Privacy Notices

Rev. June 2024

Facts	What does Above Lending Inc. do with your personal information?
Why?	Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do.
What?	The types of personal information we collect and share depend on the product or service you have with us. This information can include: Social Security number and income Account balances and payment history Credit history and credit score
How?	All financial companies need to share customers' personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers' personal information; the reasons Above Lending chooses to share; and whether you can limit this sharing.

Reasons we can share your personal information	Does Above share?	Can you limit this sharing?
For our everyday business purposes— such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus	Yes	No
For our marketing purposes— to offer our products and services to you	Yes	No
For joint marketing with other financial companies	Yes	No
For our affiliates' everyday business purposes— information about your transactions and experiences	Yes	No
For our affiliates' everyday business purposes— information about your creditworthiness	Yes	Yes
For our affiliates to market to you	Yes	Yes
For nonaffiliates to market to you	Yes	Yes

To limit our sharing	Call (800) 201-2295 and select to speak with a customer care representative who will prompt you through your choice(s). Please note: If you are a new customer, we can begin sharing your information 30 days from the date we sent this notice. When you are no longer our customer, we continue to share your information as described in this notice. However, you can contact us at any time to limit our sharing.
Questions?	Call (800) 201-2295 or go to www.abovelending.com

To limit our sharing

Call (800) 201-2295 and select to speak with a customer care representative who will prompt you through your choice(s).
Please note:
If you are a new customer, we can begin sharing your information 30 days from the date we sent this notice. When you are no longer our customer, we continue to share your information as described in this notice.
However, you can contact us at any time to limit our sharing.

Questions?

Call (800) 201-2295 or go to www.abovelending.com

Who we are
Who is providing this notice?	Above Lending, Inc. dba Above

What we do
How does Above Lending protect my personal information?	To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.
How does Above Lending collect my personal information?	We collect your personal information, for example, when you apply for a loan or give us your income information; give us your contact information or show your government-issued ID; or provide employment information We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.
Why can't I limit all sharing?	Federal law gives you the right to limit only sharing for affiliates' everyday business purposes-information about your creditworthiness affiliates from using your information to market to you sharing for nonaffiliates to market to you State laws and individual companies may give you additional rights to limit sharing. See below for more on your rights under state law.
What happens when I limit sharing for an account I hold jointly with someone else?	Your choices will apply to everyone on your account.

Definitions
Affiliates	Companies related by common ownership or control. They can be financial and nonfinancial companies. Our affiliates include financial companies such as Beyond Finance, LLC and KCK FS Investments, LLC; non-financial companies like parent holding companies and indirect parent entity.
Nonaffiliates	Companies not related by common ownership or control. They can be financial and nonfinancial companies. Non-affiliates we share with can include lenders, lending networks, financial institutions, service providers, direct marketing companies and other financial product and service providers
Joint marketing	A formal agreement between nonaffiliated financial companies that together market financial products or services to you. Our joint marketing partners include lenders, lending networks, financial institutions, service providers, direct marketing companies and other financial product and service providers.

