Privacy Notice

What information Afloat collects, how we use and share it, and the choices you have.

Draft. This text is not yet in effect.

Welcome to Afloat!

This Privacy Notice explains how information about you, and information about the family members and other individuals whose information you choose to upload or share through the Service, is collected, used, shared, stored and secured by Payoff Genius, LLC. (which does business as Afloat) and our affiliates and subsidiaries (collectively referred to as “Afloat,” “we,” “our” and “us”) when you use afloatfinance.com, afloatfinance.org, our Afloat mobile applications, and any other Afloat owned or operated websites (including mobile sites) (collectively, the “Site”), mobile applications, products, services, datasets, and/or any interactive features other online services controlled by Afloat that post a link to this Privacy Notice or otherwise reference that this Privacy Notice applies to information collected through the Site, application or other features or services (collectively, the “Services”) or when you otherwise interact with us. This Privacy Notice explains your choices concerning our information practices.

Because Afloat helps you organize and manage financial, insurance, legal, and related information for your household, much of the information you provide to us is about other people, such as family members, trusted contacts, or other individuals whose documents or information you choose to upload. If you upload or share information about another person, you are responsible for ensuring that you have the authority and have obtained any consent necessary to provide that information to us, to have it processed as described in this Privacy Notice, and to share it within your household account and with the people you invite. You are also responsible for deciding who you invite to your household account and what information those individuals can access.

However, to the extent that any activities or information are governed by the Health Insurance Portability and Accountability Act (HIPAA) and/or other federal and state law, such laws will govern and such activities and information are outside the scope of this Privacy Notice. To the extent that any activities are governed by the Washington My Health My Data Act, the Nevada consumer health data law, the Connecticut Data Privacy Act, or by any other comparable state consumer health data law, our Consumer Health Data Privacy Notice sets forth our policies and practices regarding your consumer health data and how we will treat it.

This Privacy Notice does not apply to our handling of information collected from other Users, such as companies or other third parties (collectively, “Businesses”). Data and information collected through such activities are governed by the Businesses’ privacy policies as well as Afloat’s agreement(s) with such Businesses. If you have questions about a Business’ privacy practices, please reach out to them directly.

Our Services contain links to other websites operated by third parties as well as certain features that allow you to initiate interactions between the Services and third-party services or platforms, such as social networks through “liking” or “sharing” our content. Information collected by such third parties is governed by their privacy policies which we encourage you to review to learn about the privacy practices of those third parties. We are not responsible for the privacy or security of, or information found on, these sites or platforms. Information you provide on public or semi-public venues, such as third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use. Our inclusion of such links or features does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators.

NOTICE AT COLLECTION

Before using the Service or submitting any Personal Information to Afloat, please review this Privacy Notice carefully and contact us if you have any questions. By using the Service, you agree to the practices and specifically the collection, disclosure, use and retention of Personal Information described in this Privacy Notice. If you do not agree to this Privacy Notice, please do not access the Site or otherwise use the Service.

Personal Information We Collect
How We Use Personal Information
Sharing And Disclosure of Personal Information
Users Outside of the United States
State Privacy Rights
Artificial Intelligence
Children
Links To Other Websites
Security
Your Choices
Changes To the Privacy Notice
Contact Us

1. PERSONAL INFORMATION WE COLLECT

When you interact with us through the Service, we collect and combine information and data from you, including information that may identify you or otherwise be considered to be “personal information”, “personal data” or “personally identifiable information” under laws that regulate privacy and data protection (“Personal Information”) as follows:

Personal Information You Provide: We collect the following categories of Personal Information from you when you visit the Site, create a Afloat account, subscribe to the Service, or otherwise provide such information to us:

Contact Information: We collect your first and last name, email address, phone number, and mailing address, and account information related to external accounts you connect to the Service (for example, identifiers for financial accounts and credit/debt data you authorize us to access).

