Last Revised: March 2020
Our mission is to enable companies to build and launch best-in-class financial services. In order to do so, we provide the technology link between our partner bank(s) and our partners (Platforms), enabling our Platforms to enable users like you to have access to certain banking services.
This Privacy Policy applies to you if you are (i) using a website or phone application that uses Synapse to provide to end-users like you such certain banking services or (ii) using our website synapsefi.com (“Website”).
By using our services, you agree to Synapse’s Privacy Policy. We may update this PrivacyPolicy from time to time and the continued use of our services means acceptance of this Privacy Policy. If you do not agree to the Policy as last revised, do not use (or continue to use) the Services (as defined below).
As a technology company nestled in the financial services industry, we take privacy and security very seriously as provided herein. To demonstrate our commitment to privacy and security, we have developed this Privacy Policy to explain how we may collect, retain, process, share, and transfer your information.
Our mission is to enable companies to build and launch best-in-class financial services. In order to do so, we provide the technology link between our partner bank(s) and our partners (Platforms), enabling our Platforms to enable users like you to have access to certain banking services.
This Privacy Policy applies to you if you are (i) using a website or phone application that uses Synapse to provide to end-users like you such certain banking services or (ii) using our website synapsefi.com (“Website”).
By using our services, you agree to Synapse’s Privacy Policy. We may update this PrivacyPolicy from time to time and the continued use of our services means acceptance of this Privacy Policy. If you do not agree to the Policy as last revised, do not use (or continue to use) the Services (as defined below).
As a technology company nestled in the financial services industry, we take privacy and security very seriously as provided herein. To demonstrate our commitment to privacy and security, we have developed this Privacy Policy to explain how we may collect, retain, process, share, and transfer your information.
Policy Overview
1.
1.1.
In this Policy, “Services”refers to any products, services, content, features, technologies, or functions made available to you by Synapse as a technology service provider of our partner bank(s) via the website and/or phone application of the Platform. The terms “Synapse,” we”, “us” or“our” shall refer to Synapse Financial Technologies, Inc. The terms “you” or“your” shall refer to any individual or entity who accepts this Policy.
1.2.
We may, in our sole and absolute discretion, change or modify this Policy, and any policies or agreements which are incorporated herein, at any time, and such changes or modifications shall be effective immediately upon posting to the Website. No revision or update will apply to a dispute which we had actual notice of prior to the date we posted the changes or modifications. We will notify you of such changes or modifications by posting them to the Website, and your use of theServices after such changes or modifications have been posted (as indicated by a “Last Revised” date) shall constitute your acceptance of the Policy as last revised. If you do not agree to the Policy as last revised, do not use (or continue to use) the Services.
2.
Applicability and Scope
2.1.
This Privacy Policy applies to your information when you visit the Website or use the Services via a Platform and does not apply to online websites or services that we do not own or control, including websites, mobile applications or services of our Platforms. This means that this Policy does not explain what our Platforms do with any of your information that we provide to them (or any other information they collect directly from you, their end user).
2.2.
Information provided to third parties, such as our Platforms, shall be controlled by their respective privacy policies. We encourage you to review the privacy policies or notices of the Platform or other third parties for information about their practices.
3.
Collection of Information.
3.1.
We collect public and non-public information (i) when you visit our Website; (ii) when you communicate with us via our customer support channels; (iii) when you apply or sign up to use any of our Services via a Platform; (iv) when you communicate with our partner bank(s) or Platform; (v) we collect through third-party service providers and other sources; (vi) through online research on social media and websites, which may not be publicly available; and (vii) when you use any of our Services directly or via a Platform.
3.2.
As a third-party service provider and agent of the bank partner(s) we collect data on behalf of the partner bank(s) to comply with applicable law and financial services regulation.
3.3.
We also collect information in order to verify your identity when you apply or sign up to receive a service from us or our partner bank(s).
4.
Types of Personal Data Collected
4.1.
The information we collect may vary according to the Service we will be providing to you and your use of the Services.
4.2.
We may collect the following information about individuals or businesses (“Data”):
4.2.1.