Other Important Information
State laws may also provide you with specific privacy protections. Please note those individual circumstances below that may apply to you. We will comply with applicable state laws with respect to our use of your information. California Residents: We do not sell personal information under California law. We will not share your non-public information with nonaffiliates for their marketing purposes except with your express consent or as otherwise authorized by California law. We will not disclose personal and financial information about you with companies we own or control (affiliates) or with companies we do business with to provide financial products and services (joint marketing partners) if you instruct us not to do so by following the instructions at (800) 201-2295 which contain additional choices for California residents. To make a request under California privacy law, you may email us at [email protected]. Vermont Residents: We will not share information we collect about you with nonaffiliated third parties, except as permitted by Vermont law, such as to process your transactions or to maintain your account. We will not share information about your creditworthiness with our affiliates except with your authorization or as required or permitted by law. We may share information about our transactions or experiences with you within our corporate family without your consent Nevada Residents: We provide you this notice under Nevada state law. You may be placed on our internal Do-Not-Call List by calling us at (800) 201-2295 or sending a message to [email protected]. Above Lending Attn: Compliance Department 650 Dundee Rd Suite 150, Northbrook, IL 60062 Nevada law also requires us to provide you the following to obtain additional information: Office of the Attorney General 100 North Carson Street Carson City, NV 89701 Telephone: (775) 684-1100 Email: [email protected] Alaska, Illinois, Maryland, and North Dakota Residents: We will not share personal information with nonaffiliates either for them to market to you or for joint marketing without your authorization. Massachusetts, Mississippi and New Jersey Residents: We will not share personal information from deposit or share relationships with nonaffiliates either for them to market to you or for joint marketing without your authorization. Montana Residents: We will not disclose your name or any personal information to anyone other than your own creditors or our agents, affiliates, or contractors. Texas Residents: For questions or complaints about this loan, contact Above Lending, Inc. at (800) 201-2295 and, at 650 Dundee Rd Suite 150, Northbrook, IL 60062, or e-mail at [email protected]. The lender is licensed and examined under Texas law by the Office of Consumer Credit Commissioner (OCCC), a state agency. If a complaint or question cannot be resolved by contacting the lender, consumers can contact the OCCC to file a complaint or ask a general credit-related question. OCCC address: 2601 N. Lamar Blvd., Austin, Texas 78705. Phone: (800) 538-1579. Fax: (512) 936-7610. Website: occc.texas.gov. E-mail: [email protected]. Telephone Communications: All telephone communications with us or our authorized agents may be monitored and recorded. AL-PrivNotice (v4 eff June 2024)

Other Important Information

State laws may also provide you with specific privacy protections. Please note those individual circumstances below that may apply to you. We will comply with applicable state laws with respect to our use of your information.

California Residents: We do not sell personal information under California law. We will not share your non-public information with nonaffiliates for their marketing purposes except with your express consent or as otherwise authorized by California law. We will not disclose personal and financial information about you with companies we own or control (affiliates) or with companies we do business with to provide financial products and services (joint marketing partners) if you instruct us not to do so by following the instructions at (800) 201-2295 which contain additional choices for California residents. To make a request under California privacy law, you may email us at [email protected].

Vermont Residents: We will not share information we collect about you with nonaffiliated third parties, except as permitted by Vermont law, such as to process your transactions or to maintain your account. We will not share information about your creditworthiness with our affiliates except with your authorization or as required or permitted by law. We may share information about our transactions or experiences with you within our corporate family without your consent

Nevada Residents: We provide you this notice under Nevada state law. You may be placed on our internal Do-Not-Call List by calling us at (800) 201-2295 or sending a message to [email protected].

Above Lending
Attn: Compliance Department
650 Dundee Rd Suite 150,
Northbrook, IL 60062

Nevada law also requires us to provide you the following to obtain additional information:

Office of the Attorney General
100 North Carson Street
Carson City, NV 89701
Telephone: (775) 684-1100
Email: [email protected]

Alaska, Illinois, Maryland, and North Dakota Residents: We will not share personal information with nonaffiliates either for them to market to you or for joint marketing without your authorization.

Massachusetts, Mississippi and New Jersey Residents: We will not share personal information from deposit or share relationships with nonaffiliates either for them to market to you or for joint marketing without your authorization.

Montana Residents: We will not disclose your name or any personal information to anyone other than your own creditors or our agents, affiliates, or contractors.

Texas Residents: For questions or complaints about this loan, contact Above Lending, Inc. at (800) 201-2295 and, at 650 Dundee Rd Suite 150, Northbrook, IL 60062, or e-mail at [email protected]. The lender is licensed and examined under Texas law by the Office of Consumer Credit Commissioner (OCCC), a state agency. If a complaint or question cannot be resolved by contacting the lender, consumers can contact the OCCC to file a complaint or ask a general credit-related question. OCCC address: 2601 N. Lamar Blvd., Austin, Texas 78705. Phone: (800) 538-1579. Fax: (512) 936-7610. Website: occc.texas.gov. E-mail: [email protected].

Telephone Communications: All telephone communications with us or our authorized agents may be monitored and recorded.

