Effective: September 1, 2026
Welcome to Ryze and all services offered through our website or mobile application (the “Platform”), owned and operated by First National Bank of Lacon (“FNBL”) under the Ryze brand (together with all corporate parents, subsidiaries, and affiliates, “FNBL,” “we,” “our,” or “us”). FNBL respects the privacy of our Platform users, customers, employees, and business partners. This Privacy Policy (“Privacy Policy”) describes our policies and procedures for collecting and processing personal information associated with a specific person (“Personal Data”) as well as information that cannot, on its own, be directly linked to a specific person or entity.
Your personal privacy is important to us. In furtherance of our commitment to this Privacy Policy, our Privacy Program has focused on compliance with applicable privacy laws including but not limited to the California Consumer Privacy Act as amended (“CCPA”), the Gramm-Leach-Bliley Act (“GLBA”), and the California Financial Information Privacy Act (“CFIPA”).
By using or accessing our Platform or the services offered through the Platform (the “Services”), you agree to this Privacy Policy. If you do not agree with this Privacy Policy, please do not access our Platform or use our Services. This Privacy Policy is subject to Terms of Use and is an integral part of the same.
FNBL collects a range of Personal Data from and about Platform users, customers, and business partners, such as their name, address, email, phone number, government-issued identifier (e.g., Social Security Number (“SSN”), tax ID number, driver’s license, or other government ID), date of birth, income, occupation, employment status, username, password, preferences, feedback, and survey responses. With your consent, we may also obtain financial information, including information from your bank(s), including but not limited to details regarding your checking account(s), savings account(s), balances, transactions, loans, cash flows, ACH/routing numbers, and bank identification numbers, through a variety of potential sources. With your consent, we may collect credit report information, such as your credit score, credit history, and other information that we receive from credit reporting agencies. In addition, we may collect payment information (debit card, credit card or other payment details), device and browsing data (cookies, IP addresses, geolocation information, device information, in-Platform activity, or session data), and mobile data (including images obtained from your camera, microphone, photo library, contacts, or device advertising IDs (IDFA/GAID)). We also maintain digital communication logs that track information like your phone number, calling-party number, forwarding numbers, time and date of calls, duration of calls, SMS routing information and types of calls.
Much of the Personal Data collected by FNBL about users is information provided by users themselves. Personal Data is also collected in connection with your visit to this Platform or your use of the Services. We also obtain Personal Data about you from our affiliates, business partners, and service providers, based on information that has already been shared with or made available to them. For example, during onboarding our identity-verification provider may supply prefilled identity information about you, such as your name, email address, residential address, and SSN; and we receive linked external-account data from open banking providers, credit report information from consumer reporting agencies, and marketing, attribution, and analytics data from our analytics and attribution partners.
Further, our online service providers or business partners may implement technologies that allow for the collection of Personal Data over time and across Platforms. We recommend that you review those privacy policies when you visit to better understand privacy practices on those Platforms.
We also collect certain Personal Data before you create an account. This includes information you provide on our landing pages or during prequalification, information from incomplete or abandoned applications, and web analytics and marketing attribution data associated with your visit. If your application is declined or you do not complete identity verification, we retain the information collected in connection with your application for the periods required by applicable law. (Please refer to the Section on Data Retention below for more information).
FNBL processes your Personal Data to ensure the efficiency and effectiveness of our business relationships, commercial transactions, and marketing practices. Processing will always be based on legitimate grounds or your consent. Specifically, we use your Personal Data to:
We use automated systems, including artificial intelligence (“AI”) and machine learning technologies, to help us deliver and improve our Services. These systems may:
These processes enable us to provide faster and more consistent decisions, enhance user experience, and tailor the Services to your needs. Human review of automated decisions is generally not available, unless required by applicable law. Where such rights apply, you may request an explanation of the logic involved in the decision-making process and, if applicable, request human intervention.
FNBL collects information that web browsers make available, depending on their settings. That information includes (a) “cookies” and similar technologies, including software development kits (SDKs), local storage, pixels, tags, device identifiers, and other technologies used by websites and mobile applications to recognize devices, remember preferences, analyze usage, and support functionality; (b) the user’s Internet Protocol (“IP”) address and Media Access Control (“MAC”) address, mobile advertising identifiers, device identifiers, which may be considered Personal Data in certain countries or regions, including the European Union (“EU”); (c) the number of times a user visits the Platform, the pages or screens accessed, and the operating system used; and (d) browser type, device type, screen resolution, mobile device model, operating system version, application version, language settings, and the web pages the user views immediately before, during, and immediately after a visit to the Platform.