Work-Related Information: We may collect certain information related to your employment or engagement, such as your job title and job history.
Financial Information: Our payment processors will collect and store the financial information necessary to process your payments for our services, such as your payment card number and authentication details. In addition, with your authorization, we collect financial account information and related data through connected-account providers, as well as financial information contained in documents you upload to the Service. We do not collect or store your financial account log-in credentials or full debit or credit card numbers. Where we display or retain account, debit card, or credit card numbers, we limit them to the last four digits.
Communication Information: We may collect information when you contact us with questions or concerns and when you voluntarily respond to questionnaires, surveys or requests for market research seeking your opinion and feedback. Providing communication information is optional to you.
Location Information: Our Service may use location-based services in order to locate you, such as using your zip or postal code, IP address or other geolocation information, so that we may verify your location and/or deliver you relevant content based on your location.
Commercial Information: We may retain a history of the products and services you browse and/or purchase using the Service, as well as records of personal property you choose to store or organize in the Service.
Social Media Information: When you log into or connect the Service using a third-party account or social media service, we may collect Personal Information that you authorize that service to share with us, such as your name, email address, phone number, and username. Your use of the third-party service is governed by that service’s own privacy policy, and we have no responsibility or liability for the manner in which the operators of those services collect, use, disclose, secure, or otherwise treat your Personal Information.
Other Personal Information: You may decide to provide Afloat with additional information intended to be shared with other users.

Sensitive Personal Information You Provide: Subject to your consent and depending on the products and services you use and your choices, we may collect, process, or disclose certain Personal Information that qualifies as “sensitive data” under applicable U.S. state data privacy laws (“Sensitive Personal Information”). Sensitive Personal Information is a subset of Personal Information. In the list below, we outline the categories of Sensitive Personal Information we collect, the source of the Sensitive Personal Information, our purposes of processing, and the categories of third-party recipients to whom we disclose the Sensitive Personal Information. Categories of Sensitive Personal Information that we may collect:

Financial account information, limited to the last four digits of an account, debit card, or credit card number. We do not collect your financial account log-in credentials, full account numbers, or full debit or credit card numbers, or the means to access the account (such as security or access codes, passwords, or credentials).
Government identifiers, such as Social Security numbers (or the last four digits) and driver’s license, passport, or other government identification numbers, and other sensitive information contained in documents you choose to upload to the Service.
Health information, such as medical conditions and medical insurance information (for example, as contained in documents you upload).

Internet Activity Information: When you visit, use, and interact with the Service, we may receive certain information about your visit, use, or interactions. For example, we may monitor the number of people that visit the Service, peak hours of visits, which page(s) are visited, the domains our visitors come from (e.g., google.com, yahoo.com, etc.), and which browsers people use to access the Service (e.g., Chrome, Firefox, Microsoft Internet Explorer, etc.), broad geographical information, and navigation pattern. In particular, the following information is created and automatically logged in our systems:

Geolocation Information: When browsing our website, we may collect general information regarding your geographic location.
Cookie and Tracking Technology Information: Please see the “Cookies and Tracking Technologies” section below to learn more about how we use cookies and tracking technologies.
Usage Information: We collect information about how you use our Service, such as the types of content that you view or engage with, the features you use, the actions you take, and the time, frequency, and duration of your activities.
Device Information: We and our service providers collect information about the browsers and devices you use to access the Site. This information includes device types and models, unique identifiers (including advertising identifiers associated with that device), HTTP headers, page location IP address, device ID, operating system type and version, browser type and language, and Internet service provider used.

Personal Information Collected from Other Sources: We may receive Personal Information, such as contact information and marketing preferences, from other sources, such as analytics providers, social media or account services you use to connect to the Service, and connected-account providers such as Plaid and Spinwheel.

Derived Information: We may infer your preferences for certain products and services based on the Personal Information we collect about you.

Cookies and Tracking Technologies: When you visit or otherwise interact with our Services, we may automatically collect information about you using cookies, device identifiers, web beacons, SDKs, pixels and similar technologies. We use this information for various purposes, including to make the Services function properly, understand how you use the Services, personalize your experience, gather usage data on our Services, measure, manage, display and customize the advertisements you see within the Services or elsewhere and improve your overall experience while using the Services. A “cookie” is a piece of information sent to your browser by a website you visit. Cookies can be stored on your computer for different periods of time. Some cookies expire after a certain amount of time, or upon logging out (session cookies), others survive after your browser is closed until a defined expiration date set in the cookie (as determined by the third party placing it), and help recognize your computer when you open your browser and browse the Internet again (persistent cookies). For more details on cookies please visit All About Cookies.

On most web browsers, you will find a “help” section on the toolbar. Please refer to this section for information on how to receive a notification when you are receiving a new cookie and how to turn cookies off.

To find out how to manage cookies on popular browsers, please visit:

Please note that if you limit the ability of websites to set cookies, you may be unable to access certain parts of the Site and you may not be able to benefit from the full functionality of the Site.

