Privacy Policy

Effective Date: 9/27/2026

One Tap (“One Tap,” “We,” “Us” or “Our”) is committed to protecting Your privacy and the security of Your Personal Information. This Privacy Policy explains how We collect, use, disclose and safeguard the information You provide to Us or that We collect when You visit Our website (the “Site”), submit a form, communicate with Us or use Our products and services (collectively, the “Services”), and describes the choices and rights You have regarding that information. We maintain this Privacy Policy in accordance with applicable laws and regulations, including the Federal Trade Commission Act and FTC guidelines, the Fair Credit Reporting Act (“FCRA”), the General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”). By using the Site or the Services, You acknowledge that You have read and understood this Privacy Policy.

1. Data We Collect From You

Account Registration: The registration of an Account or the submission of a form on Our Site requires You to provide certain Personal Information, including a full legal name, current address, phone number, a valid email address and certain other information indicated as required. If You purchase Services that require the payment of a fee, You will also be required to submit a credit card/debit card number, expiration date and billing zip code, which information is transmitted to and processed by Our PCI-DSS-compliant third-party payment processors in order to process Your purchase and, where applicable, Your recurring payments. In connection with Your registration or a request to be evaluated for financing or credit offers, We may also ask for additional information, including the number of employees in Your company (if an entity), Your annual revenues, Your industry and other similar information. We use all such information to provide the Services to You, including to contact You, confirm Your identity and, if applicable, to invoice You.

Financial Information (Soft Credit Inquiry): If You request to be evaluated for financing or credit offers, or otherwise authorize Us to do so, We (or Our authorized service providers acting on Our behalf) may obtain limited credit-related information about You from a consumer reporting agency by means of a “soft” credit inquiry, and may use that information together with the information You provide to score and prioritize Your inquiry (lead scoring) and to assess Your eligibility for financing or credit offers. A soft credit inquiry is not visible to other lenders reviewing Your credit file and does not affect Your credit score. Credit-related information is obtained, used, shared and retained only as permitted by the FCRA and only for the purpose of determining Your qualification for such offers, as further described in Section 10 (Your Rights Under the Fair Credit Reporting Act).

Our Partners: We may also receive Personal Information about You from Our partners, which include individuals and businesses that have entered into an agreement with Us, such as referral partners, affiliate and publisher networks, marketing partners, data and identity verification providers, and financing or lending partners. We collect this information in accordance with the partner’s applicable privacy policy and use it to provide the Services to You, including to contact You, confirm Your identity, verify the information You have provided and improve the Services.

General Browsing: Whether You are a customer of Ours or not, We collect Anonymous Data, including data about Our websites that You visit and how You browse, information about the device, operating system and browser You use, Your network connection, Your IP address and the date/time stamp for Your visit. If You are a customer of Ours, We will also collect data about how and when You access Your Account. We use this information to see which areas are most visited, which helps Us improve the quality of visitors' online experiences by recognizing and delivering more of the features, services and products that Our visitors prefer. We may also use this information to provide You advertising or marketing.

Social Media: Our websites may use social media features, such as the Facebook 'like' button ("Social Media Features"). These features may collect Your IP address and which page You are visiting on Our website, and may set a cookie to enable the feature to function properly. You may be given the option by such Social Media Features to post information about Your activities on Our website to a profile page of Yours that is provided by a third party social media network in order to share with others within your network. Social Media Features are either hosted by a third party or hosted directly on Our website. Your interactions with these features are governed by the privacy policy of the company providing the relevant Social Media Features.

Other: From telephone users, We collect Your phone number and may record call audio for quality assurance, training and compliance purposes. From chat support users, We collect Personal Information as well as information about the device and browser You use, Your network connection and Your IP address. From SMS subscribers, We collect Your mobile phone number and a record of Your consent to receive text messages. We use all of this information to provide the Services to You, to enhance Our Services and to answer any questions You may have.

2. Use and Processing of Personal Information

Purposes of Processing: We process Your Personal Information for the following purposes: to provide, operate and manage the Services; to score and prioritize Your inquiry and to determine Your eligibility for financing or credit offers (including through a soft credit inquiry where You have authorized one); to communicate with You, including to respond to Your requests and to send service, marketing and promotional communications where permitted; to personalize Your experience and improve the Site and the Services; to detect and prevent fraud and to protect the security of the Site; and to comply with Our legal and regulatory obligations, including Our obligations under the FCRA.

Note that under some legislations, we may be allowed to process information until you object to such processing (by opting out), without having to rely on consent or any other of the following legal bases below. In any case, we will be happy to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Information is a statutory or contractual requirement, or a requirement necessary to enter into a contract. You further understand that this is a soft pull and will not harm your credit in any way whatsoever.

Legal Bases for Processing: Where the GDPR or similar laws apply, Our legal grounds for processing Your Personal Information include the following:

Consent: When You have given explicit consent for specific purposes, such as authorizing a soft credit inquiry or agreeing to receive marketing communications. You may withdraw Your consent at any time.