FNBL and its service providers use current industry methods, including cookies and tracking technology (“clear gifs”, “pixels”, “web beacons”, “log files”, etc.), to enable it to track unique visitors and pages that a user visits during each Platform session, both to help improve users’ experiences and to help FNBL understand how the Platform is being used. For example, cookies are tags sent to reside on the visitor's computer or mobile devices, to enhance a visitor’s experience at our Platform, to allow repeat visitors to be served more quickly and efficiently, or to tell us where our visitors go and how our visitors use our Platform and related Platforms. FNBL uses cookies to obtain Personal Data about a user that was not previously provided.
We analyze Personal Data gathered from users of the Platform to help us better understand how the Platform is being used. By identifying patterns and trends in usage, FNBL is able to better design the Platform to improve users’ experiences, both in terms of content and ease of use. From time to time, FNBL may also release the non–personal data gathered from Platform users in the aggregate, such as by publishing a report on trends in the usage of the Platform.
Processing of Personal Data for analytics and advertising purposes is limited to interactions on our Platform only. Where required by applicable state law, you may opt out of the sale and sharing of Personal Data relating to cookies and similar technologies, to the extent applicable, by activating a user-enabled global privacy control, such as a browser plug-in or privacy setting, device setting, or other mechanism, that communicates or signals your choice to opt out. When we receive such a signal, we will stop setting third party, analytics, or advertising partner cookies on your browser. This will prevent the sale or sharing of information relating to that specific device through cookies to our advertising or analytics partners. This option may not stop all sales or sharing of your information because we cannot match your device’s identification or internet protocol address with your personally identifiable information like your name, phone number, email address or ZIP code. If you delete cookies on your browser, any prior do-not-sell or do-not-share signal is also deleted and you should make sure that your user-enabled setting is always activated.
FNBL discloses Personal Data in certain instances as described in this Privacy Policy. We do not sell or rent your Personal Data for nonaffiliated third parties’ independent marketing purposes. We may, however, share your information in the following circumstances:
You have choices regarding how your Personal Data is used and shared.
FNBL maintains commercially reasonable administrative, technical, and physical safeguards designed to protect your information against unauthorized access, loss, misuse, alteration, or disclosure, consistent with applicable law and Mastercard network security requirements. These measures include:
While we strive to use commercially reasonable safeguards, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You should take all precautions to safeguard your passwords and any account information that you may have or provide and to employ current virus-scanning or firewall software and other security safeguards. You should also log out of your account and close your browser window after you are done using the Platform.
Your Personal Data is stored in the United States, on cloud infrastructure located in U.S. regions. To the extent any of our affiliates or service providers access Personal Data from outside the United States in connection with providing the Services, we rely on contractual safeguards or equivalent protections in connection with that access.
We retain Personal Data for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy or as required by applicable law, contractual obligation, or regulation, including providing our Services, meeting our contractual obligations, complying with legal and regulatory requirements (including the record retention requirements of the Bank Secrecy Act and other applicable federal and state law), resolving disputes, and enforcing our agreements. Set out below is the period for which we retain your Personal Data. Where multiple retention requirements apply, we retain information for the longest applicable period. When information is no longer needed for such purposes, it will be securely deleted, anonymized, or otherwise disposed of in accordance with applicable data retention and destruction policies and applicable law.
Users may request deletion of certain data elements—such as linked financial accounts or marketing communication preferences—either through the Platform or by contacting our support team at support@ryze.money. We will honor such requests in accordance with applicable law and subject to necessary verification requirements.
We comply with all applicable data retention and destruction laws and ensure that Personal Data is not kept longer than necessary for the purposes described in this Privacy Policy. We will store and maintain data in a manner consistent with the record retention requirements of applicable law.
Our Platform includes links to other websites whose privacy practices may differ from those of FNBL. We have no control over such third party links present on the Platform, which are provided by persons or companies other than us. You acknowledge and agree that we are not responsible for any collection or disclosure of your information by any external sites, applications, companies or persons thereof. The presence of any third party links on our Platform, cannot be construed as a recommendation, endorsement or solicitation for the same, or any other material on or available via such links.
