CALIFORNIA CONSUMER PRIVACY ACT DISCLOSURE 

These Terms of Use (“Terms”) are entered into by and between you and Vera Inc. (“Vera,” “we,” “us,” or “our”). They govern your access to and use of www.vera.credit (the “Site”), the Vera mobile application (the “App”), and any services offered through the Site or App (collectively, the “Services”).

By using the Services, you agree to be bound by these Terms and our Privacy Policy. If you do not agree, you must not access or use the Services.

Important: Use of any Vera Credit Card is governed solely by the Cardholder Agreement, not these Terms.

Under the CCPA, “personal information” is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. It does not include publicly available information or information that has been aggregated or de-identified.

The CCPA does not apply to certain information, such as information subject to the Gramm-Leach-Bliley Act, the Fair Credit Reporting Act, and certain other state or federal privacy laws. For example, this CCPA Disclosure does not apply to information that we collect about individuals who seek, apply for, or obtain our financial products and services for personal, family, or household purposes, which is subject to our U.S. Consumer Privacy Notice, or other financial privacy notice applicable to the Vera services that you visit or use.

This CCPA Disclosure also does not apply to information we collect in the context of a person’s role as a job applicant, employee, associate, contractor, or other member of the Vera workforce.

Most of the personal information that we maintain has been collected in the context of providing financial products and services for personal, family, or household purposes, and is therefore not subject to the CCPA. However, we also collect personal information relating to California residents in other contexts, including in connection with our marketing activities, websites and mobile applications.

When Vera processes personal information on behalf of the Bank—for example, supporting customer service, identity verification, fraud detection, servicing account access tools, or processing payments—we act as a “service provider” under the CCPA. In these cases, the personal information is collected and controlled by the Bank and is subject to the Bank’s GLBA-governed privacy notices, not this CCPA Disclosure.

In the past 12 months, we have collected the following categories of personal information, as defined in the CCPA, relating to California residents. The categories of personal information that we collect, use, and disclose about a California resident will depend on our specific relationship or interaction with that individual. The examples provided in each category below are for illustrative purposes only.

While some of the information that we collect may be considered sensitive personal information, Vera uses and discloses sensitive personal information for those purposes that are authorized by law. For example, Vera may process your sensitive personal information in order to perform the services or provide the goods you request from us or to verify customer information. California law does not afford you rights to limit the use or disclosure of your sensitive personal information for these purposes. Vera does not use sensitive personal information to infer characteristics about you, nor do we sell or share sensitive personal information for cross-context behavioral advertising.

The personal information we collect will be retained for as long as reasonably necessary for the purposes set out in this policy and consistent with our retention policies, in accordance with applicable laws. When determining these retention policies, we take into account the length of time personal information is required to be retained to provide the services; satisfy legal and compliance obligations and for audit purposes; address any complaints regarding the services; and defend or bring potential legal claims.

In the past 12 months, we have collected personal information relating to California residents from the following sources: 

We may use personal information relating to California residents for one or more of the following business purposes:

• Providing our products and services
• Processing transactions and payments
• Verifying your identity
• Detecting and preventing fraud
• Protecting against security risks
• Advertising and marketing 
• Conducting analytics and research
• Improving our products and services
• Carrying out our legal and business purposes, such as complying with federal, state, or local laws, responding to civil, criminal, or regulatory lawsuits, subpoenas, or investigations, exercising our rights or defending against legal claims, resolving complaints and disputes, performing compliance activities, performing institutional risk control, and otherwise operating, managing, and maintaining our business
• Creating aggregated and de-identified information
• As otherwise disclosed to you at or before the point of collecting your personal information

We may also use personal information relating to California residents for one or more of the specific “business purposes” listed in the CCPA: 

• Certain auditing and measurement purposes, such as counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with applicable standards
• Helping to ensure our ability to detect security incidents, resist malicious, deceptive, fraudulent, or illegal activity, and prosecute those responsible for that activity; to detect security incidents that compromise the availability, authenticity, integrity, and confidentiality of stored or transmitted personal information; and to protect the physical safety of natural persons.
• Debugging to identify and repair errors that impair existing intended functionality
• Short-term, transient use
• Performing services on behalf of Vera, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, providing storage, or providing similar services on behalf of Vera
• Undertaking internal research for technological development and demonstration
• Undertaking activities to verify or maintain the quality or safety of a service that is owned or controlled by Vera, and to improve, upgrade, or enhance the service that is owned or controlled by Vera

Importantly, we may share or allow companies to collect information through our online services in order to provide marketing services to us, including to target advertising to you based on personal information collected across different websites, mobile apps, and devices over time. You have a right to opt out of such cross-context behavioral advertising, as described below. You can also review the Vera Online Privacy Policy to learn more about how Vera uses online tracking technology to conduct personalization, analytics, and targeted advertising.

