Privacy Policy

At Maash, we build simple, self-custodial tools to help people and businesses use digital dollars. Earning your trust starts with respecting your privacy. This Privacy Policy explains how Maash Inc. (“Maash,” “we,” “us,” or “our”) collects, uses, shares, and safeguards personal information when you:

• Visit our website;
• Download and use our mobile applications;
• Create or manage a Maash account;
• Create or manage a Maash Virtual Account;
• Participate in Maash programs;
• Contact Maash for support;
• Attend Maash in-person and online events;
• Or otherwise communicate or interact with Maash, including through any surveys, rewards, promotions, sweepstakes, contests, referrals, or other marketing activities we may conduct.

This Privacy Policy also describes your choices and rights over your information and how to contact us.

Note: Maash is self-custodial—we do not hold your balances or move funds on your behalf. Some features may be provided with or through third-party partners; where that’s the case, we explain how data is shared and protected. Where we use third-party email delivery or publishing platforms for marketing, such as email service providers or blog platforms, we require them to process personal information only on our instructions and with appropriate safeguards.

1. Information We Collect

We collect information about you in a variety of ways depending on how you interact with us and our websites, mobile applications, products, and services, including:

• Directly from you, such as when you register for an account, sign up to receive communications from us (including newsletters and blog updates, where you opt in), or engage with us through Maash programs and events.
• Through the use of cookies, server logs, and other similar technologies when you interact with our websites, mobile applications, advertisements, and emails.
• From other sources, like information from our affiliates, Business Partners, Service Providers, and other third parties, or from publicly available sources.

1.1 Personal Information Collected From You

Below we provide the list of categories of personal information that Maash and its service providers collect about you and the purposes for collection.

Personal Identifiable Information. We collect information that identify, relate to, describe, is reasonably capable of being associated with, or could be reasonably linked, directly or indirectly, with a particular consumer, device, or household. This includes your first name, last name, date of birth, identity document (such as passport, driver’s license, or other forms of documentation required to verify your identity), physical address, gender. We also collect your username (known as @maashtag) and email address when you inquire about or register a new account in our application.

If you verify your identity in order to use services that require it, we also collect your phone number and your taxpayer identification number, together with the documents and images described in Section 3.1. If you open an account on behalf of a business, we additionally collect information about that business and about each of its beneficial owners, directors and controlling persons — including their name, email address, phone number, date of birth, address, government-issued identification and ownership percentage. We may also collect your phone number if you opt to connect your WhatsApp account.

Purposes for Personal Information Collection:

• Provide you with Account-related functionalities.
• Verify your identity for services requiring Know Your Customer verification.
• Keep track of the personal information associated with your Account.
• Permit other users to identify you more easily when performing transactions to your account.
• Help you access your Account.
• Prevent others from accessing your Account.
• Communicate directly with you. Where you have opted in, send you newsletters, blog updates, event announcements, and other promotional communications. You can withdraw consent at any time.

Biometric information. Where you specifically consent, we may collect a photograph(s) for your account.

Purposes for Personal Information Collection:

• Personalize your account.
• Permit other users to identify you more easily when performing transactions to your account.

Internet or other electronic network activity information. We collect internet activity information in connection with your use of our website and mobile applications. This includes (as applicable to web or app): network type, browser characteristics, device model, operating system and version, app version/build number, referring URLs, approximate location (city/country derived from IP address), and telemetry such as:

• Session & context: session ID (auto-generated, unique per app session); Maash user ID and, where necessary to provide support, your account email.
• Performance metrics: app startup time (cold/warm); screen/view load times (e.g., time to first byte, render time); UI responsiveness/long-task detection; and network request metadata (endpoint URL without sensitive payloads, method, status codes, latency, resource size).
• Stability & reliability: crash reports (native and JavaScript), handled vs. unhandled errors, crash-free sessions and crash rates by version/OS, error stack traces and message details
• Usage analytics: screen views and navigation flow, user actions (e.g., taps/clicks on key features), session length and number of sessions per user, and active user counts (DAU/WAU/MAU).

We use Cloudflare Web Analytics on our website. Within our applications, this telemetry is collected and stored by our own systems rather than sent to a third-party analytics provider. Cloudflare Web Analytics is cookieless and does not track visitors across sites. We do not collect passkeys, recovery codes, or precise GPS location, and we configure our tools to avoid ingesting sensitive request/response payloads. We do not use this data for targeted advertising.