If you submit personal information to any of those websites, their privacy policies govern your information. We encourage you to carefully read the privacy policies of any website you visit.
You further acknowledge and agree that we are not liable for any loss or damage which may be incurred by you as a result of the collection and/or disclosure of your information via such third party links, as a result of any reliance placed by you on the completeness, accuracy or existence of any advertising, products services, or other materials on, or available via such third party link. This will include all transactions, and information transmitted therein, between you and any such third party sites or applications or resources, such transactions are strictly bi-partite. We shall not be liable for any disputes arising from or in connection with such transactions between you and the aforementioned third parties.
Shine the Light Act: FNBL does not sell, rent, or lease your Personal Information (as defined below). We do not disclose your Personal Information to nonaffiliated third parties for their direct marketing purposes.
To the extent FNBL is subject to the California Financial Information Privacy Act (“CFIPA”), California residents receive the privacy protections described below. CFIPA gives California residents financial privacy protections that are in addition to, and in certain respects more protective than, those under the GLBA, and it applies to the nonpublic personal information (“NPI”) we collect about you in connection with the Services.
Sharing with nonaffiliated third parties. Except as permitted by CFIPA, we will not disclose your NPI to nonaffiliated third parties without your affirmative consent (opt-in). CFIPA permits a number of disclosures to nonaffiliated third parties without your consent, including disclosures that are necessary to effect, administer, or enforce a transaction you request or authorize; to process or service a financial product or service you request; to our service providers and vendors that perform services for us under contractual confidentiality obligations; pursuant to certain written joint marketing agreement with another financial institution; to consumer reporting agencies as permitted by the FCRA; to protect against or prevent fraud or unauthorized transactions; and as otherwise required or specifically permitted by law. Where applicable, disclosures described in the ’Disclosing Your Personal Data’ section above are made in reliance on one or more of these CFIPA exceptions.
Sharing with affiliates. Where required by CFIPA, you may direct us not to share your NPI with our affiliates for their own marketing purposes. Certain sharing among affiliates is permitted under CFIPA or governed by the FCRA, which preempts certain state-law restrictions on affiliate information sharing.
Your choices. Where applicable, California residents may provide or withhold consent to our sharing of NPI with nonaffiliated third parties and exercise any applicable rights regarding affiliate sharing by contacting us at legal@ryze.money or through the in-app request process. These rights are in addition to any other privacy rights described in this Privacy Policy and the FNBL Notice of Privacy Practices below.
If you are a Consumer (as defined below) residing in California, Maryland, Nebraska, or Texas, the following provisions may apply to our processing of information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“Personal Information”) subject to the CCPA, the Maryland Online Data Privacy Act, the Nebraska Data Privacy Act, or the Texas Data Privacy and Security Act (collectively the “Privacy Laws”).
For Consumers, the provisions of this section prevail over any conflicting provisions of this Privacy Policy. We adopt this section of our Privacy Policy to comply with the Privacy Laws and any terms defined in the Privacy Laws have the meaning set forth in the law of your state of residence when used in this section.
Important exemptions: Much of the information we collect and process is subject to federal financial privacy laws, including the GLBA and the FCRA. Personal Information collected, processed, or disclosed subject to the GLBA or the FCRA is generally exempt from the Privacy Laws, and the rights described in this section may not apply to that information. The rights in this section apply to Personal Information that we process outside the scope of those federal laws (for example, information collected through our marketing websites).Verified California, Maryland, Nebraska, and Texas residents have the following rights:
We will not discriminate against you as a result of your exercise of any of these rights.
How to Exercise California, Maryland, Nebraska, and Texas Privacy Rights
Information Access Rights, Information Correction Rights, and Information Deletion Rights
In order to make a request to exercise any of these rights, California, Maryland, Nebraska, and Texas Consumers may make a request online on the Platform. We will ask you for information that allows us to reasonably verify your identity (that you are the person about whom we collected Personal Information) and will use the information you submit only for that purpose. If you do not have a registered account with us, we may request that you submit a signed statement under penalty of perjury that you are the individual you claim to be. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity and confirm that the Personal Information relates to you. We will acknowledge receipt of your request within 10 (ten) days and will endeavor to respond within 45 (forty-five) days of receipt of your request, but if we require more time (up to an additional 45 (forty-five) days) we will notify you of our need for additional time.