Advertising networks may use cookies to collect Personal Information. Most advertising networks offer you a way to opt out of targeted advertising. If you would like to find out more information, please visit the Network Advertising Initiative’s online resources and follow the opt-out instructions there.

If you access the Site on your mobile device, you may not be able to control tracking technologies through the settings.

Analytics: We use third-party analytics providers who may deploy cookies, pixels and similar technologies to the Services in order to allow us to understand usage of the Services as well as the performance of advertisements. For example, we use Google Analytics, a web analytics service provided by Google, Inc., and PostHog, a product analytics service, which use cookies to help us analyze how users use the Site and enhance your experience when you use the Services. For more information on how Google uses this information, click here. You may download and install the Google Analytics Opt-out Browser Add-on for each web browser you use. Using the Google Analytics Opt-out Browser Add-on does not prevent the use of other analytics tools.

Online Tracking and Do Not Track Signals: We and our third-party service providers may use cookies, pixels, or other tracking technologies to collect information about your browsing activities over time and across different websites following your use of the Site. Because there currently isn’t an industry or legal standard for recognizing or honoring “Do Not Track” (“DNT”) signals, we do not currently respond to them at this time, and we instead operate as described in this Privacy Notice whether or not a DNT signal is received. If we do respond to DNT signals in the future, we will update this Privacy Notice to describe how we do so. For details, including how to turn on Do Not Track, visit www.donottrack.us.

2. HOW WE USE PERSONAL INFORMATION

We may use Personal Information for the following purposes:

To provide, operate, and improve the Service and our business;
To respond to your inquiries, comments, feedback, or questions;
To send administrative information to you, for example, information regarding the Service and changes to our terms, conditions, and policies;
To analyze how you interact with our Service;
To communicate with you about products, services, offers, promotions, rewards, and events offered by Afloat and to provide news and information that we think will be of interest to you;
To prevent fraud, criminal activity, or misuses of our Service, and to ensure the security of our IT systems, architecture, and networks;
To deidentify and/or aggregate and anonymize your Personal Information for our own business purposes; and
To comply with legal obligations and legal process and to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or other third parties.

Research and Development: We may aggregate Personal Information and use the aggregated and de-identified information to analyze the effectiveness of the Service, to improve and add features to the Service, gain anonymous insights into product and brand performance on the Service, and for other business purposes. In addition, from time to time, we may analyze the general behavior and characteristics of Users and share aggregated information like general user statistics with prospective business partners.

Communications and Marketing: We may use your Personal Information, such as your email address, to contact you to provide the Service and communicate related information.

If you provide your telephone number, you acknowledge and agree that we may contact you by SMS text message, telephone call, and push notification (if applicable) for informational and service-related purposes in connection with your use of the Service and the requests you make. We limit text messages to information related to services you have asked for or ordered, and we do not send automated marketing text messages.

How Long We Keep Your Information: We will only keep your Personal Information for as long as it is reasonably necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (e.g., tax, accounting, or other legal requirements). When we have no ongoing legitimate business need to process your Personal Information, we will either delete or anonymize such information, or, if this is not possible (for example, because your Personal Information has been stored in backup archives), then we will securely store your Personal Information and isolate it from any further processing until deletion is possible.

If you would like to opt-out of receiving certain communications, see the “Your Choices” section below.

Sharing Personal Information: In certain circumstances we may share the categories of Personal Information described above without further notice to you, unless required by the law, with the following categories of third parties:

Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may share Personal Information with vendors and service providers, including providers of hosting services, cloud services, and other information technology services providers, email communication software and email newsletter services, advertising and marketing services, payment processors, customer relationship management and customer support services, and analytics services. Pursuant to our instructions, these parties will access, process, or store Personal Information in the course of performing their duties to us.
Business Transfers: If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, dissolution, sale of all or a portion of our assets, or transition of service to another provider, including the negotiations thereof (collectively and each a “Transaction”), your Personal Information and other information may be shared in the diligence process with counterparties and others assisting with a Transaction and transferred to a successor or affiliate as part of or following that Transaction along with other assets. If you do not want your Personal Information to be transferred to a successor in connection with a sale or other change of control, you may opt out by deleting your account before the transfer takes effect, as described in the “Delete Your Information” section below, and we will not transfer your Personal Information to the successor except as necessary to complete your deletion request or as otherwise required by law.
Legal Requirements: If required to do so by law or in the good faith belief that such action is necessary to (a) comply with a legal obligation, including to meet national security or law enforcement requirements, (b) protect and defend our rights or property, (c) prevent fraud, (d) act in urgent circumstances to protect the personal safety of users of the Service, or the public, or (e) protect against legal liability.
Affiliates: We may share Personal Information with our current and future affiliates, meaning an entity that controls, is controlled by, or is under common control with Afloat. Our affiliates may use the Personal Information we share in a manner consistent with this Privacy Notice. Affiliates may be located outside the United States of America.
Other Users: The Service allows you to share information within your household account and with people you authorize or invite, such as family members, trusted contacts, and financial, legal, or care professionals connected to your account. Information and content you choose to share in this way (including Personal Information contained in documents you upload) may be accessible to, and may be shared by, those individuals. By uploading or sharing information about another person, you represent and agree that you have obtained all consents and authority necessary from the parties to the documents or information you upload to provide that information to us and to share it within your household account and with the people you authorize or invite. The Service does not include a public community forum or message board open to the general user base.
Discretion/Consent: We may share your Personal Information at your discretion, including when you submit a product review using a third-party service or otherwise direct us to disclose your Personal Information to a third party. We may also share your Personal Information with your consent.

