Effective Date: 5 October 2024

Nexpocket (“Company,” “we,” “us,” or “our”) is dedicated to protecting your personal information and ensuring transparency about how we collect, use, share, and safeguard your data. This Privacy Policy explains the types of information we collect, why we collect it, how we use and share it, and your rights in relation to your data. By accessing or using our website (nexpocket.com) and services, you agree to the terms outlined in this Privacy Policy. Please read it carefully, and if you do not agree, do not use our services.

1. Introduction

This Privacy Policy applies to all users of Nexpocket’s services. It outlines:

The categories of data we collect
How we use and protect the information
Your rights regarding your data
The choices available to you

2. Types of Information We Collect

2.1 Personal Information

Personal information is data that can identify you as an individual. This may include:

Identification Data: Name, date of birth, gender, national ID numbers (e.g., Social Security Number, Tax ID).
Contact Details: Email address, phone number, mailing address.
Financial Information: Bank account information, credit history, income details, transaction records.
Employment Data: Job title, employer details, salary, and employment status.
Sensitive Personal Data: Information related to financial health or other data that may be required under certain loan or financial transactions.

2.2 Non-Personal Information

Non-personal data is information that does not directly identify you:

Device Information: Type of device, browser type, operating system.
Usage Data: The pages viewed, time spent on each page, user interactions, and site navigation.
Aggregated Data: General demographic or statistical data that does not reveal individual identities.

2.3 Cookies and Tracking Technologies

Nexpocket uses cookies and other tracking technologies for a better user experience, including:

Session Cookies: Used to remember your preferences during your visit.
Persistent Cookies: Remain on your device for subsequent visits.
Web Beacons: Small images used for tracking user behavior and engagement.
Third-Party Cookies: Set by external analytics and advertising partners.

2.4 Information from Third-Party Sources

We may obtain additional information about you from third parties, such as credit bureaus or marketing partners, to enhance the quality of our services.

3. How We Collect Your Information

We collect your information in various ways, including:

Directly from You: When you register, apply for a loan, or provide feedback.
Automatically: Through cookies, server logs, and analytics services.
From Third Parties: Through partners or affiliates that provide services on our behalf.

4. How We Use Your Information

We use the information we collect for several purposes:

4.1 To Provide and Improve Our Services

Loan Processing: Assess eligibility, process applications, and manage your account.
Personalization: Customize user experience and tailor content to your preferences.
Customer Support: Respond to inquiries, troubleshoot issues, and provide customer care.

4.2 Communication

Service Notifications: Updates, confirmations, and alerts about your account.
Promotional Emails: Special offers, newsletters, and marketing communications (with consent).
Feedback and Surveys: Request for feedback or participation in surveys.

4.3 Legal and Compliance

Regulatory Requirements: Adhere to applicable laws, regulations, and standards, including KYC and AML requirements.
Fraud Prevention and Security: Detect, prevent, and address fraudulent activities and security issues.

4.4 Data Analysis and Research

We may use data for internal analytics and research purposes to improve our services and develop new features.

5. Sharing and Disclosure of Information

5.1 With Our Lending Partners

We share your information with trusted lending partners to facilitate the loan application process.

5.2 Service Providers

We employ third-party service providers for:

Data Processing and Storage: Secure data storage solutions.
Analytics and Advertising: Platforms that help us understand user behavior and provide relevant advertising.
Customer Support Services: Call centers or virtual support tools.

5.3 Legal Requirements

We may disclose your information:

To Comply with Laws: If required by court order, subpoena, or other legal processes.
To Protect Rights: To enforce our Terms of Service, protect our rights, or respond to a claim.

5.4 Business Transactions

If Nexpocket undergoes a merger, acquisition, or sale, user information may be part of the transferred assets.

5.5 With Your Consent

Your information may be shared with third parties when you provide explicit consent.

6. Data Retention and Deletion

6.1 Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements.

6.2 Data Deletion

Upon request, we will delete your personal data, except where retention is necessary to comply with legal obligations or legitimate business interests.

7. Security Measures

7.1 Safeguards

We implement strong security measures to protect your information:

Data Encryption: Ensures data is secure during transfer and at rest.
Access Controls: Restricted access to personal data on a need-to-know basis.
Regular Audits: Ongoing security reviews and penetration testing.
Two-Factor Authentication (2FA): Option for users to add additional security to their accounts.

7.2 Data Breach Response

In case of a data breach:

We will notify affected users and relevant authorities within 72 hours, where feasible, with details on the breach and steps taken to mitigate its impact.

8. User Rights and Choices

8.1 Access and Update

You have the right to access and correct your personal data at any time via your account settings or by contacting us.

8.2 Opt-Out of Marketing Communications

You can opt-out of marketing communications at any time by using the unsubscribe link in emails or contacting us directly.

8.3 Data Portability

You have the right to request your personal data in a structured, machine-readable format.

8.4 Restriction of Processing

Under certain conditions, you can request the restriction of your personal data processing.

8.5 Right to Object

You can object to data processing for direct marketing purposes or based on legitimate interests.

8.6 Right to Erasure

You may request the deletion of your personal data. We will comply except when retention is necessary for legal or legitimate business purposes.

9. Automated Decision-Making and Profiling

9.1 Loan Evaluation

Nexpocket may use automated processes for loan eligibility decisions. These systems analyze the data provided to offer fast and fair outcomes. You have the right to request human review if you believe an automated decision significantly impacts you.

10. Cookies and Tracking Technologies

10.1 Use of Cookies

We use cookies for various purposes:

Essential Cookies: Required for the functioning of the platform.
Performance Cookies: Gather data to understand user interactions and improve performance.
Advertising Cookies: Deliver targeted advertisements based on user behavior.

10.2 Managing Cookies

You can manage cookies through your browser settings. However, disabling cookies may affect the functionality of our platform.

11. Third-Party Analytics and Advertising

11.1 Use of Third-Party Services

We use third-party tools like Google Analytics to collect data on user interactions. These providers may use cookies and similar technologies to gather data on user behavior across different websites.

11.2 Advertising Partners

Our advertising partners may use cookies and web beacons to show relevant ads to you. You can manage ad preferences directly on their platforms.

12. International Data Transfers

12.1 Cross-Border Data Transfers

Your personal data may be transferred and stored outside your country of residence. We take steps to ensure that your data is treated securely and in accordance with this Privacy Policy.

12.2 Safeguards in Place

We use safeguards such as Standard Contractual Clauses (SCCs) and binding corporate rules (BCRs) to protect your data during international transfers.

13. Compliance with Specific Regulations

13.1 General Data Protection Regulation (GDPR)

For users in the European Economic Area (EEA), we comply with GDPR, which provides users with rights to access, rectify, delete, and restrict the processing of their personal data.

13.2 California Consumer Privacy Act (CCPA)

For California residents, you have the right to request access to the personal data we collect, the right to request deletion of your data, and the right to opt-out of data selling (we do not sell personal data).

13.3 Other Jurisdictional Rights

Users in other regions may have additional rights. Please refer to local data protection laws for further details.

14. Children’s Privacy

Nexpocket’s services are not intended for individuals under the age of 18. We do not knowingly collect data from minors. If we learn that we have inadvertently collected such data, we will take steps to delete it.

15. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Any updates will be posted on this page with a revised effective date. Significant changes may be communicated to you via email or through a notice on our platform. Your continued use after any modifications indicates your acceptance of the new terms.

16. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Nexpocket Privacy Team
Email: privacy@nexpocket.com
Address: 4140 Parker Rd. Allentown, New Mexico 31134
Phone: (239) 555-0108