For requests for a copy of the Personal Information we have collected, we will endeavor to provide the information in a format that is readily useable, including by mailing you a paper copy or providing an electronic copy to your registered account, if you have registered an account with us.
If you request that we delete your Personal Information, Privacy Laws permit us to retain certain information and not to delete it under certain circumstances. By way of example, we may not be required to comply with a request to delete information if the information is necessary for us to complete a transaction for you or otherwise perform a contract; to detect, protect against, or prosecute security incidents, fraud or illegal activity; to use the information only internally in ways reasonably aligned with your expectations as our customer (such as maintaining sales records), and to comply with legal obligations.
Opt Out Requests
Using an Authorized Agent. You may submit a request through someone holding a formal power of attorney. Otherwise, you may submit a request using an authorized agent only if: (1) you provide the authorized agent with written permission to make a request; and (2) you verify your own identity directly with us. We will require the agent to submit proof to us that they have been authorized to make requests on your behalf.
Appealing denied requests. If we have denied your Consumer request, you have the ability to file an appeal with us. To file an appeal with us, you must submit your request at support@ryze.money.
We will respond to you in writing within 60 (sixty) days of any action taken or not taken in response to the appeal, including an explanation of the reasons for our decisions. If we deny your appeal, you can contact your state’s Attorney General at:
Office of Maryland Attorney General
200 St. Paul Place
Baltimore, MD 21202
(410) 528-8662
Maryland Attorney General - Consumer Protection Division (Online Portal)
Office of Nebraska Attorney General
2115 State Capitol
Lincoln, NE 68509
(402) 471-2682
Nebraska Attorney General – Consumer Protection Division (Online Portal)
Office of Texas Attorney General PO Box 12548 Austin, TX 78711-2548
Texas Attorney General - Consumer Protection Division (Online Portal)
California Privacy Protection Agency
400 R Street Suite 330 Sacramento, CA 95811
California Privacy Protection Agency- Online Portal for filing complaint
Information Collected, Sources, Business Purpose for Collection, and Disclosure
During the past 12 months, we have collected the following categories of information from the listed sources, used it for the listed business purposes and disclosed it for a business purpose to the listed categories of third parties. The categories of information include information we collect from our Platform visitors, registered users, employees, vendors, suppliers and any other person that interacts with us either online or offline. Not all information is collected about all individuals. For instance, we may collect different information from applicants for employment or from vendors or from customers.
| Category of information collected | Source | Business purposes* for collection/use | Categories of third parties receiving information for a business purpose |
|---|---|---|---|
| A. Identifiers. (name, alias, date of birth, postal address, email address, phone number, fax number, account name, SSNs, driver's license number, passport number, unique personal identifier, online identifier, IP address) | Individuals submitting information to us; information we automatically collect from Platform visitors; information we may receive from third-party service providers, marketing and data partners. | Auditing relating to transactions; security detection, protection and enforcement; advertisement and marketing customization; performing Services for you; compliance with law; internal research and development; quality control. | Service providers (such as credit reporting agencies, open banking service providers, data hosting service providers, payment processors, mail houses, marketing partners, shipping partners, employee benefits partners); affiliated companies; government regulators; law enforcement; strategically aligned businesses. |
| B. Personal information categories protected under the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). (A name, signature, SSNs, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, education, employment, employment history, bank account number, medical information. Some personal information included in this category may overlap with other categories) | Individuals submitting information; employment applications; employees. | Auditing relating to transactions; security detection, protection and enforcement; performing Services for you; compliance with law; advertisement and marketing customization; quality control. | Service providers (such as credit reporting agencies, open banking service providers, cloud storage service providers, payment processors, mail houses, marketing partners, shipping partners, employee benefits partners); affiliated companies; government regulators; law enforcement. |
| C. Protected anti-discrimination classification characteristics under California or federal law. (Age (40 years or older), race, color, ancestry, national origin, citizenship, marital status, medical condition, physical or mental disability, sex (including gender, pregnancy or childbirth and related medical conditions), veteran or military status.) | Individuals submitting information; employees. | Auditing relating to transactions; performing Services for you; compliance with law; advertisement and marketing customization; internal research and development. | Service providers (such as employee benefits partners, cloud storage service providers); government regulators; law enforcement. |