No Sale of Personal Information: We do not sell your Personal Information, and we do not share your Personal Information for cross-context behavioral advertising, as those terms are defined under applicable U.S. state privacy laws.

Opting Out; Changing or Deleting your Personal Information:

You can choose the types of communications you wish to receive from us, change your information or request that we delete certain information at any time, as follows:

Opt Out From Receiving Communications. If you do not wish to receive communications from Afloat that do not relate directly to your use of the Services (such as newsletters, event notifications or other marketing communications), you can opt out from receiving such communications at any time. We provide a link in all of our electronic marketing communications to allow you to easily “unsubscribe” to these communications. You can also notify us that you do not wish to receive further communications by sending us your request as set forth in the “Contact Us” section below. Please note that, in connection with your use of certain Services, including the Site, we will still need to send you certain notifications that relate directly to your use of the Services, such as technical notices, updates, service notifications, security alerts, billing and administrative messages, and will need to communicate with you to provide you with support.
Change Your Information. You can change or update your information with us at any time. To change or update your information, please send us your request as set forth in the “Contact Us” section below. However, if your information has been provided to us by another user who administers your household account, updates to certain information on your account may need to be requested through that user.
Delete Your Information. You can request that we delete your information at any time, subject to certain exceptions as discussed below. If you would like to have your information deleted, please send us your request as set forth in the “Contact Us” section below. We will comply with your request within a reasonable period of time; however, in certain circumstances, we may not be able or required to delete all of your information. For example, if we have provisioned a user account for you and you intend to continue to use portions of the Services requiring access through said account, we must retain certain information in order to maintain your account and your access to the Services. We also retain certain information if required in connection with our performance of a contract (such as a license agreement between us and your employer), if required by law or relevant to a legal proceeding, or for other compliance or auditing purposes, as permitted by law. Please note that we may obtain information about you in the future, as discussed under the heading “Information We Collect From Other Sources,” and we may not be able to recognize it as your information due to complying with a previous deletion request from you. In this case, you will need to submit a new request if you wish to have your re-added information deleted. In addition, if we have deidentified, anonymized or aggregated data such that it no longer identifies or relates to you, we may retain and use that information for any lawful purpose.

Payment Processing:

We utilize third-party service providers that act as resellers of, and/or payment processors for the fees payable for, licenses to certain of our Services and/or content that may be purchased through our Services (each, a “Payment Processor”). In order to purchase such Services through our Services, you will be required to provide credit/debit card and/or financial institution account information directly to the Payment Processor. Such payment card information is not collected or stored by us.

4. USERS OUTSIDE OF THE UNITED STATES

Afloat is designed for households in the United States and connects to U.S. financial institutions. We do not actively offer services to, or market to, individuals in the European Economic Area (EEA), the United Kingdom (UK), or Canada, and we expect users in those regions to be negligible. To the extent we do collect Personal Information from such users, the following applies. For the purposes described in this Privacy Notice, we may transfer your Personal Information from the European Economic Area (EU Member States, Iceland, Liechtenstein and Norway) and/or the United Kingdom to our U.S. office or a third party outside of the EEA or the UK and in a jurisdiction not subject to an adequacy decision of the European Commission or the UK Government, as applicable. When we transfer your Personal Information to other third parties outside of the EEA or the UK, for example service providers, we will do this in accordance with applicable data protection laws and will take appropriate safeguards to ensure the integrity and protection of your Personal Information wherever processed. If you are a resident in the European Economic Area (EEA) or United Kingdom (UK), then these countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. However, we will take all necessary measures to protect your Personal Information in accordance with this Privacy Notice and applicable law. By providing your Personal Information, you consent to such transfer.