Purposes for Personal Information Collection:

• Sanctions compliance (including use of IP-derived approximate location).
• Analytics and product improvement (e.g., understanding feature usage and performance).
• To keep your information and our Services safe and secure (e.g., crash detection, fraud/abuse prevention).
• To troubleshoot issues and improve our Services.

Transaction information. We may collect or have access to transactional information about your use of the Services. This information can include details of your transactions or purchase (amount, type, size, date and time, merchant), top-up history, financial data (self-reported income and monthly spend).

Purposes for Personal Information Collection:

• Analytics and product improvement (e.g., understanding feature usage and performance).
• To troubleshoot issues and improve our Services.

Preference information. We may collect your preferences related to marketing, advertising, communications, and participation in our Services.

Purposes for Personal Information Collection:

• Understanding our users and customers.
• Provide our Services to you and our customers.
• Record and honor your marketing preferences, including consent to receive (or opt out of) newsletters and promotional emails.

Third-Party information. We may collect information, including personal information on your employees, contractors, vendors, customers and other third parties that you transact with via the Services. We may also collect personal information, such as a name, email address, phone number for any potential referrals.

Purposes for Personal Information Collection:

• Provide our Services to you.
• Enable your employees and other authorized users to create an account.
• To process your transactions and help to prevent fraud and other risks.
• To contact your referrals about Maash’s Services, including any promotional offerings.

Linked data. We may collect information about you and your business that you choose to make available to us through third-party services, including external bank accounts, accounting system integrations, e-commerce platforms, third party payment processors, HR systems, and work place integrations. In connection with these integrations, we may obtain personal information about your employees, contractors, authorized users, vendors, customers, and other third parties.

Purposes for Personal Information Collection:

• Provide our Services to you, your customers, vendors, contractors and employees.

Other information you choose to provide. We collect other information you provide when you contact us for assistance with our Services or to provide your feedback.

Purposes for Personal Information Collection:

• Receive and act upon your feedback or issues.

Cookies & first-party tracking. We use cookies and similar technologies on our website. A cookie is a small data file that a website stores on your device. We may also use page tags or pixels (sometimes called web beacons) embedded in our web pages to help measure usage. These technologies can recognize information such as cookie identifiers, the time and date a page is viewed, and a description of the page where the tag is placed. Our website analytics (Cloudflare Web Analytics) is cookieless and does not set analytics cookies or track you across sites. We do not use cookies for targeted advertising.

Purposes for Personal Information Collection:

• Troubleshoot and perform analytics on the Services (including via Cloudflare Web Analytics) and improve your experience on our websites.
• Provide content and features that are relevant to how our websites are used.
• Use web server logs and similar standard technologies to track your use of our websites for the purposes above.

1.2 Personal Information Collected From Third Parties

In addition to the information that we collect from you directly, we may also receive information about you from other sources, including third parties, Business Partners, our affiliates, Service Providers, or publicly available sources.

Affiliates, Business Partners, and Service Providers. We may obtain your personal information from our affiliates, Business Partners, and Service Providers to offer and provide our products and services and to support our core business functions. This includes customer support platforms (e.g., ticketing, help center, and in-app/web messaging), communications providers (email delivery), cloud hosting and storage, analytics/diagnostics, error/crash reporting, and security/anti-abuse tools.

Categories received may include your contact details (name, email), Account identifiers (e.g., @maashtag), support communications (messages you send us, attachments you upload, and related metadata such as timestamps, language, browser/device type and approximate location derived from IP), and technical diagnostics relevant to your request. We use this information to operate and improve the Services, provide and triage support, troubleshoot issues, and keep the Services secure. Please do not include sensitive credentials (e.g., your recovery code) in support tickets or attachments.

Information from Other Sources. We may supplement the information we collect with information from publicly available sources and from our affiliates, subsidiaries, or Business Partners that helps us authenticate users, prevent abuse, and improve our Services. We do not obtain personal information from data brokers or advertising networks.

1.3 Information from Event Organizers and Partners

Where you attend an event that Maash sponsors or participates in, we may receive your contact information from the organizer or host. We will only use such information to send you marketing communications if the organizer collected and shared it with your permission for that purpose, or after we first request and obtain your opt-in consent (“permission pass”). If you do not opt in, we will not add you to our marketing lists and will retain your details only for non-marketing purposes consistent with this Policy such as security incidents or suppression lists.