| D. Commercial information. (Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.) | Individuals submitting information; information we automatically collect from site visitors; information we may receive from third-party marketing or data partners. | Auditing relating to transactions; advertisement and marketing customization; performing Services for you; compliance with law; internal research and development; quality control. | Service providers (such as cloud storage service providers, payment processors, mail houses, marketing partners, shipping partners); affiliated companies; law enforcement; strategically aligned businesses. |
| E. Internet or other similar network activity. (Browsing history, search history, information on your interaction with company systems, Platforms, applications, etc.) | Information automatically collected from site visitors. | Auditing relating to transactions; security detection, protection and enforcement; compliance with law; functionality debugging/error repair; advertisement and marketing customization; internal research and development; quality control. | Service providers (such as cloud storage service providers, marketing partners); affiliated companies; strategically aligned businesses. |
| F. Geolocation. (Physical location or movements.) | Information we automatically collect from site visitors. | Auditing relating to transactions; security detection, protection and enforcement; performing Services for you; compliance with law; functionality debugging/error repair; advertisement and marketing customization. | Service providers (such as cloud storage service providers, marketing partners); law enforcement. |
| G. Sensory data. (Audio, electronic, visual, thermal, olfactory, or similar information.) | Individuals submitting information; information we collect for security purposes. | Security detection, protection and enforcement; performing Services for you; compliance with law; quality control. | Law enforcement. |
| H. Professional, educational or employment related information. (Current or past job history or performance evaluations.) | Information submitted by individuals; information received from third parties in connection with vendor or employment status or applications; information we observe in connection with vendor or employment oversight. | performing Services for you; compliance with law; internal research and development; advertisement and marketing customization; quality control. | Service providers (such as payment processors, employee benefits partners); government regulators. |
| I. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). | Not Collected | Not Collected | Not provided |
| J. Sensitive Personal Information (SSNs, driver’s license, state identification card, or passport number, account log-in in combination with any required security or access code, password, or credentials allowing access to an account.) | Information submitted by individuals; information received from third parties in connection with vendor or employment status or applications; information we observe in connection with vendor or employment oversight. | Identity verification; performing services for you; employment and benefits administration; vendor oversight; security detection, protection and enforcement; compliance with law. | Service providers (such as credit reporting agencies, open banking service providers, payroll or payment processors, employee benefits partners, auditors and other professional advisors); government regulators. |
| K. Inference from other personal information (Preferences, characteristics, behavior, attitudes, abilities, etc.) | Internal analytics. | compliance with law; advertisement and marketing customization; internal research and development. | Service providers (such as marketing partners, shipping partners); affiliated companies; strategically aligned businesses. |
*More specifically, the business purposes include:
1. Performing Services for you:
2. Advertising customization:
3. Auditing relating to transactions, internal research and development:
4. Security detection, protection and enforcement; functionality debugging, error repair:
5. Quality control.
Disclosing Personal Information to Third Parties: We may disclose certain categories of Personal Information to third parties (described above). Note that for purposes of the Privacy Laws, we only “share” information as that term is specifically defined in the Privacy Laws (including the CCPA) as described below. When we provide information to third parties, the type of, business model of, or processing conducted by each third party is consistent with the purposes for which we collect and use such information as permitted by law and as disclosed above or at the time we collect the information unless otherwise required by law. The following may be permitted purposes under the Privacy Laws:
Processing Sensitive Personal Information: We collect limited sensitive personal information (described above). For the avoidance of doubt, the sensitive personal information we collect does not include any (1) data revealing racial or ethnic origin, religious beliefs, consumer health data (as defined under the Privacy Laws), sex life, sexual orientation, status as transgender or nonbinary, national origin, or citizenship or immigration status; (2) genetic data; (3) Personal Information of any person that we know or have reason to know is under the age of 18; or (4) precise geolocation data. If you enable biometric authentication, such as Face ID or fingerprint authentication, the authentication is performed by your device and FNBL does not collect or store your biometric identifiers or biometric templates. We may receive information indicating whether authentication was successful and the authentication method used. We process and disclose the limited sensitive personal information that we do collect only for the purposes permitted by law and as disclosed above or at the time we collect this information unless otherwise required by law, and we never sell it. Depending on your state of residence, you may have the right to limit this processing, or we may be required to obtain your consent before processing certain sensitive personal information.
