California Privacy Rights Act Notice of Collection

Jora Credit is providing this notice to you pursuant to the California Consumer Privacy Act of 2018 (the “CCPA”) and the California Privacy Rights Act of 2020 (the “CPRA”). This notices only applies to residents of the State of California and does not apply to residents of any other states, districts, territories, or countries.

This notice details certain rights available to residents of California found in the CCPA and CPRA.

• The right to know the information we collect about you
• The right to know what information we share about you with third parties
• The right to make the following requests:
  • The categories of personal information we collected about you within the preceding 12 months
  • The categories of sources from which the personal information is collected
  • The business or commercial purpose for which we collected personal information
  • The categories of third parties with whom information is shared
  • The specific pieces of personal information that we have collected about you
• The right to request the deletion of certain personal information
• The right to non-discrimination in accessing products and services when exercising these rights

You have the right under the CCPA and CPRA to request that we disclose to you certain personal information about you that we collect, use, disclose, share, and sell that is not subject to the exemption of information covered under the federal Gramm-Leach-Bliley Act (“GLBA”), and its implementing regulations, the California Financial Information Privacy Act or the Fair Credit Reporting Act.

To learn about how we collect, use, disclose, or share your information covered by the GLBA and these other acts, you can view our Privacy Disclosure, email us at support@joracredit.com, or call us at 1-888-256-6083.

Jora Credit obtains the following categories of personal information:

• “California residents” or their representatives via physical, audible, and electronic sources such as websites, application information and social media.
• “Public records” including information from federal, state, or local governments. Public records could include information obtained from media sources
• “Third parties” such as service providers and consumer data companies that assist us with making credit decisions, underwriting loans, preventing fraud, marketing to customers, and otherwise supporting our daily business activities. These third parties include other financial institutions, affiliated and unaffiliated service providers, and data providers.
• Information from our “Affiliate(s)” as disclosed on our Privacy Disclosure.

Jora Credit shares personal information with affiliated and unaffiliated third-parties in order to open and service loan accounts only. We have shared personal information during the preceding 12 months with following categories of third parties.

• “Service Providers” who provide services including website hosting, data analysis, payment processing, information technology and infrastructure support, customer service, email delivery, auditing, marketing, credit reporting, underwriting, and fraud prevention.
• “Third Parties” who provide services including banking, payment, communication, storage, legal advice, tax expertise, notaries, auditors.
• “Government Agencies” who audit, exam, or otherwise regulate our lending activities as required by laws and regulations.

Jora Credit collects personal information in order to perform the following activities:

• “Business Operations” – Actions performed by Jora Credit to obtain, underwrite, decision, originate, service, and/or collect on loan accounts.
• “Quality Control” – Activities to improve our services and products through the review and monitoring of accounts.
• “Security” – Activities designed to secure information systems through the detection and prevention of malicious and illegal activities.
• “Systems Maintenance” – Activities performed to ensure the continued availability of our systems and products.
• “Audit and Compliance” – Review and monitoring of accounts and operations to ensure compliance with applicable laws and regulations.

Jora Credit does not sell your personal information.

You have the right under the CCPA and CPRA to request that Jora Credit deletes the personal information we have collected about you, so long as it is not subject to an exemption under the law. Most of information we collect about you is governed by the GLBA and/or the federal Right to Financial Privacy Act, and is collected, used, and/or shared in order to provide you with financial products or services. This information is exempt from the provisions of the CCPA and CPRA.

We also collect information necessary to process transactions, loan application, maintain and service accounts. This information is required to be retained under federal and state law and is not subject to deletion.

If you are a resident of California (or an authorized agent thereof), you may make a request for the disclosures described above and/or make a request for us to delete applicable information we collected from you. You are permitted by law to make this request no more than twice in a 12-month period. You may submit a request using one of the following methods:

• Calling 1-888-256-6083
• Emailing support@joracredit.com
• Visiting joracredit.com/cpra-form

You have the right to designate an authorized agent who may act on your behalf. We may require you to provide the authorized agent written permission to do so. We will also directly verify your identity, except where an agent was authorized by a power of attorney pursuant to California Probate Code sections 4000 to 4465. We may deny a request from an agent that does not submit proof that they have been authorized by you to act on your behalf.

Upon submission of your request, we will acknowledge receipt of it within 10 business days. We will also take steps necessary to verify your identity. We will not be able to fulfill your request if we are unable to verify your identity. Your request also may not be fulfilled if it violates the rights of a third person or if the information we have about you is not covered by the CCPA and/or CPRA or is subject to retention requirements of other federal or state laws. We will notify you if we cannot honor your request.

Requests for non-public personal information such as your Social Security number, driver’s license or other government-issued identification number, an account password, or security questions and answers are not permitted and will not be honored.

All verified requests will be processed within 45 calendar days pursuant to the CCPA and CPRA. If we are unable to meet that requirement, we may have up to an additional 45 calendar days after we provide you with notice and an explanation of our delay.

Jora Credit will not discriminate against a consumer who has exercised any rights granted under the CCPA or CPRA.