2. How We Use Information

We may use and/or disclose some or all of the personal information we collect from and about you for the following purposes:

• To offer and provide our products and services and to support our core business functions.
• To service or fulfill requests or transactions, including to communicate with you about our products and services, send confirmations or notifications, register and service your Account, and respond to customer service requests through our support tools.
• To maintain our customer relationship and provide you with information about or changes to our websites, our Terms of Service, and/or this Privacy Policy.
• For internal business processes, authentication, security, loss and fraud prevention, sanctions including geo-restriction compliance, public safety, and legal functions.
• For direct marketing purposes, which may include sending you information about our existing, new, or updated products and services. You may opt out at any time.
• To invite you to participate in user surveys or to ask for your feedback on our websites or online or mobile applications or services.
• To conduct research and analysis, including website analytics and in-app performance or diagnostics telemetry to monitor stability, detect crashes, and improve features (not used for targeted advertising).
• For internal statistical, product development, and operational purposes, such as to measure and understand aggregate usage, feature adoption, and other trends among our users.
• To keep your information and our Services safe and secure.
• To investigate, prevent, defend against, or take other action regarding violations of our Privacy Policy or Terms of Service, illegal activities, suspected fraud, or situations involving potential threats to the legal rights of us or others.
• To comply with applicable laws and regulations.

Service vs. Marketing Communications. We may still send you service-related communications (e.g., account verification, transactional, security or legal notices) even if you opt out of marketing. These are not promotional in nature.

We retain your personal information for only as long as necessary to fulfill the purposes in this Privacy Policy, including to satisfy any legal, accounting, or reporting requirements, unless a longer retention period is required or allowed by law. We may retain de-identified or aggregated information for analytics and product improvement.

3. How We Share Information

3.1 Third Parties and/or Service Providers

We may disclose your personal information to third parties and/or service providers as indicated below.

Affiliates and Subsidiaries. We may disclose your personal information to affiliates that support our core business functions to provide you with the Services and offer you additional products or Services.

Service Providers. We may disclose your personal information to service providers that support our core business functions, including, but not limited to:

• Payment provider if you opt into related services
• Wallet infrastructure (e.g., Dfns), which generates and holds the key shares that authorize transactions from your account, and which receives an account identifier and your device’s public credential information for that purpose
• Hosting and infrastructure (e.g., cloud hosting, content delivery)
• Email delivery, which receives your email address and the contents of the messages we send you, including transaction notifications and sign-in codes
• Bot detection and anti-abuse (Cloudflare Turnstile), which receives your IP address and technical characteristics of your browser when you request a sign-in code, in order to distinguish real people from automated abuse. Its privacy addendum can be found here: https://www.cloudflare.com/turnstile-privacy-policy/
• Blockchain node providers, which our systems and your own device query in order to read public blockchain data. A node provider receives the IP address making the request alongside the account addresses being read
• Push notification services operated by your device or browser vendor (e.g., Apple, Google, Mozilla), which receive a delivery address for your device and the encrypted contents of the notification
• Analytics (e.g., Cloudflare Web Analytics)
• Customer support platforms, if and when we adopt one

These providers are contractually bound to process personal information only on our behalf, to maintain appropriate confidentiality and security, and to not use the information for their own purposes.

Identity Verification Service Provider. You may opt into verifying identity for certain Services requiring Know Your Customer verification. In such cases, we utilize a service provider that collects and uses biometric information from your driver’s license and / or passport photo to match against your image. This biometric information is held by the service provider pursuant to its privacy policy, which can be found here: https://sumsub.com/privacy-notice-service/

Where you opt into services provided through our payment provider, the identity information and documents you supplied — including images of your identity document, your photograph, your government-issued identification number and your taxpayer identification number — are also transmitted to that provider, which is required to verify your identity independently before it can offer you those services.

Professional Advisors and Auditors. We may disclose personal information to legal, accounting, or auditing firms where necessary to obtain professional advice, protect our legal rights, or comply with audit and financial reporting obligations.

Acquisitions. We may disclose your personal information to a potential or actual acquirer, successor, or assignee as part of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in bankruptcy or similar proceedings).

Required by Law. We may disclose your personal information if required to do so by law or in the good faith belief that such action is appropriate:

• Under applicable law, including laws outside your country of residence;
• To comply with legal process;
• To respond to requests from public and government authorities, including public and government authorities outside your country of residence;
• To enforce our terms and conditions;
• To protect our operations or those of any of our affiliates;
• To protect our rights, privacy, safety or property, and/or that of our affiliates, you or others; and
• To allow us to pursue available remedies or limit the damages that we may sustain.