Individuals’ Information: name or aliases, physical address, work address, phone number, email address, IP address, date of birth, gender, social security number or other tax identification number, result of sanctions screenings, government ID, photo identification, selfie, or video authorization, images of your face on your identification document (e.g., government-issued identification card) and/or video, your biometric facial identifiers, and other additional information you may provide, or additional information we may additionally request you to provide;
4.2.2.
Business’ Information: entity legal name or aliases, including “doing business as” names, physical address, phone number, legal entity type, industry, organizational documents (e.g. articles of incorporation and bylaws), employer identification number, or other information relating to your authorized signors or beneficial owners, which may include the Individuals’ Information as provided above, or additional information we may additionally request you to provide;
4.2.3.
External Bank Account Information: external financial institution name, account name, account type, branch number, account number, routing number, international bank account number (“IBAN”), information, data, passwords, authentication questions, materials or other content, transaction and available balance information;
4.2.4.
Financial Data of Your Account With Us and Our Partner Bank: transactions and transaction history, including but not limited to ACH, Wire and card transactions, available account balance, card data, loan and debit amounts, loan types, payment plan, loan balance, linked bank accounts, salary and other income, sources of wealth, and other assets;
4.2.5.
Background Check Data: background check information including credit and criminal checks, supporting research, and screenings, to the extent required or permitted by local law;
4.2.6.
Recipients’ or Senders’ Data: when you send or request money through the Services, we may collect data such as name, postal address, telephone number, IP address, date of birth, and financial account information about the recipient or sender of the funds. The extent of data required about a recipient or sender may vary depending on the Services you are using to send or request money;
4.2.7.
Third-Party Sources: we may obtain information from third-party sources such as Platform, merchants, recipients and senders of funds, data providers, identity verification providers, and credit bureaus, where permitted by law.
4.2.8.
Digital Identity Information:
4.2.8.1.
Services Metadata: when you interact with the Services, metadata is generated that provides additional context about the way you interact with the Services.
4.2.8.2.
Log Data: our servers may automatically collect information about your visit to the Website and to Platform’s websites or mobile applications, including IP addresses and associated information, the address of the website visited before using the Website, browser type and settings, the date and time the Services were accessed and used, information about browser configuration and plugins, language preferences.
4.2.8.3.
Device Information: your device “fingerprint” (e.g. hardware model, operating system and version, unique device identifiers and mobile network information) when you access our Website or use a Service via a Platform.
4.2.8.4.
Location Information: we may receive information from you that helps approximate your location, such as using an IP address received from your browser to determine an approximate location. Further, we may also collect location information from devices in accordance with the consent process provided by your device.
5.
Retention of Information
5.1.
We retain your information to fulfill our legal or regulatory obligations and for our business purposes. We may retain your Data for longer periods than required by law if it is in our legitimate business interests and not prohibited by law.
5.2.
If you stop using the Services and close an account with a Platform, we reserve our ability to retain and access the Data as provided in this Policy. We will continue to use and disclose such Data in accordance with this Privacy Policy.
5.3.
All Data are stored in encrypted format in Synapse’s database.
6.
Purposes of Collection and Use of Information
6.1.
We use the information we collect or receive to operate, improve, and protect the Services we provide and to develop new Services.
6.2.
More specifically, we collect and use your information:
6.2.1.
To provide the Services, perform obligations under our agreements, and carry out related business functions, including performing data and transaction processing, conducting credit checks, handling user inquiries, and managing relationship;
6.2.2.
To develop, improve, enhance, modify, add to, and further develop our Services;
6.2.3.
To comply with legal obligations and regulations applicable to the Services and to our partner bank(s), including but not limited to “know your customer” obligations based on applicable anti-money laundering and anti-terrorism requirements, economic and trade sanctions, customer due diligence, suspicious activity reporting, foreign exchange and international trade, tax reporting and other applicable laws, regulations, ordinances, and obligations or requirements;
6.2.4.
To confirm a person’s authority as a representative or agent of a user;
6.2.5.
To conduct record keeping and otherwise manage the business;
6.2.6.
To verify you, your identity, that the data provided is credible, and prevent fraud;
6.2.7.
To protect you, our Platforms, or Synapse from fraud, malicious activity, and other privacy and security-related concerns;
6.2.8.