Contractual Necessity: To fulfill Our contractual obligations to You, or to take steps at Your request before entering into a contract, such as evaluating Your request for financing or credit offers.

Legal Obligation: To comply with legal and regulatory requirements, including Our obligations under the FCRA and other applicable laws.

Legitimate Interests: For purposes such as operating, securing and improving the Services, preventing fraud and marketing Our products and services, provided that these interests are not overridden by Your rights and interests.

Disclosure of Personal Information: We will not use or disclose Your Personal Information, except: As necessary to provide the Services to You; In the aggregate with other information in such a way so that Your identity cannot reasonably be determined (for example, statistical compilations); As required by law, or based on our good faith belief that it is necessary to conform or comply with the law; To outside auditors who have agreed to keep the information confidential; To a successor organization in the event of a merger, acquisition, bankruptcy, or other sale or disposition of all or a portion of Our assets; As necessary to enforce Our Terms of Service; As necessary to protect Our rights, safety, or property, Our users, or others; this may include (for example) exchanging information with other organizations for fraud protection and/or risk reduction; and As otherwise described in this Privacy Policy or to which You have consented.

Third Parties: If You purchase, use or specifically express interest in a product or service of one of Our partners, We may share Personal Information about You with such partner. If You request to be evaluated for financing or credit offers, We may share Your Personal Information, including credit-related information obtained under the FCRA, with the financing or lending partners for whose offers You are being evaluated, as permitted by the FCRA.

We use PCI-DSS-compliant third party payment processors to assist Us in processing and share with them Your PII payment information securely. Such third party processors’ use of Your Personal Information is governed by their respective privacy policies which may or may not contain privacy protections as protective as this privacy policy.

We may use other third parties to help Us provide services and marketing to You, such as shipping or fulfilling orders, processing payments, monitoring site activity, identifying and preventing fraud, conducting quality assurance and testing, providing support, conducting surveys, and administering e-mails, and share with them Your Personal Information solely for those purposes.

If We share any Personal Information with any of these third parties, We will require that such information be used only to provide the services requested by Us and be maintained by them in strictest confidence.

We do not control the use by third parties of Your Personal Information that We collect, and its use by them will be in accordance with their own privacy policies. However, We will ensure that they are bound by agreements with us that include non-disclosure and certain data protection provisions. If you do not wish for Your Personal Information to be shared in this manner, You may opt not to purchase or use these third party services or to specifically express interest in Our partners products or services.

We will always ask for Your consent before sharing Your Personal Information with Third Parties for purposes other than those described herein.​

We use your personal, demographic and profile data to enhance your experience at our site and to enable us to present content we think you might be interested in. We use your contact information to send you information about our company in addition to promotional and marketing material. We may also use your personal, demographic and profile data to improve our site, for statistical analysis, for marketing and promotional purposes, send SMS alerts or notification, and for editorial or feedback purposes for our advertisers. Information collected by us may be added to our databases and used for future telemarketing, SMS text-messaging, e-mails or postal mailings regarding site updates, new products and services, upcoming events, and/or status of orders placed online. By submitting your information to our website you give us permission to send you marketing messages. You may withdraw this permission at any time as described in Section 13 (Opting Out of Data Processing).

3. Cookies

A cookie is a small amount of data or pieces of text, which may include a unique identifier, and is typically sent to and stored on Your browser or device. Cookies are generally used by websites to improve the browsing experience of a user. They typically enable websites to remember preferences and understand how people navigate or use a website, and can be used to provide a user with more relevant marketing and advertising.

Our Services

We use cookies to provide a better experience for Our users by allowing Us to analyze how the Services are being accessed and used. For example, cookies enable Us to recognize Your device and make Our sites more responsive to Your needs by delivering a better and more personalized experience to You. In addition, cookies are used by Us to help track your clicks as you go through the pages within any of Our websites, which allows Us to track performance and improve Our Site and Services. We also use cookies to help Us verify Your Account and device for authentication purposes and to determine when You are logged in. This enables You to avoid re-entering information upon every new visit to Our Site and to help prevent fraudulent use of credentials. We also use cookies in connection with the operation of Our checkout and order forms, to remember Your preferences and to help keep track of support requests.

Third Parties

Third parties that have content embedded on Our Site such as a social feature may set cookies on a user’s browser and/or obtain information about the fact that a web browser visited a specific website from a certain IP address. Third parties cannot collect any other personally identifiable information from Our websites unless You provide it to them directly. Any third party cookie usage is governed by the policy of the third party placing the cookie.

Our Advertising

We partner with third party publishers, advertisers, affiliates and other service providers to manage Our ads on other websites. These third parties may send cookies to Your browser or device to gather information about Your activities on Our Site and other sites that You visit. This information is then used to manage Our ads. For example, if You visit Our Site, You may see a One Tap ad when You visit another website or use a social media platform.

Third Party Tags

We use and manage third party tags on Our Site. Third party tags may take the form of pixels or tracking snippets. We use Google Tag Manager to manage our third party tag usage. We use tracking snippets to capture data from your browser, make requests to a third party partner or set cookies on your device to store data. This may cause other tags to be activated which may, for their part, collect data and set cookies under certain circumstances. Google Tag Manager does not access or store this data.

