Effective Date: 23.3.26 Last Updated: 20.4.26

1. Introduction

This Privacy Policy describes how Frank ("Talk to Frank," "we," "us," or "our") collects, uses, and discloses information about you when you visit or use www.talktofrank.ai (the "Site") and the information and advice services we offer through it (collectively, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use the Services.

2. Information We Collect

2.1 Information You Provide to Us

We collect information you provide directly when you create an account or interact with the Services, including:

• Account information: your name and email address.

• Communications: any information you include when you contact us for support, feedback, or other inquiries.

2.2 Information We Collect Automatically

When you use our Services, we may automatically collect certain information, including:

• Device and usage information: IP address, browser type, operating system, referring URLs, pages viewed, and the dates and times of your visits.

• Cookies and similar technologies: small data files stored on your device that help us operate and improve the Site. You can control cookies through your browser settings.

2.3 Information from Third Parties

We may receive information about you from third-party service providers who help us operate the Services, such as analytics or hosting providers.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Services.

• Create and manage your account.

• Communicate with you, including responding to your inquiries and sending service-related notices.

• Improve, personalize, and expand the Services.

• Monitor and analyze usage and trends.

• Detect, investigate, and prevent fraudulent or unauthorized activity.

• Comply with legal obligations and enforce our terms.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service providers: with vendors and contractors who perform services on our behalf, such as hosting, analytics, and email delivery, and who are contractually obligated to protect your information.

• Legal compliance: when required by law, subpoena, court order, or other legal process, or to protect the rights, property, or safety of Talk to Frank, our users, or others.

• Business transfers: in connection with a merger, acquisition, financing, or sale of all or part of our business.

• With your consent: in any other circumstance with your explicit consent.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When your information is no longer needed, we will delete or anonymize it.

6. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information. However, no method of transmission over the Internet or electronic storage is fully secure, and we cannot guarantee absolute security.

7. Your California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), provides you with specific rights regarding your personal information.

7.1 Categories of Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information, as defined under the CCPA:

• Identifiers: such as your name, email address, and IP address.

• Internet or other electronic network activity information: such as browsing history and information regarding your interaction with the Services.

7.2 Sources of Personal Information

We collect personal information directly from you, automatically through your use of the Services, and from third-party service providers.

7.3 Business Purposes for Collection

We collect personal information for the business purposes described in Section 3 above.

7.4 Categories of Third Parties with Whom We Share Information

We share personal information with the categories of recipients described in Section 4 above, including service providers, legal and regulatory authorities, and parties to business transfers.

7.5 Sale or Sharing of Personal Information

We do not sell or share your personal information for cross-context behavioral advertising, as those terms are defined under the CCPA.

7.6 Your Rights Under the CCPA

Subject to certain exceptions, California residents have the right to:

• Know: request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collecting it, and the categories of third parties with whom we share it.

• Delete: request that we delete personal information we have collected from you.

• Correct: request that we correct inaccurate personal information we maintain about you.

• Opt out of sale or sharing: opt out of the sale or sharing of your personal information. As noted, we do not sell or share personal information.

• Limit use of sensitive personal information: to the extent we collect sensitive personal information, request that we limit its use and disclosure.

• Non-discrimination: not be discriminated against for exercising any of your CCPA rights.

7.7 How to Exercise Your Rights

To exercise any of these rights, please contact us using the information in Section 11. We will need to verify your identity before processing your request, which may include asking you to confirm information we already hold about you. You may also designate an authorized agent to make a request on your behalf, in accordance with applicable law.

We will respond to verifiable consumer requests within the timeframes required by the CCPA.

8. Children's Privacy

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us so we can delete it.

[OPTIONAL: If your service includes content that may be relevant to teens, you may want to add specific language about users between 13 and 18.]

9. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies before providing them with any personal information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will revise the "Last Updated" date at the top of this policy. Material changes will be communicated through the Services or by other reasonable means. Your continued use of the Services after the updated policy takes effect constitutes acceptance of the changes.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

loans@talktofrank.ai