Other Disclosures with Your Consent. We may ask if you would like us to share your information with other unaffiliated third parties who are not described elsewhere in this Privacy Policy.

International transfers. Where a disclosure to our service providers involves a transfer of personal information outside your jurisdiction, we implement appropriate safeguards (for example, adequacy decisions where available, the EU Standard Contractual Clauses and the UK International Data Transfer Addendum), and require our providers to protect the information to an equivalent standard.

Marketing Service Providers and Publishing Platforms. We use third-party email and publishing platforms to deliver newsletters and other marketing communications. These providers are contractually bound to process personal information only on our behalf, to maintain appropriate confidentiality and security, and to not use the information for their own independent purposes. Where a disclosure involves cross-border transfer, we implement appropriate safeguards as described in Section 6.1.

Sourcing from Third Parties & Marketing Consent. If we receive your contact information from an event organizer, partner, or sponsor, we will only send you marketing communications if the original collection included permission for such use or after we first obtain your opt-in consent. If you opt out, we will add you to a suppression list to avoid future marketing sends.

3.2 We Do Not Sell Your Personal Information

We do not sell personal information and do not share it for cross-context behavioral advertising (as defined under applicable U.S. state privacy laws). We only disclose information to Service Providers and other parties described in this Policy. Where required, we honor browser-level opt-out signals (e.g., Global Privacy Control) for “sale”/“sharing.” We also do not sell or share the personal information of minors under 16.

3.3 Sensitive Personal Information

We do not use or disclose “sensitive personal information” for any purpose other than those permitted under California Privacy Regulations §7027(m) (for example, to provide the Services, ensure security and integrity, short-term transient use, and to prevent fraud and illegal activity). We do not use sensitive personal information to infer characteristics about you.

For clarity:

• We do not collect precise geolocation.
• If you choose to undergo identity verification, government-issued IDs and biometric identifiers would be collected for identification. Profile photos you choose to upload are used only to personalize your account and are not processed as biometric identifiers.
• If you choose to connect third-party accounts or tools, we endeavor to receive tokens or limited identifiers from those providers rather than full account numbers or credentials, where technically possible.

4. Cookies And Other Tracking Technologies

We, and our third-party partners, use cookies to automatically collect certain types of usage information when you visit our website, use our Services, read our emails, or otherwise engage with us. We typically collect this information through a variety of tracking technologies, including cookies, web beacons or tags, file information and similar technology (collectively, “Tracking Technologies”).

4.1 What are Cookies?

“Cookies” are small packets of data that a website stores on your computer’s or mobile device’s hard drive (or other storage medium) so that your computer will “remember” information about your use. Below is a summary of the types of cookies we use.

Essential Cookies. These are cookies without which you would not be able to use our Services. For example, essential cookies adjust the website data transmitted to match your internet connection, get you to the secure versions of the website, and help provide products or services you specifically request. If you set your browser to block these cookies, some parts of our website will not work.

Analytic Cookies. These cookies count visits and traffic sources to measure and improve the effectiveness of our Services. We may use persistent cookies, which will remain on your computer even after you close your browser, to understand general website usage and volume statistical information and improve the content and offerings on our websites. We may also use persistent cookies to store user preferences. We do not use cookies for interest-based advertising.

Functional cookies. These cookies allow the website to remember choices you make and provide enhanced functionality and more personalized features. These technologies are used so that we can provide a continuous and more personalized experience for you (e.g., to recognize you by name when you return to the application). If you disable these cookies, some enhanced features may not function properly.

4.2 Analytics and Diagnostics (Non-Advertising)

We use analytics and diagnostics tools to understand how our website and apps perform and to improve reliability and user experience. These tools are not used for targeted advertising.

Website analytics (Cloudflare Web Analytics). We use Cloudflare Web Analytics to measure site traffic and usage (e.g., pages viewed, referrers, country, browser/device type, and page performance). It is privacy-first and cookieless: it does not set cookies, does not fingerprint visitors, does not track you across sites, and does not collect personal information for advertising. Because it sets no cookies, no analytics-cookie consent is required to browse our website.

App performance and diagnostics. In our apps, we monitor stability and performance (e.g., screen load times, error reports, network request metadata, and diagnostics such as device/OS and app version). This telemetry is sent to our own systems; we do not use a third-party monitoring provider in our apps, and it is not used to build a profile of you across other services. We configure this collection to avoid ingesting sensitive payloads and do not collect passkeys, recovery codes, or precise GPS location. Where required, we obtain consent for non-essential analytics signals.

