HyperLot Rental Privacy Policy

1. Overview

HyperLot Rental ("HyperLot Rental," "we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our Services, and describes your rights with respect to that information.

This Privacy Policy should be read together with our Terms of Use.

2. Information We Collect

a. Information You Provide Directly

• Full name, date of birth, Social Security Number (SSN) or ITIN
• Contact information (email address, phone number, mailing address)
• Bank account credentials (via secure, tokenized connection through Plaid)
• Government-issued ID (for identity verification)
• Employment or income information

b. Information Collected Automatically

• Device identifiers, IP address, browser type
• Usage data and interaction logs within our app or website
• Location data (with your consent, where applicable)

c. Information from Third Parties

• Consumer Reports from Plaid Check: When you apply for a loan or complete onboarding, we obtain a consumer report from Plaid Inc. via its Plaid Check product. This report may include historical banking behavior data, overdraft patterns, account closure history, and risk or fraud indicators associated with your banking profile.
• Identity verification providers
• Fraud detection and analytics partners

3. How We Use Your Information

We use your information to:

We do not use your information for targeted advertising or sell your data to third-party marketers.

4. Consumer Reporting Data — Special Disclosures

HyperLot Rental uses Plaid Check, a consumer reporting product, as a core component of its underwriting and risk decisioning. Specifically:

• Loan Underwriting: Prior to issuing a loan, we review consumer report data to identify banking behaviors that indicate repayment risk — such as patterns of overdrafts, account closures, or suspected fraud signals. This allows us to extend credit to thin-file or credit-invisible applicants who may not have a traditional credit score.
• Fraud Screening: During onboarding, consumer report data is reviewed to detect signs of synthetic identity risk or prior account abuse patterns.

This use of consumer report data is a permissible purpose under the Fair Credit Reporting Act (FCRA), 15 U.S.C. § 1681 et seq.

Adverse Action: If your application is declined in whole or in part based on information in a consumer report, you will receive an adverse action notice in accordance with FCRA requirements.

5. How We Share Your Information

We do not sell your personal information. We may share your information with:

• Plaid Inc. — To facilitate bank account connections and to obtain consumer reports via Plaid Check
• Service providers — Third-party vendors who assist with identity verification, fraud detection, payment processing, and technology infrastructure, under confidentiality obligations
• Regulators and law enforcement — When required by law, subpoena, court order, or to protect our legal rights
• Successors — In connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections
• With your consent — For any other purpose disclosed to you at the time of collection

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide and administer our Services
• Comply with legal and regulatory obligations (including FCRA record-keeping requirements)
• Resolve disputes and enforce our agreements

Consumer report data obtained through Plaid Check is retained only as long as permissible under applicable law and Plaid's data use agreements.

7. Your Rights

Depending on applicable law, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information (subject to legal retention obligations)
• Opt out of certain data sharing (where applicable)
• Obtain a copy of your Plaid Check consumer report by contacting Plaid directly

To exercise your rights, contact us at: privacy@hyperlotrental.com

For rights related specifically to your Plaid Check consumer report (including disputes), contact Plaid Inc. directly at support.plaid.com.

8. FCRA Summary of Rights

A summary of your rights under the FCRA is available at: consumerfinance.gov/consumer-tools/credit-reports-and-scores

You may also contact the Consumer Financial Protection Bureau (CFPB) at 1-855-411-2372 or www.cfpb.gov.

9. Data Security

We implement commercially reasonable administrative, technical, and physical safeguards to protect your personal information against unauthorized access, disclosure, alteration, or destruction. However, no system is completely secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a minor, please contact us immediately.

11. State-Specific Rights

California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act and California Privacy Rights Act, including the right to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell or share personal information as defined under California law.

Vermont, Nevada, and Other States

We comply with applicable state privacy laws. Contact us for state-specific disclosures.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or in-app notice at least 30 days before taking effect. Your continued use of the Services after the effective date constitutes acceptance.

13. Contact Us

For privacy-related inquiries:
HyperLot Rental
Attn: Privacy Officer
support@hyperlotrental.com