Privacy policy
What we collect, why, who sees it, and the controls you have. Written to be read, not skimmed past.
1. What we collect
Information you give us
When you request a loan: name, date of birth, address, email, phone, Social Security number, employment and income information, and checking-account details (routing and account number). When you contact us: whatever you include in the message. We never ask for your online-banking password.
Information collected automatically
IP address, device and browser type, pages viewed, referring page and approximate location, through server logs and the cookies described in Section 4.
Information from others
Lenders in our network may tell us whether your request resulted in an offer or a loan, so we can be paid and so we can hold a second request while one loan is open. We do not receive or store your credit report.
2. How we use it
- To transmit your request to Lenders operating in your state and show you their offers.
- To verify your identity and prevent fraud, including fraud using our name.
- To respond to you, resend documents, and handle complaints.
- To operate, secure and improve the site, and to measure which pages are useful.
- To comply with law, respond to lawful requests, and enforce our terms.
- With your consent, to send you service emails about your request. We do not send marketing texts and we do not make marketing calls.
5. Your choices
- Opt out of sale/sharing: submit a request or enable Global Privacy Control.
- Service emails: every email has an unsubscribe link; transactional messages about an open request may continue until it closes.
- Delete or correct your data: email [email protected] with "Delete my data" or "Correct my data" from the address you applied with.
- Not providing information: you can browse without giving us anything; a loan request requires the information Lenders need to make an offer.
6. State privacy rights
Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and other states with comprehensive privacy laws have rights to know, access, correct, delete and port their personal information, to opt out of sale, sharing and targeted advertising, and not to be discriminated against for exercising them. Some information we collect for a loan request is covered by the federal Gramm-Leach-Bliley Act and is exempt from certain state-law rights; we apply this policy to it anyway where we can.
To exercise a right: email [email protected] with the right you're exercising, from the email address you used with us, or submit the opt-out form. We verify requests by matching information you've given us and respond within 45 days (extendable once by 45 days where the law allows). An authorized agent may act for you with written permission. California: in the past 12 months we collected the categories in Section 1 and disclosed them for the purposes in Sections 2–3; we do not use or disclose sensitive personal information (such as your Social Security number or account numbers) for any purpose other than providing the service you requested, preventing fraud and complying with law.
7. Security
Information is encrypted in transit (TLS) and at rest, access is limited to staff and providers who need it, and we log access to request data. No system is perfectly secure; if a breach affects your information we will notify you as state law requires. Protect yourself too: we never ask for passwords, and a message asking for a fee is not from us — scam alerts.
8. Retention
Request data is kept for 25 months after your last activity to resolve disputes, prevent fraud, meet record-keeping obligations and honor the one-open-loan rule, then deleted or de-identified. Support emails are kept for 3 years. Server logs are kept for 90 days. We delete sooner on request where no legal obligation requires retention.
9. Children
The site is for adults 18 and older. We do not knowingly collect information from anyone under 18; if you believe we have, email [email protected] and we will delete it.
10. Changes to this policy
We will post changes here with a new effective date and, for material changes, notify you by email if we have your address. Continued use after the effective date means you accept the updated policy.
11. Contact
- [email protected]
- Privacy requests
- Email [email protected] with "Privacy" in the subject line. Zebit USA is an online service; all notices are accepted by email and acknowledged within one business day.
- Opt-out form
- Do Not Sell or Share My Personal Information