AL-PrivNotice (v4 eff June 2024)

Cross River Bank Privacy Notice

(rev. November 2018)

Facts	What does Cross River Bank do with your personal information?
Why?	Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share and protect your personal information. Please read this notice carefully to understand what we do.
What?	The types of personal information we collect and share depend on the product or service you have with us. This information can include: Social Security number and Account balances Payment history and Transaction history Account transactions and Wire transfer instructions When you are no longer our customer, we continue to share your information as described in this notice.
	All financial companies need to share customers" personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers" personal information; the reasons Cross River Bank chooses to share; and whether you can limit this sharing.

Reasons we can share your personal information	Does Cross River Bank share?	Can you limit this sharing?
For our everyday business purposes— such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus	Yes	No
For our marketing purposes— to offer our products and services to you	Yes	No
For joint marketing with other financial companies	Yes	No
For our affiliates' everyday business purposes— information about your transactions and experiences	No	We don't share
For our affiliates' everyday business purposes— information about your creditworthiness	No	We don't share
For nonaffiliates to market to you	No	We don't share

Questions	Call toll-free 1-877-55CRB55 or go to www.crossriverbank.com

What we do
How does Cross River Bank protect my personal information?	To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings. We also maintain other physical, electronic and procedural safeguards to protect this information and we limit access to information to those employees for whom access is appropriate.
How does Cross River Bank collect my personal information?	We collect your personal information, for example, when you Open an account or Apply for a loan Make deposits or withdrawals from your account or Provide employment information Give us your contact information We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.
Why can't I limit all sharing?	Federal law gives you the right to limit only sharing for affiliates' everyday business purposes-information about your creditworthiness affiliates from using your information to market to you sharing for nonaffiliates to market to you State laws and individual companies may give you additional rights to limit sharing. See below for more on your rights under state law.

Definitions
Affiliates	Companies related by common ownership or control. They can be financial and nonfinancial companies. Cross River Bank does not share with our affiliates.
Nonaffiliates	Companies not related by common ownership or control. They can be financial and nonfinancial companies. Nonaffiliates we share with can include loan finance companies.
Joint Marketing	A formal agreement between nonaffiliated financial companies that together market financial products or services to you. Our joint marketing partner(s) include loan finance companies.

Other Important Information
For Alaska, Illinois, Maryland and North Dakota Customers. We will not share personal information with nonaffiliates either for them to market to you or for joint marketing-without your authorization. For California Customers. We will not share personal information with nonaffiliates either for them to market to you or for joint marketing-without your authorization. We will also limit our sharing of personal information about you with our affiliates to comply with all California privacy laws that apply to us. For Massachusetts, Mississippi and New Jersey Customers. We will not share personal information from deposit or share relationships with nonaffiliates either for them to market to you or for joint marketing-without your authorization. For Vermont Customers. We will not disclose information about your creditworthiness to our affiliates and will not disclose your personal information, financial information, credit report, or health information to nonaffiliated third parties to market to you, other than as permitted by Vermont law, unless you authorize us to make those disclosures. Additional information concerning our privacy policies can be found at www.crossriverbank.com or call 1-877-55CRB55.

Other Important Information

For Alaska, Illinois, Maryland and North Dakota Customers. We will not share personal information with nonaffiliates either for them to market to you or for joint marketing-without your authorization.
For California Customers. We will not share personal information with nonaffiliates either for them to market to you or for joint marketing-without your authorization. We will also limit our sharing of personal information about you with our affiliates to comply with all California privacy laws that apply to us.
For Massachusetts, Mississippi and New Jersey Customers. We will not share personal information from deposit or share relationships with nonaffiliates either for them to market to you or for joint marketing-without your authorization.
For Vermont Customers. We will not disclose information about your creditworthiness to our affiliates and will not disclose your personal information, financial information, credit report, or health information to nonaffiliated third parties to market to you, other than as permitted by Vermont law, unless you authorize us to make those disclosures. Additional information concerning our privacy policies can be found at www.crossriverbank.com or call 1-877-55CRB55.

Documents & Disclosures