Texas), and federal frameworks. You should have your final draft reviewed by qualified legal counsel prior to publishing live.