Your Rights in Relation to Your Personal Data Under GDPR and/or UK GDPR: If you are a resident of the European Economic Area (EEA) and/or UK, you have certain rights regarding our processing of your personal data (in addition to those discussed elsewhere in this Privacy Notice). Subject to the applicable provision of the GDPR and/or UK GDPR, you have the following rights with respect to your Personal Information:

Right of access (commonly known as a “data subject access request”): If you ask us, we will confirm whether we are processing your Personal Information and, if so, provide you with a copy of that Personal Information along with certain other details. If you require additional copies, we may need to charge a reasonable fee.
Right to rectification: If your Personal Information is inaccurate or incomplete, you are entitled to ask that we correct or complete it.
Right to erasure: You may ask us to erase your Personal Information in some circumstances, such as where we no longer need it or you withdraw your consent (where applicable) and there is no other legal basis for processing.
Right to restrict processing: You may ask us to restrict or ‘block’ the processing of your Personal Information in certain circumstances, such as if you contest its accuracy or object to us processing it.
Right to data portability: You have the right to obtain your Personal Information from us that you consented to give us or that was provided to us as necessary in connection with our contract with you, and if the processing is carried out by automated means.
Right to object: You may ask us at any time to stop processing your Personal Information, and we will do so: (a) if we are relying on a legitimate interest (described above) to process your Personal Information, unless we demonstrate compelling legitimate grounds for the processing or your information is needed to establish, exercise, or defend legal claims; or (b) we are processing your Personal Information for direct marketing and, in such case, we may keep minimum information about you (for example, in a suppression list) as necessary for our and your legitimate interest to ensure your opt out choices are respected in the future and to comply with data protection laws.
Right to withdraw consent: If we rely on your consent to process your Personal Information, you have the right to withdraw that consent at any time, but this will not affect any processing of your information that has already taken place.
Right to lodge a complaint with the data protection authority: If you have a concern about our privacy practices, including the way we handled your Personal Information, you can report it to the data protection authority that is authorized to hear those concerns (in the United Kingdom, the Information Commissioner’s Office (ICO) at https://ico.org.uk/concerns.

To exercise your rights under the GDPR and/or the UK GDPR, please send us your request as set forth in the “Contact Us” section below.

Your Rights in Relation to Your Personal Data if You Are a Resident of Canada: We may process your information if you have given us specific permission (i.e., express consent) to use your Personal Information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time. In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:

If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way;
For investigations and fraud detection and prevention;
For business transactions provided certain conditions are met;
If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim;
For identifying injured, ill, or deceased persons and communicating with next of kin;
If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse;
If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province;
If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records;
If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced;
If the collection is solely for journalistic, artistic, or literary purposes; or
If the information is publicly available and is specified by the regulations.

To exercise your rights as a Canadian resident, please send us your request as set forth in the “Contact Us” section below.

5. STATE PRIVACY RIGHTS

Where provided for by law and subject to any applicable exceptions, residents of certain states may have additional rights. If you live in a state that has implemented its own privacy law (e.g., California and the California Consumer Privacy Act), you may have such rights. These rights are not absolute, and in some cases, they may not apply, including if a legal exception applies. If this is the case, we will not be able to process your request. The rights include:

Right to Know: The right to request that we disclose to you the Personal Information we collect, use, or disclose, and information about our data practices.
Right to Request Correction: The right to request that we correct inaccurate Personal Information that we maintain about you.
Right to Request Deletion: The right to request that we delete your Personal Information that we have collected from or about you.
Right to Opt Out of Targeted Advertising: The right to opt out of the processing of your Personal Information obtained from your activities on nonaffiliated websites or online applications for the purposes of targeted advertising.
Right to Non-Discrimination: The right not to receive discriminatory treatment for exercising your privacy rights.
Right to Limit Use and Disclosure of Sensitive Information: In some cases, you may have the right to ask that we limit the way we use your Personal Information. In some cases, you can exercise this right by asking that we delete your Personal Information. You may also have the right to object to how we process Personal Information, or to withdraw your consent if our use is based on consent.

Please note that to protect your information and the integrity of our products, we may need to verify your identity before processing your request. In some cases, we may need to collect additional information to verify your identity, such as a government issued ID.

