CALIFORNIA PRIVACY NOTICE

Section 1.01 Who This Notice Covers. This California Privacy Notice supplements our Website Privacy Policy and applies to California residents whose personal information we collect through www.loanamerica.com, through our outreach to school and institutional contacts, and through other channels not covered by the federal Gramm-Leach-Bliley Act. Terms used in this Notice have the meanings given in the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020, California Civil Code Section 1798.100 and following (the "CCPA").

Section 1.02 Information Excluded From the CCPA. The CCPA does not apply to personal information collected, processed, sold, or disclosed pursuant to the Gramm-Leach-Bliley Act or the Fair Credit Reporting Act. Most information that we collect from a borrower or applicant in connection with a consumer loan falls within those exemptions and is described in our GLBA Privacy Notice.

Section 2.01 Categories Collected, Purposes, and Retention. In the twelve months before the Effective Date we collected the following categories of personal information. For each category the purposes of use are those listed in Section 3.01 of our Website Privacy Policy, and the retention period is the period stated in Section 6.01 of that Policy for the type of record in which the information is held.

• (a) Identifiers, such as name, email address, telephone number, mailing address, and Internet Protocol address. Collected from you and from your device.
• (b) Customer records described in California Civil Code Section 1798.80(e), such as name, address, telephone number, education, employment, and financial information that you provide in an inquiry or application.
• (c) Commercial information, such as the loan amounts and programs in which you express interest.
• (d) Internet or other electronic network activity information, such as pages viewed, links selected, and referring website. Collected through our hosting and analytics providers.
• (e) Geolocation data limited to the approximate location derived from an Internet Protocol address, including the country and state value stored on your device as described in Section 2.02 of our Website Privacy Policy.
• (f) Professional or employment-related information and education information, such as the school you attend or plan to attend and your program of study, and, for school contacts, your title and institution.
• (g) Inferences drawn from the above to understand which information on the Site is useful.
• (h) Sensitive personal information, which is collected only within an application and is governed by the GLBA Privacy Notice. We do not use or disclose sensitive personal information for any purpose that would give rise to a right to limit under the CCPA.

Section 2.02 Sale and Sharing. We do not sell personal information and do not share personal information for cross-context behavioral advertising. We have not done so in the preceding twelve months. We do not knowingly sell or share the personal information of consumers under the age of sixteen.

Section 3.01 Preceding Twelve Months. In the preceding twelve months we disclosed identifiers, customer records, commercial information, internet activity information, approximate geolocation, professional and education information, and inferences for a business purpose to the following categories of recipients: service providers that host the Site, deliver email, verify identity, and provide security and analytics; schools, where you asked us to coordinate with the financial aid office; and our affiliates, to the extent described in the GLBA Privacy Notice. We also disclose information where required by law.

Section 4.01 Rights. Subject to exceptions in the CCPA, you have the right to: (a) know what personal information we collect, use, disclose, sell, or share, and to request a copy of the specific pieces of personal information we hold about you; (b) delete personal information that we collected from you; (c) correct inaccurate personal information; (d) opt out of the sale or sharing of personal information; (e) limit the use and disclosure of sensitive personal information; and (f) not be discriminated against for exercising these rights.

Section 4.02 Submitting a Request. Submit a request at www.loanamerica.com/privacy-request, by email to Support@loanamerica.com, or by telephone at (213) 818-7729. We will confirm receipt within ten business days and respond within forty-five days, which we may extend once by up to forty-five additional days with notice to you.

Section 4.03 Verification. We will verify your request by matching information you provide with information we already hold. We may ask for additional information for a request to know specific pieces of information or to delete information. We will not require you to create an account.

Section 4.04 Authorized Agents. You may designate an authorized agent to submit a request. We will require the agent to provide proof of your written permission, and we may require you to verify your identity directly with us or to confirm the agent's authority.

Section 4.05 Opt-Out Preference Signals. We honor a Global Privacy Control signal as a request to opt out of sale and sharing for the browser or device that sends it, and, where we can associate the signal with you, for your information.

Section 5.01 No Financial Incentives. We do not offer financial incentives or price or service differences in exchange for personal information.

Section 5.02 Shine the Light. California Civil Code Section 1798.83 permits California residents to request information about the disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes. You may nonetheless send a request to Support@loanamerica.com with the subject line "California Shine the Light."

Section 5.03 Contact. Questions about this Notice may be sent to Support@loanamerica.com or to American Originations LLC, 350 S Rampart Street, Suite 200, Las Vegas, Nevada 89145.