Consent and controls. Our website analytics is cookieless, so no analytics-cookie consent is required to browse our website. For any non-essential cookies (for example, in our app), where required by law we obtain your consent and provide a way to withdraw it; otherwise, you can manage cookies through your browser settings.

Your choices. Depending on your browser or device, you may be able to delete, block, or receive notifications about cookies through your settings. Because our website analytics is cookieless, blocking cookies does not affect it and the core site continues to function. In-app, you may disable certain non-essential analytics where available or contact support@poplinmoney.com to request limits on association of your account with analytics events.

4.3 ‘Do Not Track’

Although we do our best to honor your privacy preferences, we are unable to respond to your browser’s ‘Do Not Track’ signal at this time. We also recognize Global Privacy Control (GPC) signals for sale/share opt-outs where legally required. We do not sell/share personal information.

5. How You Can Control Your Information

Profile. You may update your profile information, such as your username and profile photo, within the App.

Access to your mobile device information. You may control our access to certain device features through your device’s Settings. For example, you can allow or revoke the App’s permission to access your Photos (e.g., to select a profile picture) and Camera. Adjusting these permissions may limit related features in the App.

How to control your communications preferences. You can stop receiving promotional email communications from us by clicking the “unsubscribe” link in those emails. We make every effort to promptly process all unsubscribe requests. You may not opt out of service-related communications (e.g., account verification, transactional communications, changes/updates to features of the Service, and technical and security notices).

Cookies and analytics preferences (web & app). You can manage non-essential website cookies (e.g., analytics) at any time through our Manage Cookies link (where shown) or your browser settings. The App does not currently offer an in-app toggle for analytics; you can contact support@poplinmoney.com to request that we limit association of your account or email with analytics events and restrict collection to strictly necessary telemetry.

If you believe we received your email from an event organizer or partner without your permission, please unsubscribe using the link in the email or contact us so we can remove you and place your address on our suppression list.

6. How We Protect Your Information

6.1 Data storage and transfer

Personal information collected through our Services may be stored and processed in the United States or in other countries where Maash or our affiliates, subsidiaries, Business Partners, or Service Providers maintain facilities.

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, please note that Maash generally acts as the controller for the personal data described in this Policy (unless stated otherwise). Your personal information may be transferred to countries that do not offer the same level of data protection as your home jurisdiction. When we transfer personal information internationally, we implement appropriate safeguards to protect it, including:

• Adequacy decisions where available;
• The EU Standard Contractual Clauses (SCCs) (2021) for transfers from the EEA, and the UK International Data Transfer Addendum/Agreement for transfers from the UK; and/or
• Other appropriate contractual, technical, and organizational safeguards designed to ensure an equivalent level of protection.

We also require our Service Providers to: (i) process personal information only on our instructions, (ii) maintain appropriate confidentiality and security measures, and (iii) comply with applicable international transfer requirements. Where feasible, we select regional processing options (e.g., EU endpoints) to reduce cross-border transfers.

You may contact us to request more information about these safeguards or to obtain a copy (subject to redactions to protect the confidentiality of our agreements).

By using our Services, you acknowledge that your information may be transferred to the United States and other countries in which Maash or its affiliates, subsidiaries, Business Partners, or Service Providers operate, and that it will be handled as described in this Privacy Policy.

Some of our email delivery and publishing vendors may process your contact information outside your home jurisdiction. We apply the same contractual and technical safeguards described above to those transfers.

6.2 Keeping your information safe

We care about the security of your personal information and use reasonable technical and organizational measures designed to protect it against unauthorized access, use, or disclosure. We also require our Service Providers to implement appropriate security measures and to process personal information only on our instructions.

Self-custody. Maash is a self-custody application. We do not collect or store your passkeys or recovery code. Never share your recovery code with anyone, including Maash.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we are required by law to inform you of a breach of your personal information, we may notify you electronically where permitted.

6.3 Links to other websites and services

Our Services may contain links to the third-party websites of our Business Partners, advertisers, and social media sites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. We strongly recommend that you read their privacy policies and terms and conditions of use to understand how they collect, use, and share personal information. We are not responsible for the privacy practices or the content on the websites of third-party sites.

6.4 Deidentified information

To the extent we process “deidentified” Personal Data, as defined under applicable law, we will maintain and use that information in deidentified form and will not attempt to reidentify the information except as permitted by applicable law.

