PRIVACY POLICY

We use your Personal Information: - to provide the services or information you request; - to communicate with you regarding your use of the Website; - to protect our rights and the rights of our Website visitors; and - to protect the vital interests of the Company, you, or our other Website visitors (for example, in the event of an emergency).

We do not use cookies on the Website.

Nubank NA will not disclose your Personal Information to any third parties except: - to our professional advisers, accountants, insurers, lawyers and auditors on a confidential basis; - if Nubank NA or its assets are or may be acquired by a third party, the information may be provided to that third party and its advisors; - in exceptional circumstances, Nubank NA may be required or permitted by law to disclose Personal Information, for example where such disclosure is necessary to meet any applicable law, regulation, legal process or other legal obligation; detect, investigate and help prevent security, fraud or technical issues; and/or protect the rights, property or safety of Nubank NA, our employees or other users of the Website.; or - otherwise with your consent.

Nubank NA does not sell your Personal Information. Nubank NA may disclose your Personal Information to Nubank NA’s parent company, affiliated legal entities, subsidiaries and any other businesses with whom we are under common corporate control (collectively the "Affiliates"). All of our Affiliates that receive your information from us will comply with the terms of this Privacy Policy with respect to their use and disclosure of such information.

Nubank NA is committed to keeping your information secure. We endeavor to take all reasonable steps to keep secure any information that we hold about you, and to keep this information accurate and up to date. Your information is stored on secure servers that are protected in controlled facilities. Other than the sharing of information outlined in this Privacy Policy, personally identifiable information is not accessible by the public, and we require our employees and data processors to respect the confidentiality of any Personal Information.

We do not direct our Website or services to children (usually considered to be under the age of 13, depending on the country where you reside). We also do not intentionally collect Personal Information from children through our Website. If you are the parent or guardian of a child and you believe that we have inadvertently received Personal Information about that child, please contact us as described in the Contact Us section of this Privacy Policy and we will take reasonable steps to remove the information from our records.

If at any time you want to request, update, correct or remove Personal Information, you are welcome to submit a request to support@cognitect.com. We may ask you to verify your identity before we can act on your request. If you are aware of changes or inaccuracies in your Personal Information, you should inform us of such changes so that our records may be updated or corrected.

We may reject requests that are unreasonably repetitive, require disproportionate technical effort (for example, developing a new system or fundamentally changing an existing practice), risk the privacy of others, or would be extremely impractical (for instance, requests concerning information residing on backup systems).

Where we can provide information access and correction, we will do so, except where it would require a disproportionate effort. We aim to maintain our services in a manner that protects information from accidental or malicious destruction. Because of this, after you delete information from our services, we may not immediately delete residual copies from our active servers and may not remove information from our backup systems.

Where consent is required for our use of your Personal Information as described herein, you have the right to withdraw or decline your consent and cease your use of the Website. If you decide to withdraw your consent, such withdrawal will not affect the lawfulness of processing based on consent before such withdrawal.

California Civil Code Sec. 1798.100, et seq. (also known as the California Consumer Privacy Act of 2018) ("CCPA") provides certain rights to California residents regarding their Personal Information. A California resident has the right to request that we disclose certain information, including: (1) the categories of Personal Information we have collected about that California resident, (2) the categories of sources from which the Personal Information is collected, (3) the business or commercial purpose for collecting or selling the Personal Information, (4) the categories of third parties with whom Nubank NA shares Personal Information, and (5) the specific pieces of Personal Information we have collected about the resident. A California resident has the right to request that we delete his/her Personal Information. Finally, a California resident has the right not to be discriminated against for exercising his/her privacy rights under the CCPA. You can request such Personal Information and change your Personal Information by emailing us at support@cognitect.com.

Pursuant to California Civil Code Section 1789.3, California users are entitled to the following consumer rights notice: California residents may reach the Compliant Assistance Unit of the Division of Consumer Services for the California Department of Consumer Affairs by mail at 1625 North Market Blvd., Sacramento, CA 95834, or by telephone at (916) 445-1254 or (800) 952-5210.

The Website contains links to other websites. These third-party websites have separate and independent privacy policies. The privacy policies and applicable terms of use of the third-party websites will govern your interaction with such third-party websites. We encourage you to review the privacy policy of linked sites, as Nubank NA is not responsible or liable for the practices, content, and/or privacy policies of those third-party websites. Nonetheless, we seek to protect the integrity of our Website and welcome any feedback about these third-party websites.

We will retain your Personal Information only for as long as reasonably necessary for the purposes set out above, considering criteria such as applicable rules on statute of limitations, legal requirements and the duration of your use of the Website and receipt of our services.

This section of the Privacy Policy applies only if you use the Website or services covered by this Privacy Policy from a country that is a Member State of the European Union and supplements the information in this Privacy Policy.

We process information defined as personal data under applicable data protection law ("Personal Data") if provided by you and/or for the purposes set out in this Privacy Policy, as described above. - Legal Basis for Processing Personal Data: Our legal basis to process Personal Data, such as for the purposes listed above in the "How Do We Use Your Personal Information?" section, includes processing that is: - necessary to comply with legal requirements (for example, to comply with applicable accounting rules and to make mandatory disclosures to law enforcement); - protection of the vital interests of a natural person (for example, in the event of an emergency); - necessary for our legitimate interests (for example, to manage our relationship with you and to improve the Website and our services); and - based on your consent (for example, to communicate with you about the Website and services, and to provide you with any information that you may request), which may subsequently be withdrawn at any time (by contacting us at support@cognitect.com) without affecting the lawfulness of processing based on consent before its withdrawal.

In some instances, you may be required to provide us with Personal Data for processing as described above, in order for us to be able to provide you all of our services, and for you to use all the features of the Website.

Nubank NA’s Website and activities may continue to grow and change. Because of this, from time to time, our Privacy Policy will be reviewed and revised. You should check this page occasionally to ensure you are familiar with those changes. Whenever we change our Privacy Policy we will post an updated version on our Website, including the last date of revision. This Privacy Policy was last revised on August 25, 2021.

If you have any questions about how we handle your Personal Information and protect your privacy, please feel free to contact us at support@cognitect.com or call us at 919.283.2748. You may also mail requests to: