Privacy and Security Policy

Assembly Technologies, Inc. (“Assembly” or “Us” or “We”) is serious about protecting the privacy of your personal information. We have put strict policies into place to ensure that the privacy of your personal information is protected while still enabling you to make use of the website (the “Site”) or any mobile application or other products or services provided by Assembly (collectively with the Site, the “Services”). We use information collected about you through the use of the Services or on the Site solely for the purposes set out in this policy. The terms of this policy are also incorporated into the Assembly Terms of Use and Registration Terms.

What information do we collect?
We collect personal information from you when you register for our service (directly or indirectly through a partner). “Personal information” generally means information that may be used, alone or in combination with other information, to personally identify a business or individual.
This information includes, but is not limited to, your name, e-mail address, mailing address, phone number, social security number and bank account information. Personal information does not include publicly available information or information that has been de-identified, aggregated, or in a form that is not capable of being associated with or linked to you.
We also collect information regarding our transactions and experiences with you, including your payment history. We may also collect information from third-parties’ websites or applications as specified in this policy below. We may also collect information through the use of cookies, as outlined below.
If you provide, or make available, any personal information about any business personnel, administrators, employees, owners, and other authorized persons you must first obtain their consent to disclose such information to us. You must inform all such other persons how we process personal information and all other terms of this Privacy and Security Policy.

What do we do with the information we collect?
Any of the information we collect from you may be used in one of the following manners:
To compile, save, use and analyze your information in both a personally identifiable form and an aggregated, non-personally identifiable form;
To operate, maintain, improve and provide to you our Services, conduct our business and process transactions;
To verify your identity;
To register you as a user and identify you when you sign in to your account;
To conduct background checks and determine your eligibility for our products;
If you are approved for funding, an account, or other product, to process, service and collect your financing transaction, and otherwise service your account, or other product;
To personalize your experience and improve customer service (your information helps us to better respond to your individual needs, your service requests, to send marketing communications and send account update notifications);To develop and improve our website (we continually strive to improve our website offerings based on the information and feedback we receive from you);
To detect and guard against potential fraud, identity theft, security incidents, or other illegal activity.
Additional uses are outlined in the California-specific section below titled “What We Do With Your Information.” We will share your personal information with third parties only in the ways that are described in the policy.

Security - how do we protect your information?
We take security very seriously and have developed a comprehensive set of practices, technologies and policies to help ensure your data is secure. We take your security and privacy seriously and make it a priority. Accordingly, we use advanced security technology and implement a variety of security measures to maintain the safety of your personal information.
More specifically:
All of our communications and processing occur through Secure Socket Layers (SSL) technology, which ensures such information is encrypted and secure. Such information is stored in our secure database in an encrypted format, which is only accessible to Assembly employees and representatives with special access rights. These individuals are required to keep the information confidential. 
To help prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we have appropriate physical, electronic, and managerial procedures to safeguard and secure the information we collect online. 
We also use the services of leading companies to process all financial transactions.
While we strive to protect your personal information and use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. Therefore, Assembly cannot ensure or warrant the absolute security of any data or content you transmit to us. 
In the event of a suspected breach of the security of your personally identifiable information, we will, to the extent required by law, notify you so you can take appropriate protective steps and to inform you of the steps that Assembly is taking with respect to any such suspected breach.

Do we use cookies?
As is true of most platforms, we use tracking technology (i.e., cookies) which help us make our website and services more user-friendly, efficient, and secure. We may use such technology for advertising purposes. Cookies will not harm your computer or mobile device and do not contain viruses.
 If you prefer not to accept cookies, you can opt out in one of the following ways:
By browser. Most browsers allow you to (1) require that the browser notifies you and lets you choose whether to accept or reject a cookie, (2) disable existing cookies, and/or (3) set your browser to automatically reject cookies. If you wish to reject cookies across all browsers you use, you will need to do this on each browser on each device you use.
DAA. The Digital Advertising Alliance (DAA) offers tools to opt out of receiving interest-based online advertisements on your browser from parties that participate in the DAA program. You can follow the instructions at www.aboutads.info/choices, or http://www.networkadvertising.org/choices/ to place an opt-out cookie on your device. That opt-out cookie will indicate you do not want to receive interest-based ads, and you will need to add it to each browser on each device if you wish to fully opt out.
Blocking cookies may negatively impact your experience on our website. Additionally, you may still receive ads, though they should not be based on your interests. We are not responsible for the effectiveness of, or compliance with, any third parties’ opt-out options or programs.

Do we disclose any information to outside parties?
We may provide your information to our trusted business partners who assist us in operating the Site, conducting our business (including partners referring you to us), or servicing your account, so long as those parties agree to keep this information confidential. We also may disclose your information to third parties to whom we may refer you or your inquiry or application for financing or other services, consistent with our notice to you and/or consent from you. In addition, we may disclose our transactions and experiences with you to credit bureaus. 
We do not sell personal information, or otherwise provide personal information to third parties without your prior consent to do so, other than service providers receiving information to perform services for us on our behalf. Below are the following categories of third parties with whom we may share your information:
Affiliates;
Our service providers, which may include advertising and marketing companies, social media companies, technology companies, fraud prevention agencies, and credit bureaus;
Entities with which we have a business relationship, which may include our partners and collection agencies;
Any other third party with your prior consent to do so.
In addition, we may also disclose your information:
As required by law, such as to comply with a subpoena, judicial or administrative order or warrant, and/or any similar legal process;
When we believe in good faith that disclosure is necessary to (i) protect our rights or the rights of third parties (ii) to protect our property and safety or the property and safety of others, or (iii) investigate fraud or respond to a request from a governmental entity;
If Assembly is involved in a merger, acquisition, transfer, auction (including in a bankruptcy proceeding) or sale of all or substantially all of its assets or equity, or of assets related to the divestiture of a particular division or product, in connection with such a transaction;
In connection with the sale of delinquent debt for collections purposes; or
With third parties in de-identified or aggregated form for marketing, advertising, research, or other business purposes. 
Text messaging originator opt-in data and consent will not be shared with any third parties.

Using Third Party Services and Data Retention
You allow us to receive information when you use the Services to log in to a third-party website or application (e.g. Facebook, Twitter or LinkedIn) (the “Third Party Platform”). Please note that we retain the information we receive from your personal profile on the Third Party Platform while you are logged-in to the Services and even after you have logged-out from the Services if such retention is reasonably necessary to enforce this policy and our Terms of Use, in our sole discretion.

DMV INFORMATION
We may collect information about you from state departments of motor vehicles (“DMVs”) for use in the normal course of business to verify the accuracy of information you may submit to us.  We may redisclose such DMV information only for a permitted use, including for collection purposes.

Partner Policies
From time to time, Assembly may help you obtain products or services from other banks. The privacy policies for those banks will be provided at the time you contract for those services, as applicable. 

Use by Minors
We do not knowingly collect personal information from anyone under the age of 13. If we learn of such information, we will delete it as quickly as possible. If you believe we may have such information, please contact us.

Your California Privacy Rights
This section applies to any California residents about whom we have collected personal information from any source, including through your use of our Site, by using our Services, or by communicating with us electronically, in paper correspondence, or in person (collectively, “you”). For purposes of this section only, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California consumer/resident or household.  Personal information does not include publicly available information or information that has been de-identified, aggregated, or in a form that is not capable of being associated with or linked to you.

What Information We Collect
We may collect the following categories of personal information about you:
Identifiers, which may include real name and alias; mailing address; unique personal identifier; online identifiers as detailed below; Internet Protocol (“IP”) address; email address; telephone number; account number, name, and password; Social Security number; driver’s license number, passport number, state or other government-issued identification card number; and/or other similar identifiers;
Commercial information, which may include records of personal property; products or services purchased, obtained, or considered; account balances, payment history, or account activity; bank account information and other information relating to your financial institution; credit application, credit checks, and information from credit reporting agencies; and/or other purchasing or consumer histories or tendencies;
Information relating to Internet activity or other electronic network activity, which may include cookie identifiers, clear gifs (a.k.a. web beacons/web bugs), browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, clickstream data, device platform, device version, and/or other device characteristics.
Geolocation data, which may include GPS data; locational information based upon your IP address; cell network data; and/or other similar locational data; and which may be collected from various devices including your mobile device(s);
Audio, electronic, or visual information, which may include records of calls to or from our customer service centers; and/or video surveillance information;
Professional or employment-related information, such as your current and previous employers; job title and responsibilities; assets; income; and/or other information related to your work history and/or prospective employment;
Education information;
Inferences about you;
Information not listed above and related to characteristics protected under California or federal law; which may include gender; race and ethnicity; nationality; marital status; military service / veteran status; and/or date of birth;
Other personal information not listed above and described in California Civil Code § 1798.80(e), which may include signature; physical characteristics or description; insurance policy number; and/or bank account number, credit card number, debit card number, and other financial, medical, and/or health insurance information.

What We Do With Your Information
We may collect or use personal information from you for the following purposes:
Internal analytics
Assessing third party vendors / service providers
Audit, compliance, policy, procedures, or regulation
Billing, payment, and fulfillmentCustomer claims and fraud investigation and prevention
Customer communications (including, but not limited to, customer support, surveys or questionnaires, and notifications or information about your account and our products and services)
Customer relationship management
General business administration
Marketing our products and services
Marketing the products and services of others
Financial reporting and accounting
Website optimization and maintenance
Systems and data security
Maintaining and/or servicing accounts
Verification purposes
Evaluating applications for employment
Identifying, fixing, and troubleshooting bugs and errors
Understanding how you use our services so we can make improvements
Facilitate business relationships or comply with contractual obligations
Additional uses are outlined above in the section titled “What do we do with the information we collect?”

Sources of Collected Information
We may collect personal information from the following categories of sources:
Our applicants, prospective customers, existing customers, and their authorized agents, including via our websites, mobile applications, telephone, text message, postal mail, social media, forums, message boards, live chat, chatbot, or other means;
Our affiliates, which may include our subsidiaries;
Our service providers, which may include customer relationship management providers, analytics providers, website hosting providers, risk and verification service providers, systems administrators, and communications delivery services;
Nonaffiliated companies with which we have a business relationship, which may include referral, promotional, and joint marketing partners;
Other third parties, which may include technology companies, social media platforms, other websites and mobile applications, online advertising partners, state departments of motor vehicles, and other data suppliers;
Things that other third parties may post publicly about you or otherwise provide to us, which may include review platforms, public forums, and testimonial websites; and
Employees and job applicants.

Who We Share Information With
We will provide your information to our trusted business partners who assist us in operating the Site, conducting our business (including partners referring you to us), or servicing your account, so long as those parties agree to keep this information confidential. We also may disclose your information to third parties to whom we may refer you or your inquiry or application for financing or other services, consistent with our notice to you and/or consent from you. In addition, we may disclose our transactions and experiences with you to credit bureaus. 
We do not sell personal information, or otherwise provide personal information to third parties without your prior consent to do so, other than service providers receiving information to perform services for us on our behalf. 
For more information on who we share information with, please see the above section “Do we disclose any information to outside parties?”

Your Privacy Rights
If you are a California resident, subject to applicable law, you have the following rights under California law with respect to your personal information:

Right to Know.  You have the right to request what personal information we collect, use, disclose, and/or sell, as applicable.

Right to Delete. You have the right to request the deletion of your personal information that is collected or maintained by us.

Right to Opt-Out of Sale. You have the right to opt-out of the sale of your personal information by us, though Assembly does not currently sell your personal information. For more details on how to exercise this right,  please reach us in one of the following ways:
[email protected]
WeWork c/o Allen Liou
555 West 5th Street, 35th Floor
Los Angeles, CA 90013

Right to Non-Discrimination. You have the right not to receive discriminatory treatment by us for the exercise of the privacy rights described above.

The above rights are subject to various exclusions and exceptions under applicable laws. 
If you wish to exercise one of the above rights, we will need to verify your identity and authority. Identity verification requires matching pieces of personal information you provide with the information we maintain. In addition, we may require additional steps such as a signed declaration that the requestor is the consumer whose personal information is the subject of the request. 

You may also authorize someone to exercise the above rights on your behalf.  To designate an authorized agent, please submit a request through our Support form. As may be necessary, we will verify that the agent has proper authorization to exercise the above rights on the consumer’s behalf.  

If you are a California resident and wish to seek to exercise these rights, please reach us in one of the following ways: [email protected]
WeWork c/o Allen Liou
555 West 5th Street, 35th Floor
Los Angeles, CA 90013

For more information regarding this Privacy Policy, or if you have any questions or concerns, you may contact us in the following ways:
[email protected]
WeWork c/o Allen Liou
555 West 5th Street, 35th Floor
Los Angeles, CA 90013

Notice of Right to Opt-Out
We do not currently sell your personal information, but you may direct Assembly not to sell your personal information if that changes in the future.  If you wish to opt-out of such sales, please do so in one of the following ways:
[email protected]
WeWork c/o Allen Liou
555 West 5th Street, 35th Floor
Los Angeles, CA 90013

Please consult the other sections of our Privacy Policy for further information on our practices regarding your personal information.

Links to Other Sites
The Site may offer links to sites of other companies and associations. We are not responsible for the privacy practices or consent of such third-party sites. These external sites are not subject to this Privacy and Security Policy and we have no control over their content. Please carefully review the policies of these sites before providing any personal information.

Governing Law
You agree that this policy is governed by the laws of the State of California without regard to conflict of laws hereof.

Your Consent
By using the Site, you consent to our website’s Terms of Use.

Changes to our Privacy and Security Policy
We may make changes to this Privacy and Security Policy, and we encourage you to regularly check this page to review any changes we may make. You understand that you will be deemed to have accepted an update if you continue to use the Site and Services after any update takes effect. If any material changes are made to this Privacy and Security Policy, advance notice may be posted on the Site.

Effective Date 
This version of our Privacy and Security Policy is effective as of March 15, 2023.