To provide customer support to you or to our Platforms including to help respond to your inquiries related to our Services or our Platforms’ applications or website;
6.2.9.
To send you technical notices, updates, security alerts and support and administrative messages;
6.2.10.
To investigate any misuse of our Services or our Platforms’ applications or websites, including criminal activity or other unauthorized access to our Services;
6.2.11.
For any other purpose with your consent.
6.3.
We may use raw data or aggregated and anonymized data for the purposes provided in this Policy.
6.4.
We use machine learning and facial recognition to verify the legitimacy of your identification documents, verify the factualness and credibility of the information you provide to us, and avoid fraud, by, among other actions, comparing biometric data with data previously or separately obtained. Based on the submitted identification document, Synapse programmatically creates a feature vector of the face displayed in such document and stores it in encrypted format in Synapse’s database. The vector cannot be used to reconstruct the original image. When a new user creates an account, Synapse programmatically compares that user’s vector against others in its database to help detect potential cases of identity theft. As with all Data, Synapse does not sell or rent the image, likeness, or vector to anyone, including marketers or other third parties, and does not use your Data for commercial purposes other than identity verification, financial loss mitigation, and regulatory compliance.
7.
Sharing Information
7.1.
Synapse takes your privacy seriously. We do not sell or rent your information to marketers or other third parties.
7.2.
We do share your information with third parties as described in this Policy. We may share some of your information:
7.2.1.
With the Platform you are using to have access to our Services for the purposes of offering services to you and providing customer service to you. You understand that Platform may have access to all Data;
7.2.2.
With our partner bank(s) in order to comply with regulation, and bank’s regulatory obligations and know your client requirements. You understand that partner bank may have access to all Data and that the partner bank(s) applicable data privacy policy or notice shall apply;
7.2.3.
For our everyday business purposes, such as processing your transactions, maintaining your account(s), or reporting to credit bureaus;
7.2.4.
With other companies that provide services to us, such as identity verification service providers, fraud prevention service providers, credit bureaus, or collection agencies;
7.2.5.
With other parties to transactions when you use the Services, such as other users, merchants, and their service providers. We may share your information with other parties involved in processing your transactions. This includes other users that you are sending or receiving funds from, and merchants and their service providers. This information might include: (i) information necessary to facilitate the transaction and (ii) information to help other participant(s) resolve disputes and (iii) detect and prevent fraud;
7.2.6.
To information technology providers or other service providers around the world that act under our instructions regarding the processing of certain data ("Vendors"). Vendors will be subject to contractual obligations to implement appropriate technical and organizational security measures to safeguard the information, and to process information only as instructed;
7.2.7.
1To card networks in case you are issued a card by our partner bank(s). You understand that the card network may have access to all Data and that the card network applicable data privacy policy or notice shall apply;
To independent external auditors or other service providers around the world. Such service providers will be subject to any necessary contractual obligations regarding the protection and processing of such Data;
7.2.8.
In connection with a change of ownership or control of all or part of our business (such as a merger, acquisition, reorganization, or bankruptcy);
7.2.9.
To support our audit, compliance, and corporate governance functions; and
7.2.10.
7.2.11.
With your consent or direction.
7.3.
Subject to applicable law, we may disclose Data if required or permitted by applicable law or regulation, including laws and regulations of the United States and other countries, or in the good faith belief that such action is necessary to: (a) comply with a legal obligation or in response to a request from law enforcement or other public authorities wherever Synapse may do business; (b) protect and defend the rights or property of Synapse; (c) act in urgent circumstances to protect the personal safety of users, Platforms, and contractors/employees of Synapse or others; or (d) protect against any legal liability. In addition, Synapse may share your Data with U.S. regulators and with other self-regulatory bodies to which we are subject, wherever Synapse may do business.
8.
Protection of your Information
8.1.
Synapse takes commercially reasonable measures to help protect your information from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. Additionally, we implement policies designed to protect the confidentiality and security of your nonpublic personal information.
8.2.
Unless otherwise specified in this Policy, Synapse limits access to your information to employees that have a business reason to know such information, and further implements security practices and procedures designed to protect the confidentiality and security of such information and prohibit unlawful disclosure of such information in accordance with its policies.