When we provide information to FinWise Bank in connection with the credit card program (such as servicing, fraud prevention, identity verification, or required regulatory reporting), such disclosures are made in our capacity as a service provider and are not considered “selling” or “sharing” personal information under the CCPA. 

In the past 12 months, we have not disclosed personal information relating to California residents in any other manner that we consider a sale within the meaning of the CCPA. 

Rights to Know, Delete, and Correct. If you are a California resident, you may request that we disclose to you the following information:

• The categories of personal information described above that we have collected about you and the categories of sources from which we collected such personal information
• The business or commercial purposes for collecting or sharing such personal information
• The categories of personal information about you that we have disclosed to or shared with third parties for a business purpose and the categories of third parties to whom we have disclosed or shared such personal information
• The specific pieces (e.g., copies) of personal information we have collected about you

California residents also have the right to submit a request for deletion or correction of their personal information under certain circumstances, although in some instances, we may decline to honor your request. For example, we may decline to honor your request if we cannot verify your identity or confirm that the personal information that we maintain relates to you, or if we cannot verify that you have the authority to make a request on behalf of another individual. In other instances, we may decline to honor your request where an exception applies, such as where the disclosure of personal information would adversely affect the rights and freedoms of another consumer or where the personal information that we maintain about you is not subject to the CCPA. Nonetheless, you have the right to be free from unlawful discrimination for exercising your rights under the CCPA. 

If you are a California resident and would like to exercise your rights to know, delete, or correct your personal information as described above, please submit your request by: 

Contacting us at 1-800-769-1306 

Once we receive your request, we may verify your identity through your account or by requesting additional information sufficient to confirm your identity, such as photos of your government ID.

If you would like to use an agent to exercise your CCPA rights, or if you are an agent seeking to exercise CCPA rights on behalf of another person, please contact us at 1-800-769-1306.

Right to Opt Out of Sharing Personal Information for Cross-Context Behavioral Advertising. California residents have a right to opt out of sharing personal information for cross-context behavioral advertising purposes. You can exercise your right to opt out by enabling Global Privacy Control (GPC) in your browser. GPC is a setting that allows you to communicate your privacy preferences to websites and online services that you visit. When we detect a GPC signal from a browser, our Online Services are designed to treat the browser as opted out and to stop sharing personal information for certain targeted advertising purposes, in accordance with applicable laws. Please visit the Global Privacy Control website to learn more about the setting and how to enable it on your browser.

You can also opt out of certain targeted advertising by visiting the Digital Advertising Alliance Opt Out Page, Network Advertising Initiative Opt Out Page, and TrustArc Preference Manager and by adjusting the privacy settings on your mobile device (e.g., "Limit Ad Tracking" on iOS or "Opt out of Ads Personalization" on Android). 

Please note that your preferences will apply only to the specific browser from which you opt out. You will need to opt out separately on all of your browsers. If you delete cookies, change web browsers, reset your mobile advertising ID, or use a different device, you may need to opt out again. Our online services do not function differently in response to browser "Do Not Track" signals, but you may opt out of certain targeted advertising as described above.

Vera does not share personal information collected in connection with your credit account or other GLBA-covered financial information for cross-context behavioral advertising. Cross-context behavioral advertising applies only to website, mobile app, and marketing data. 

We may change or update this CCPA Disclosure in the future. When we do, we will post the revised CCPA Disclosure on our website. This CCPA Disclosure was last updated and became effective on the date posted at the top of this page.

If you are a Vera cardholder, the Cardholder Agreement governs your Card and Account. In the event of a conflict between this Privacy Notice and the Cardholder Agreement with respect to your financial product, the Cardholder Agreement will control.