Last Updated: June 02, 2024

Cambridge Acceptance Corp and its subsidiaries and affiliates (collectively, “Platform 1 Auto Finance,” “we,” “our,” or “us”) are committed to maintaining your confidence and trust as it relates to the privacy and security of your personal information. This Privacy Policy describes how we use, disclose, and protect the personal information collected:

• through our website, www.platform1af.com, and any other websites or mobile apps where this Privacy Policy is posted or linked (collectively, the “Digital Properties”) and any services available through the Digital Properties;

• in connection with the delivery of our products and services to our customers;

• in connection with our business development and marketing activities; and

• through our other offline and business interactions.

Collectively, we refer to our online and offline interactions with you as the “Services.” In this Privacy Policy, “personal information” means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to an individual. Please carefully review this Privacy Policy to learn more about our information handling and privacy practices. If you are a California resident, click here for more information about our privacy practices and your rights. For details regarding our handling of financial information and your choices with respect to such information, review our Financial Privacy Disclosure.

PERSONAL INFORMATION WE COLLECT

Depending on your use of the Services and how you otherwise interact with us, we may collect or obtain information from and about you in several ways, including: (1) directly from you; (2) automatically when you visit and interact with the Digital Properties; and (3) from third parties. Additional details regarding our collection of your personal information are included below.

Information provided by you

When you visit and interact with the Digital Properties or otherwise engage with us, we collect personal information that you share with us. For example, we may collect personal information when you contact us (via phone, email, etc.), request that we send you promotional communications or other materials, or otherwise communicate with us.

Depending on the context of your interactions with us and the Services, the categories of personal information that we may collect directly from you include:

• Contact information, including your name, street address, telephone number, and email address.

• Identifying information, including your Cambridge Acceptance Corp account name, Social Security number, date of birth, and other similar identifiers.

• Correspondence and communications, including recordings of our email and phone conversations with you and any correspondence related to providing you with the Services.

• Preferences, including how frequently you wish to receive marketing and promotional communications from us.

• Other information you choose to provide, including information you include in any webforms that you complete and submit on the Digital Properties and other information that you provide during your interactions with us.

Where applicable, we may indicate whether and why you must provide us with your personal information as well as the consequences of failing to do so. For example, it may be necessary for you to disclose certain personal information in order for us to provide the Services to you.

You may voluntarily provide certain information to us when you interact with an automated assistance chatbot on the Digital Properties, which our service provider enables on our behalf. Note that your conversations with any chatbot present on the Digital Properties may be monitored and recorded and any personal information you provide will be handled by us and our service provider in accordance with this Privacy Policy.

Some personal information that we receive from you may relate to other individuals (e.g., co-borrowers). You are responsible for obtaining all necessary permissions to provide personal information relating to other individuals to us.

Information collected through automated means

When you visit and interact with the Digital Properties, we (and our service providers and partners) may use cookies, pixels, web beacons, software development kits (SDKs), and other similar tracking technologies to collect certain information automatically.

The specific types of information we (and our service providers and partners) may collect include:

• Device information, which includes the Internet Protocol (IP) address and/or other unique identifier(s) assigned to your device; the location of your device; and other information about your browser, device, and operating system.

• Usage information, which includes information about your interaction(s) with the Digital Properties (e.g., the date and time of your visit(s); the area(s) or page(s) that you visit; the amount of time you spend on a page or use the Digital Properties; the domain name from which you accessed the Digital Properties; and other click-stream or usage information).

We (and our service providers and partners) may use cookies or other similar technologies to collect information about your behavior on the Digital Properties (e.g., how you move and scroll through the Digital Properties, your keystrokes, how you interact with webforms, etc.) and the actions that you take upon receipt of an email from us.

 Analytics

We use third-party analytics and tracking tools to better understand who is using the Digital Properties, how the Digital Properties are used, and how to improve the effectiveness of the Digital Properties and related content. We may also use the information collected to draw inferences. For example, we use Google Analytics to better understand how users interact with the Digital Properties. For information on Google Analytics’ information-handling practices and how you can control the use of information sent to Google, visit https://policies.google.com/technologies/partner-sites. If you wish to prevent your information from being used by Google Analytics, Google has developed the Google Analytics opt-out browser add-on available at https://tools.google.com/dlpage/gaoptout

Interest-based advertising

We use third-party tools and services to serve interest-based advertisements to you across the internet. These tools may include cookies, pixels, web beacons, and/or other similar tracking technologies that automatically collect, store, and/or transmit certain information about your interaction(s) with the Digital Properties and other websites and mobile apps that you interact with and use across your devices. Our third-party service providers and partners use the collected information to serve advertisements to you and measure the performance of our advertising campaigns. To learn more about your interest-based advertising choices, see the “Your Choices” section below.

You may be able to adjust your device or browser settings to limit certain tracking or to decline cookies. Refer to your device’s settings or your browser’s “Help” section for more information on how to delete cookies and/or disable your device or browser from receiving cookies or adjust your tracking preferences. Additional information about cookies, including how to manage them, can be found here: https://allaboutcookies.org.

Site recording technology

We use third-party site-visit recording technologies to memorialize visits to our Digital Properties. Scripts from these technologies are embedded on our Digital Properties and collect information when you interact with pages where the scripts are present. These technologies collect information such as page URL, mouse movements and clicks, information you input, snapshots of pages you visit, time spent on a page, date and time of various interactions with a page, and HTTP headers from your browser. By visiting our Digital Properties or using our Services, you acknowledge and agree to our use of such site recording technologies and the collection, maintenance, and use of information these technologies collect.

ChatBot Technology

We use chatbots on certain Digital Properties to help provide customer service and support, including through the use of a virtual assistant. A chatbot is a software application that mimics human conversations in text or voice interactions on our website. It enables the communication between a human and a machine, which can take the form of messages or voice commands. The chatbot is designed to work without the assistance of a human operator. It responds to questions posed to it in natural language as if it were a real person using a combination of pre-programmed scripts, machine learning, and generative artificial intelligence (“AI”). When asked a question, the chatbot will answer using the knowledge database that is currently available to it. If the conversation introduces a concept the chatbot is not programmed to understand, it will advise of its limitations. The chatbot functionality is limited to Cambridge Acceptance Corp customer service and support inquiries and may not be monitored in real time. If you use our chatbot service, we will collect and maintain any information you provide to us when using the chatbot. You are responsible for the information you share with the chatbot, and we strongly advise you not to input sensitive or personal information, such as financial or account details or other confidential information. We will also create and store a transcript of your chat interaction with us, which will be stored by our third-party service provider. We may use these transcripts and the information you provide for quality control, customer service, fraud prevention, and security.

Information collected from other sources

We may obtain your personal information from other sources, including, for example, credit bureaus, our service providers, our customers, lead generators, social media platforms, Network Partners (as defined below), and other partners.

The information that we receive from other sources may include contact information, demographic information, consumer credit reports, credit scores, credit history, and other consumer reports/credit information, financial information (e.g., information about an account and the terms, amount, usage, or disposition of a loan or other financial product received from a Network Partner), and internet or other electronic network activity information.

We use the personal information that we receive from other sources to help us maintain the accuracy of or supplement the information we collect; personalize your experience with the Services; conduct internal business analysis; and fulfill other business or commercial purposes described in this Privacy Policy.

Combination of information

We may combine personal information that we receive from and about you, including information you provide to us, information we automatically collect through the Digital