9.
California Consumer Privacy Act (CCPA) Information
9.1.
The CCPA requires companies, such as Synapse, to make certain additional disclosures and provides California residents with the ability to request certain additional information about their personal information and Data collected.
9.2.
CCPA does not apply to personal information and Data that is collected, processed, sold or disclosed pursuant to:
9.2.1.
Gramm-Leach-Bliley Act (Public Law 106-102), the federal privacy regulation. Generally, this will apply to any personal information obtained in connection with Synapse enabling you access to the financial products or services or Synapse’s partner banks; or
9.2.2.
Fair Credit Reporting Act (12 CFR 1022). Generally, this will apply to personal information and Data related to credit history or credit worthiness.
9.3.
The CCPA grants California residents certain rights around the personal information and Data that is collected about them, as below:
9.3.1.
Right to Know About Personal Information Collected and/or Disclosed:
9.3.1.1.
California residents have the right to request information about their personal information that Synapse has collected in the preceding 12 months. Upon our receipt of a verifiable request from you, we will disclose the following information:
9.3.1.1.1.
The categories of personal information we have collected about you.
9.3.1.1.2.
The categories of sources from which the personal information was collected.
9.3.1.1.3.
The business or commercial purpose for collecting your personal information.
9.3.1.1.4.
The categories of third parties with whom we share your personal information.
9.3.1.1.5.
The specific pieces of personal information we have collected about you.
9.3.1.1.6.
The CCPA allows California residents to submit a maximum of two (2) requests in any 12-month period.
9.3.2.
Right to Request Deletion of Personal Information:
9.3.2.1.
California residents have the right to request that Synapse delete any personal information about you which we have collected from you.
9.3.2.2.
This right to request deletion does not apply to any of your personal information that is subject to an exception in the CCPA, for example, where we need to retain the personal information to complete a transaction for which the personal information was collected, to prevent fraud or to comply with a legal obligation.
9.3.3.
Right to Opt-Out of the Sale of Personal Information:
9.3.3.1.
Synapse does not sell any Data and will not sell any Data without providing you with prior notice and an opportunity to opt-out, as required by law.
9.3.4.
Right to Non-Discrimination:
9.3.4.1.
Synapse does not discriminate against any California resident who exercises any of the rights described above. This includes denying goods or services; charging different prices or rates; or providing a different level of service or quality of goods or services.
10.
CCPA Information Requests
10.1.
California residents can submit a request, by either by sending an email to privacy@synapsefi.com or by calling us at +1 (833) 953-1299, Monday through Friday from 10:00 a.m. to 5:00 p.m. PST.
10.2.
Synapse is required to verify the identity of the requester before answering to any request for information or deletion of Data.
10.3.
California residents have the option to designate an authorized agent to submit a request on their behalf. To do this, the authorized agent must inform that an “authorized agent” is submitting the request on a consumer’s behalf and provide all of the required information for identity verification, along with proof of authorization in the form of a notarized authorization form, signed by the California resident who is the subject of the request. We will also contact the California resident directly to verify the request.
10.4.
We will respond to requests within 45 days and will notify the requester if we need additional time.
11.
Access of Services and Website by Children
11.1.
This Website and the Services are not directed at children under 13. We do not knowingly collect Data from children under 13. If a parent or guardian becomes aware that his or her child has provided us with Data without the parent or guardian’s consent, he or she should contact us using the information below (“Contact”).
12.
Contact
12.1.
If you have any questions about this Policy, please contact us by email, telephone, or postal mail.
12.1.2.1.
Hours. Customer Service agents are available to answer your calls:
12.1.2.2.
Eastern Time (USA): Monday through Friday: 10:00 AM – 5:00 PM.
12.1.2.3.
Central Time (USA): Monday through Friday: 10:00 AM – 5:00 PM.
12.1.2.4.
Pacific Time (USA): Monday through Friday: 10:00 AM – 5:00 PM.
12.1.3.
Postal mail: Synapse Financial Technologies, Inc., P.O. Box 636, 150 Sutter Street, San Francisco, CA 94104-9991