7. Blockchain Transparency

Maash uses the Solana blockchain, where transactions and related metadata (e.g., wallet addresses, amounts, timestamps, program interactions) are publicly visible and cannot be altered or deleted. Your transaction history and wallet address may remain visible on-chain even if your account is closed. This data is pseudonymous and not directly linked to your personal identity unless you choose to disclose it or associate it with identifiers (for example, your @maashtag, email, or public profiles).

Because on-chain data is public, third-party block explorers and analytics services may index, label, and republish that data. Maash does not control those third-party services and cannot remove information they publish from the blockchain.

While we cannot modify or erase on-chain data, we will delete or de-link any off-chain personal information that we control (for example, account profile details or @maashtag–to–wallet mappings) where feasible and permitted by law. Self-custody means you retain control of your wallet. Never share your recovery code with anyone, including Maash.

8. Children

Our services are not directed at minors. We do not knowingly collect, use, sell, or solicit any personal information from anyone under the age of 13. We also do not knowingly “share” or “sell,” as those terms are defined under applicable law, the personal information of minors under the age of 16. If you are a parent or guardian and believe that we might have any personal information from your minor, please contact us at support@poplinmoney.com.

9. Your Rights

Some jurisdictions give you a right to make the following choices regarding your personal information:

9.1 Right to know

You may request the following information about the personal information we have collected, used, or disclosed about you during the past 12 months, and to receive information in a commonly used, portable format:

• The categories and specific pieces of personal information we have collected about you;
• The categories of sources from which we collected the personal information;
• The business or commercial purpose for which we collected the personal information;
• The categories of third parties with whom we shared the personal information; and the categories of personal information about you that we disclosed for a business purpose, and the categories of third parties to whom the information was disclosed.

9.2 Right to correct

You may request that we correct or modify your personal information.

9.3 Right to delete

You may request that we delete the personal information we have collected from you, though we may be permitted to retain personal information for certain purposes.

9.4 Right to object

In certain circumstances, you may object to the processing of your personal information, or request that we restrict processing of your personal information, by following the instructions described below.

Where we process information for direct marketing, you may object at any time; if you do so, we will stop processing your personal information for marketing.

Where we process information based on your consent (e.g., non-essential analytics in certain regions or marketing where required), you may withdraw that consent at any time; withdrawal will not affect prior processing.

9.5 Right to non-discrimination

You have the right to not be discriminated against for exercising your privacy rights.

9.6 Right to Appeal

You may have the right to appeal our response to your request.

9.7 Submitting a privacy request

To submit a request to exercise any of the privacy rights described above, you may email us at support@poplinmoney.com. To protect your information, we will verify your identity before responding to your request. To verify your identity, we will request some information from you, like your email address and phone number, and/or by requiring you to log into your Account or verify your email via a one-time code. We may also ask to see your government ID, along with a current digital photo of your face so we can ensure the photo ID truly belongs to you. We will never ask for your passkey or recovery code.

9.8 Authorized agents

In some circumstances, you may designate an authorized agent to submit requests to exercise certain privacy rights on your behalf. If any authorized agent submits a request on your behalf, we require the authorized agent to submit the following information so that we can confirm their authority to act on your behalf.

Evidence of authorization to act on your behalf, such as with a:

• Secretary of State authorization,
• Notarized written permission from the consumer, or
• Power of attorney; and

Evidence of your identity: first and last name, email address, and a one-time code or government ID (as permitted by law).

If we do not receive both pieces of information, the request will be denied.

Please note there may be circumstances where we cannot honor your request, as permitted under law. For example, if you request deletion, we may need to retain certain personal information to comply with our legal obligations.

9.9 Lodging a complaint

You have the right to lodge a complaint with your applicable supervisory authority.

If you are a resident in the United Kingdom or the European Union and think we have not complied with the requirements of the GDPR as it applies to your personal information, you have a right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK: casework@ico.org.uk or 0303 123 1113 / +44 1625 545 700; https://ico.org.uk/, and/or one of the EU supervisory authorities: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.

10. Changes to This Policy

We may modify or update this Privacy Policy from time to time to reflect the changes in our business and practices. Please look at the ‘Last Updated’ date at the top of this page to see when this Privacy Policy was last revised. Any changes to this Privacy Policy are effective when posted on our website.

If we make material changes to how we use your personal information for marketing, such as introducing new categories of marketing communications or new third-party disclosures, we will provide reasonable advance notice before those changes take effect.

11. Contact Us

For questions or requests regarding this policy, please contact us at support@poplinmoney.com. We will attempt to respond to your requests and to provide you with additional privacy-related information.