Privacy Policy

This Privacy Policy describes how Koala Debt ("Company," "we," "us," or "our") collects, uses, shares, discloses, and sells Personal Information in connection with your use of our websites, mobile applications, related webpages, third-party relationships, and services (collectively, the "Service"). By accessing or using the Service, you accept the practices described in this Privacy Policy and the accompanying Terms and Conditions. If you do not agree with our policies and practices, do not use the Service.

Note: the Terms and Conditions contain a mandatory arbitration provision, as described below in the section entitled "Dispute Resolution and Agreement to Arbitrate." This affects your rights concerning any dispute between you and us or any third party within the Koala Debt network. You waive your right to have any dispute adjudicated by a judge or jury and you waive your right to participate in a class action or similar proceeding, as further described below.

Collection of Information

"Personal Information" is information that identifies, relates to, describes, or can reasonably be associated with a particular consumer or household. The chart below describes the categories of Personal Information we collect, the sources of that information, the business purposes for which it is collected, and the categories of third parties to whom it is disclosed or sold.

Specific pieces of Personal Information we collect include: your name, postal address, email address, telephone number, date of birth, debt and income details you provide, device and browser identifiers, IP address, and records of your interactions with our websites and with partner websites you reach through them.

Website Cookies

We and third parties may use cookies, pixel tags, local storage, web beacons, JavaScript, and related technologies to uniquely identify your browser, remember settings, measure site activity, record that a user visited a page or clicked an advertisement, support email measurement, and improve advertising relevance. You can decline or adjust cookies through your browser settings, though some features of the Service may not function properly if you do.

Site Recordation Technology

We may use site visit recordation technology, including technology from third parties such as Jornaya's LeadID or ActiveProspect's TrustedForm, to document user consent and website interactions. These tools may collect page URL, mouse movements, clicks, contact information entered by the user, page snapshots, IP address, timestamps, and browser HTTP headers. For more information, review the ActiveProspect and Jornaya privacy policies.

Use of Information

We may use Personal Information for business purposes including:

• Providing the Service, including passing your registration to service or product providers participating in our network that may communicate with you directly.
• Sending you marketing and other communications, subject to the consents you provide.
• Responding to your requests and inquiries.
• Analyzing, improving, operating, and maintaining the Service, our systems, marketing, and products.
• Verifying identity, auditing, preventing fraud, maintaining security, and complying with legal obligations.
• Other legitimate business purposes consistent with this Privacy Policy.

Sharing and Disclosure of Information

We may sell Personal Information, or disclose it for a business purpose, subject to contractual confidentiality obligations with the recipients, to:

• Service or product providers participating in our network, so they can respond to your registration.
• Service providers and contractors that operate parts of the Service on our behalf.
• Advertising, analytics, and marketing partners.
• Parties involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of company assets.
• Law enforcement, regulators, or other parties when required by law, subpoena, or court order, or to enforce our rights and protect our systems.

We may disclose aggregate, anonymous, or de-identified information to third parties for marketing, analytics, and business purposes.

Collection and Use of Information from Children

The Service is not intended for children, and we do not knowingly collect Personal Information from children under 16. If we learn that a child under 16 has provided personally identifiable information, we will use reasonable efforts to remove it from our records.

Third Party Links

The Service may contain links to websites operated by third parties. We are not responsible for the privacy practices or content of third-party sites, and the inclusion of a link does not imply endorsement.

Opt-Out

You may opt out of SMS messages at any time by replying STOP to a message you receive from us. Please allow a reasonable period of time for your request to be processed. Message and data rates may apply. To opt out of marketing communications or request addition to a Do Not Call or Do Not Mail list, visit optconsumerprivacy.com. To learn more about interest-based advertising choices, visit aboutads.info/choices or networkadvertising.org/choices.

Security

We use reasonable industry-accepted technology and controls to protect Personal Information from disclosure to unauthorized parties. No method of transmission over the Internet or electronic storage is completely secure, and any transmission of information to us or through the Service is at your own risk. In the event of a breach affecting your Personal Information, we will notify you as required by applicable law via email or notice on the Service.

International Data Transfers

The Service is operated in the United States. If you access the Service from outside the United States, you consent to the transfer of your Personal Information to, and its storage and processing in, the United States, where privacy laws may differ from those of your jurisdiction.

Dispute Resolution and Agreement to Arbitrate

Any dispute, claim, or controversy arising out of or relating to this Privacy Policy or the Service is subject to the dispute resolution provisions of our Terms and Conditions, including binding individual arbitration and the waivers of jury trial and class participation, which are incorporated into this Privacy Policy by reference.

Choice of Law

This Privacy Policy is governed by the laws of the State of Delaware, without regard to its conflict of law principles. Any claim not subject to arbitration will be heard exclusively in the state or federal courts located in Delaware.

Assignment

We may assign or transfer Personal Information, and our rights and obligations under this Privacy Policy, in connection with a sale, merger, reorganization, or transfer of all or part of our business or assets.

California Resident Rights

California residents may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including rights to know, correct, delete, control sensitive Personal Information, opt out of sale or sharing, obtain portability, and avoid discrimination or retaliation for exercising privacy rights. These rights are subject to legal limitations and exceptions.

To exercise privacy rights, visit optconsumerprivacy.com or call 1-888-302-8476. We may need to verify your identity and residency before processing a request. We generally process opt-out requests within 10 business days and other privacy requests within 45 days, subject to applicable exceptions and extensions.

We retain Personal Information as long as reasonably necessary for the purposes for which it was collected, as required by law, rule, regulation, contract, accounting or tax obligations, dispute resolution, legal claim defense, or based on choices you have made.

Changes to This Privacy Policy

We may change this Privacy Policy, including the collection, use, sale, and sharing of Personal Information. Changes are posted on this page with an updated "Last Updated" date, and material changes will be notified as required by law. Your continued use of the Service after a change means you accept those changes.