We do not transfer Personal Information for monetary consideration. If you are a Nevada resident and would like to tell us not to sell your information in the future (in case we change our no-sell policy) you may make a request online here with your name, postal address, telephone number and email address with “Nevada do not sell” in the subject section.
Notice to residents of Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Minnesota, Montana, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Utah, and Virginia,
Residents of certain U.S. states may have additional privacy rights under applicable state laws, including the Colorado Privacy Act, the Connecticut Data Privacy Act, the Delaware Personal Data Privacy Act, the Florida Digital Bill of Rights, the Iowa Consumer Data Protection Act, the Indiana Consumer Data Protection Act, the Minnesota Consumer Data Privacy Act, the Kentucky Consumer Data Protection Act, the Montana Consumer Data Privacy Act, the New Hampshire Expectation of Privacy Act, the New Jersey Data Privacy Act, the Oregon Consumer Privacy Act, the Rhode Island Data Transparency and Privacy Protection Act, the Tennessee Information Protection Act, the Utah Consumer Privacy Act, and the Virginia Consumer Data Protection Act (collectively, the “Other State Privacy Laws”).
If you are a resident of one of these states, subject to certain exceptions, you may have the following rights:
To exercise these rights, where applicable under a particular Other State Privacy Law, you may contact us at support@ryze.money. We may need to verify your identity before responding to your request. We will respond within the timeframes required by applicable law.
We do not process sensitive personal information for purposes other than those permitted under the Other State Privacy Laws. We also do not sell Personal Data as defined under these state laws.
Policy Governs Use; Changes to Privacy Policy; Misc.
Changes to the Privacy Policy. Technology and the internet are rapidly changing. FNBL, therefore, is likely to make changes to the Platform in the future and as a consequence will need to revise this Privacy Policy to reflect those changes. When we revise the Privacy Policy, FNBL will alert all users for whom it maintains email information of such modifications by means of an email to their most recently provided email address, or at our option, by means of a notice on this Platform prior to the change becoming effective. It is important that you review this Privacy Policy periodically for an up-to-date understanding of FNBL’s policies and practices.
Annual Privacy Notice. In addition to notifying you when we make changes to this Privacy Policy, FNBL is required by federal law to provide you with a privacy notice at least once each year for as long as you remain our customer. We will deliver the annual privacy notice electronically through the Platform or by email, consistent with your E-SIGN consent. If our information-sharing practices change in a material way, we will give you advance written notice and a reasonable opportunity to opt out, as applicable, before any such new sharing begins.
Do Not Track “DNT” Signals. Except as stated in this Privacy Policy, we have not implemented the necessary program changes to honor “Do Not Track” or “DNT” browser signals for users in the U.S. As our online applications programming is refined, we will take all reasonable steps to honor such requests in the future. Please return to this privacy policy for further updates on this topic.
Children and Data Collection. FNBL’s Platforms are general audience Platforms. FNBL’s Platform content is not directed toward children or minors who are under the age of 18. We do not knowingly collect Personal Data from children. If FNBL or its internet service providers become aware that a minor has provided us with Personal Data, that information will be deleted from our databases. If you have questions about Personal Data that may have been submitted by a child or minor, you may inquire at support@ryze.money
Contacting FNBL. To communicate with FNBL about this Privacy Policy or to update your Individual Rights Data, please contact: support@ryze.money.
Why are we providing this notice? The First National Bank of Lacon (the “Bank”, “we,” “us,” or “our”) is providing this notice as required by the Gramm-Leach-Bliley Act (“GLBA”). The Bank is a financial institution subject to GLBA as the FDIC-insured national bank that (a) issues the Booster Credit Card as part of the Booster Program; (b) holds Vault Deposit Accounts and issues associated Vault Debit Cards as part of the Vault Program; and (c) offers the Pulse credit monitoring service. This notice satisfies the annual privacy notice requirement under GLBA.
What products are covered by this notice? This notice covers three products and services: (a) the Booster Credit Card product and (b) the Vault Deposit Account and associated Vault Debit Card products—both offered by the Bank under the Ryze brand; and (c) the Pulse service, a credit score monitoring service and personal finance management service offered by the Bank. Where a section applies to only one product or service, this is noted.
| Why? | Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some, but not all, sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do. |
| What? | The types of personal information we collect and share depend on the product or service you have with us. This information can include: Social Security number and government-issued identification Account balances, transaction history, and account activity Contact information (name, address, email, phone number) Device identifiers, IP addresses, and technical usage data associated with your access to the Ryze application or web portal Information that you provide during enrollment, verification, or customer support Mobile data including images obtained from your camera, microphone, photo library, contacts, device advertising IDs, calling-party number, forwarding numbers, time and date of calls, duration of calls, SMS routing information and types of calls Credit score and monitoring data obtained from TransUnion or any other credit bureau (applicable to Pulse service customers) |
| How? | All financial companies need to share customers’ personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers’ personal information; the reasons the Bank chooses to share personal information relating to the Booster Program, Vault Program, and Pulse service; and whether you can limit this sharing. |
| Reasons we can share your personal information | Booster Program, Vault Program, and Pulse service |
|---|---|
| For our everyday business purposes — such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus | Yes |
| For our marketing purposes — to offer our products and services to you | Yes |
| For joint marketing with other nonaffiliated financial companies | No |
| For our affiliates’ everyday business purposes — information about your transactions and experiences | Yes |
| For our affiliates’ everyday business purposes — information about your creditworthiness | Yes |
| For our affiliates to market to you | Yes |
| For non-affiliates to market to you | No |
For our affiliates to use information about you to market their products and services to you, or for sharing information about your creditworthiness with our affiliates, you may direct us not to share your information by:
Contacting us at:
Please note: If you are a new customer, we can begin sharing your information 30 days from the date we sent this notice. When you are no longer our customer, we may continue to share your information as described in this notice. However, you can contact us at any time to limit our sharing. If you direct us not to allow our affiliates to use shared information to market to you, your election will remain in effect for at least five (5) years, and we will send you a renewal notice before it expires.
| Contact: | The First National Bank of Lacon | 111 S. Broad St., Lacon, IL 61540 | support@ryze.money |
| Who is providing this notice? | The First National Bank of Lacon, a nationally chartered, FDIC-insured bank located in Lacon, Illinois, owned by Bhavin Turakhia. The Bank offers the Booster Program and the Vault Program under the Ryze brand, and the Pulse credit monitoring service. This notice covers all three products. |
| How does the Bank protect my personal information? | To protect your personal information from unauthorized access and use, we use security measures that comply with federal and applicable state law. These measures include computer safeguards and secured files and buildings. We also maintain contractual requirements with service providers that handle your information on our behalf. |
| How does the Bank collect my personal information? | We may collect certain personal information from you when you: Open an account through the Booster Program or the Vault Program, enroll in either the Booster Program or Vault Program, or sign up for the Pulse service; Complete identity verification (CIP) as required by federal law; Use the Ryze app or associated services; or Contact us for customer service. We may also collect your personal information from others, such as: identity verification and KYC providers (including Socure); transaction monitoring services (including Featurespace); open banking data providers (including Plaid); consumer reporting agencies (including TransUnion, Experian, and Equifax in connection with bureau reporting for the Booster Program); and credit score data providers (including TransUnion in connection with the Pulse service). |
| Why can’t I limit all sharing? | Federal law gives you the right to limit our sharing in the following instances only: Sharing by us with affiliates for affiliates’ everyday business purposes — information about your creditworthiness Sharing by us with affiliates so that our affiliates can market to you Sharing by us with nonaffiliates so that nonaffiliates can market to you. State laws and individual companies may give you additional rights to limit sharing. For more on your rights under state law, please refer to the Ryze Privacy Policy. |
| Affiliates | Companies related by common ownership or control. The Bank has certain affiliates that may be involved in providing services to FNBL that support the Booster Program, Vault Program, and Pulse services; contact us for a current list. |
| Non-affiliates | Companies not related by common ownership or control. Nonaffiliate service providers engaged by the Bank in connection with the Booster Program, Vault Program, and Pulse service include: Socure (identity verification and KYC/OFAC screening); Plaid (open banking and bank account verification); Tabapay (ACH payment processing); Featurespace (transaction fraud monitoring); TransUnion, Experian, and Equifax (credit bureau reporting for the Booster Program); TransUnion (credit score monitoring for the Pulse service); Mastercard (card network); Shazam and Allpoint (ATM networks for the Vault Program); MoEngage (customer engagement and marketing communications); and Twilio and SendGrid (SMS and email communications delivery). Additional service providers may be engaged from time to time. |
| Joint marketing | A formal agreement between nonaffiliated financial companies that together market financial products or services to you |