Privacy Policy

SEPFIN SAS, at CALLE 88 22 33, BOGOTA, 110221, Distrito Capital de Bogota, Colombia, operates the App and is responsible for information it collects and controls through the service. Privacy requests: [email protected]. Website: sepfinsas.com. Hatch Bank independently evaluates inquiries referred to it and controls information it receives for its own banking processes. Official institution records: FDIC BankFind, Certificate 25803; FFIEC / Federal Reserve NIC, RSSD 733661.

The App processes information submitted in a financing inquiry: the requested loan amount and the identity, contact, residence and income or other financial information that the applicant supplies in the loan-request form. The information submitted to the bank is the information included in the user-authorized inquiry. Users must not enter online-banking passwords, one-time authentication codes or other account-login credentials into the inquiry or send them to support.

For App operation, security and support, SEPFIN SAS processes technical connection information and the details supplied in user support requests. AppsFlyer processes attribution and analytics data as described in Section 8. OneSignal processes notification information as described in Section 11. iOS permission choices are described below. Users do not need to provide online-banking passwords or one-time authentication codes to contact support.

SEPFIN SAS uses information to provide the App, process an inquiry authorized by the user, communicate that inquiry to Hatch Bank, handle support and security concerns, measure app acquisition through AppsFlyer, and deliver optional notifications through OneSignal. These uses are distinct from the bank's independent credit evaluation.

When the applicant authorizes a financing referral, the submitted inquiry is provided to Hatch Bank for an independent assessment. The bank determines its own identity, credit and compliance checks and provides any resulting loan offer or agreement under its own privacy practices. An app planning activity does not automatically authorize disclosure of a financing inquiry.

Referral disclosure:

SEPFIN SAS operates Extra Cash Advance - HopCash at CALLE 88 22 33, BOGOTA, 110221, Distrito Capital de Bogota, Colombia. When you choose to submit a financing inquiry, the loan amount and the personal, contact, residence and financial information entered in the request are provided to Hatch Bank for independent credit review. Hatch Bank determines whether to make an offer and sets any loan terms. Submitting an inquiry is voluntary. You may stop without submitting it. Authorization to submit an inquiry is separate from permission for unrelated promotional messages or cross-company advertising tracking. For privacy requests, contact [email protected].

Submitting a financing inquiry is a voluntary action. A user can choose not to send an inquiry to the bank. A financing-request authorization is separate from any permission for unrelated marketing or cross-company advertising tracking. SEPFIN SAS addresses requests about data and authorization through [email protected].

SEPFIN SAS uses AppsFlyer for installation attribution, campaign measurement and related app analytics. AppsFlyer processes configured attribution and analytics data, including technical device or app identifiers, install information, attribution signals and selected app events. Where cross-company tracking requires Apple's App Tracking Transparency (ATT) permission, IDFA use for that tracking is conditional on the user's authorization. AppsFlyer — Processing Customer Data

The App follows Apple's App Tracking Transparency framework. Cross-company advertising tracking requiring ATT permission occurs only with the user's authorization. Permission can be managed in iOS Settings > Privacy & Security > Tracking. Declining ATT permission does not block the loan-request service.

Network and website-security services can handle technical connection information, including IP addresses and security signals, when users access online resources. Such technical processing serves access and security functions, not approval or denial of loans. SEPFIN SAS responds to questions about processing under its control through its privacy contact.

SEPFIN SAS uses OneSignal for optional push notifications. OneSignal processes the device push token, notification-subscription or permission status, and technical notification delivery or interaction information necessary for this service. The App requests iOS notification permission before sending push notifications. Users can decline or disable notifications in iOS Settings without affecting the financing inquiry. Notification permission does not authorize unrelated third-party promotional calls or SMS. OneSignal Privacy Policy.

Personal and financial information supplied for an inquiry is used for processing that inquiry, delivering the authorized referral, providing support and meeting lawful security or compliance needs. SEPFIN SAS does not determine the applicant's credit eligibility. Requests about the use of information for advertising can be sent to [email protected].

SEPFIN SAS is established in Colombia and serves eligible users in the United States. Processing under the operator's control is subject to applicable U.S. privacy obligations and, where applicable, Colombia's Law 1581 of 2012. Users can request further information about the handling of their data from SEPFIN SAS's privacy contact. The bank independently applies its own privacy and retention rules to information it receives.

SEPFIN SAS retains financing inquiries, support correspondence and associated technical or compliance records while needed for the stated service purposes or a valid legal obligation, and then deletes or anonymizes them in accordance with applicable law. Users can request deletion of personal information held by the operator by writing to [email protected]; SEPFIN SAS may retain information where a law permits or requires an exception. Deleting the App does not delete loan records held independently by Hatch Bank.

Depending on applicable state and federal law, users may request access, correction or deletion of personal information, obtain information about disclosures, or exercise applicable advertising and privacy opt-out rights. Contact [email protected] for records held by SEPFIN SAS. SEPFIN SAS may verify the requester's identity before disclosing personal information. For records held independently by Hatch Bank, contact that institution.

Where Colombia's Law 1581 of 2012 covers an operation, individuals may request access, updating, correction, deletion and withdrawal where legally available by writing to [email protected]. Colombian complaint and consultation deadlines apply within that legal scope, in addition to applicable U.S. rights. The Colombian Superintendencia de Industria y Comercio (SIC) is the relevant authority for issues within its jurisdiction.

The financing inquiry is for adults aged at least 18 in eligible U.S. states and is not directed to children. SEPFIN SAS uses administrative and technical safeguards appropriate to the information under its control. No online system can eliminate every security risk.

Material changes to collection, recipients, purposes or practices will be communicated in the App or through an appropriate method. To request privacy assistance, correction or deletion where applicable, use [email protected]. The lender controls its separately held credit records and publishes its own privacy notices.