Under certain U.S. Privacy Laws, you may also designate an authorized agent to make these requests on your behalf. If you use an authorized agent to submit a request, we may need to collect additional information, such as a government issued ID, to verify your identity before processing your request to protect your information.

For more information about the possibility of submitting an opt-out request, please refer to the Your Choices section below, or submit a data subject access request.

The information we collect, use, and disclose about you will vary depending on how you interact with the Service. To find out more please visit the following sections of this Privacy Notice: Personal Information We Collect, How We User Personal Information, and Sharing and Disclosure of Personal Information. If you would like to exercise any of these rights, you may do so by contacting us as set forth in the “Contact Us” section below. After we receive your request, we may request additional information from you to verify your identity. Your authorized agent may submit requests in the same manner, although we may require the agent to present signed written permission to act on your behalf, and you may also be required to independently verify your identity with us and confirm that you have provided the agent permission to submit the request.

6. ARTIFICIAL INTELLIGENCE

We use machine learning and other artificial intelligence (AI) technologies (“AI Technologies”) to provide and improve our Service. For example, we use AI Technologies to ingest, interpret, and classify the documents and information you upload (such as bills, statements, insurance policies, and legal documents), and to extract metadata (such as amounts and due dates) in order to organize your vault and populate the user interface, as well as to help identify content that may violate our Terms of Service. AI-generated output may be inaccurate or incomplete, and you should review it before relying on it.

7. CHILDREN

Our Service is intended for users who are at least 18 years old. We do not direct the Service to, or knowingly collect Personal Information from, anyone under the age of 18, including children under the age of 13. If a person under 13 submits Personal Information to Afloat and we learn of it, we will take steps to delete the information as soon as reasonably possible and as required by applicable law, including the Children’s Online Privacy Protection Act (COPPA). If you believe that we might have any Personal Information from a person under the age of 13, please contact us as set forth in the “Contact Us” section below. Although we do not knowingly collect Personal Information directly from anyone under 18, documents you choose to upload to the Service (such as wills, trusts, insurance policies, or other legal or financial documents) may contain information about minors, such as the names and dates of birth of beneficiaries. Any such information is incidental to the documents you choose to upload, you are responsible for ensuring you have the authority to provide it, and we handle and protect it in accordance with this Privacy Notice.

8. LINKS TO OTHER WEBSITES

The Service may contain links to other websites and services not operated or controlled by Afloat, including social media services (“Third-Party Services”). The information that you share with Third Party Services will be governed by the specific privacy policies and terms of service of the Third-Party Services and not by this Privacy Notice. By providing these links we do not imply that we endorse or have reviewed these Third-Party Services. Please contact the Third-Party Services directly for information on their privacy practices and policies.

9. SECURITY

We implement commercially reasonable technical, administrative, and organizational measures to protect Personal Information both online and offline from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or e-mail transmission is ever fully secure or error free. In particular, email sent to or from us may not be secure. Therefore, you should take special care in deciding what information you send to us via the Service or email. You use the Service at your own risk. Please keep this in mind when disclosing any Personal Information to Afloat via the Internet. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Service, or Third-Party Services.

10. YOUR CHOICES

In certain circumstances providing Personal Information is optional. However, if you choose not to provide Personal Information that is needed to use some features of our Service, you may be unable to use those features. You can also contact us to request updates or corrections to your Personal Information. If you have questions or concerns about other Personal Information collected by us, or are unable to use your Afloat account and would like assistance accessing that information, please contact us as set forth in the “Contact Us” section below.

You may opt out of marketing-related communications by following the opt out or unsubscribe instructions contained in the marketing communication we send you, or by updating your settings through your account. If you unsubscribe from our marketing lists, you will no longer receive marketing communications from us but we will continue to contact you to provide the Service, regarding management of your account, other administrative matters, and to respond to your requests.

11. CHANGES TO THE PRIVACY NOTICE

The Service and our business may change from time to time. As a result, we may change this Privacy Notice at any time. When we do, we will post an updated version on this page, unless another type of notice is required by applicable law. By continuing to use our Service or providing us with Personal Information after we have posted an updated Privacy Notice, you consent to the revised Privacy Notice and practices described in it.

12. CONTACT US

If you have any questions or complaints about our Privacy Notice or information practices, would like to request a version of this notice in an accessible format, or would like to contact us in regard to any of the topics discussed above, please feel free to contact us at: support@afloatfinance.org or Payoff Genius, LLC, 8 The Green #14144, Dover, DE, 19901.