Tracking

We may also use web beacons, tracking technology and other automated tracking methods on Our Site, in mobile applications and communications with You and in Our products and services, to track and measure performance and engagement on Our Site and Services and Our ads.

Opting Out

If You prefer not to accept cookies, You can set Your browser to either completely disallow cookies or have a browser alert You when a site is using a cookie. The exact method of disabling cookies varies depending on the browser You are using; please consult the Help option in Your browser for specific directions. Please note that if You reject or block all cookies in Your browser settings, You will not be able to take full advantage of Our services as some cookies are necessary for the site to function properly.

We have implemented and use Display Advertising to allow for Google Analytics Remarketing. You can opt-out of Google Analytics for Display Advertising and customize Google Display Network ads using Google Ads Settings. You can also use the Google Analytics opt-out browser plug-in to prevent Your data from being collected and used by Google Analytics.

You can opt out of targeted ads served via specific third party vendors by visiting the Digital Advertising Alliance’s Opt-Out page and the Network Advertising Initiative’s Opt-Out page. If You are a resident of the European Union, please visit the European Interactive Digital Advertising Alliance’s opt-out page at www.youronlinechoices.eu.

You may deactivate Google Tag Manager with the help of a browser add-on if you do not want this website analysis. One such add-on can be downloaded at: www.ghostery.com. There is no industry standard or understanding about how to respond to “Do Not Track” (“DNT”) signals. Therefore, unless otherwise required by law, We do not alter our data collection and usage practices when We detect DNT signals from Your browser.

4. Third Party Websites and Applications

Our Site may contain links to, or allow You to connect with, third party websites, applications and services (for example, financing partners, payment processors and social media platforms) that alter or provide new functionality or add services. We are not responsible for and have no control over how these third parties collect, use or share Your Personal Information. Use of these third party websites, applications and services is not subject to Our Privacy Policy and their use will be in accordance with their own privacy policies.

5. Security

If You provide to Us, or We otherwise collect, Personal Information, either directly or through a partner, We will take commercially reasonable precautions to protect the information from loss, misuse and unauthorized access, disclosure, alteration and destruction. We follow industry standards on information security management to safeguard sensitive information, and We use PCI-DSS-compliant third-party payment processors to handle payment card information. Credit-related information obtained under the FCRA is stored securely, with access limited to personnel and service providers who need it to perform the purposes described in this Privacy Policy. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and We cannot guarantee absolute security.

6. Retention

We will retain Your Personal Information for as long as Your Account is active or for as long as needed to provide You or our users with the Services. We also retain Your Personal Information for legitimate business purposes and to comply with the law. The precise periods for which We retain Your Personal Information vary depending on the nature of the information or why We need it.

Credit-related information obtained through a soft credit inquiry is retained only for as long as necessary to determine Your qualification for financing or credit offers and to satisfy Our legal and regulatory obligations under the FCRA and other applicable laws, after which it is securely deleted or de-identified.

7. Residents of the European Economic Area

Our operations are located primarily in the United States. If You are located in the European Economic Area (the “EEA”), Your Personal Information will be transferred out of the EEA to the United States as described in Section 8 (International Data Transfers). Residents of the EEA have certain rights under European law with respect to Your personal data, including the right to: request access to Your personal data; request rectification of inaccurate or incomplete personal data; request erasure of Your personal data; request restriction of processing under certain conditions; receive Your personal data in a structured, commonly used and machine-readable format and have it transmitted to another controller (data portability); object to processing based on Our legitimate interests, including processing for direct marketing purposes; and withdraw Your consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal. You also have the right to lodge a complaint with the data protection supervisory authority in the EEA member state in which You reside or work. If You are a resident of the EEA and Our customer or partner or a User of Our Site and You wish to exercise these rights, please contact Us using the information in Section 16 (Contact Us).

If You are a resident of the EEA, We note that We are generally processing Your information in order to fulfill our obligations under contracts We have with You (including our Terms of Service), or otherwise to pursue our legitimate business interests as described in this Privacy Policy, unless We are required by law to obtain Your consent for a particular processing operation. The legal bases on which We rely are described in Section 2 (Use and Processing of Personal Information).

8. International Data Transfers

Our operations are located primarily in the United States. If You provide information to Us from outside the United States, including from the European Union (“EU”), the EEA, the United Kingdom or Switzerland, Your Personal Information will be transferred to, stored and processed in the United States, where data protection laws may differ from those in Your jurisdiction. Where We transfer personal data out of the EEA, the United Kingdom or Switzerland, We ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission (or the equivalent United Kingdom addendum) or reliance on an applicable adequacy decision, and We require third parties that process such data on Our behalf to provide comparable protection.

We are subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission.

We may be required to disclose personal information in response to lawful requests by public authorities, including to meet the national security or law enforcement requirements.

9. Residents of California (CCPA)

If You are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), provides You with the following rights with respect to Your Personal Information, subject to certain exceptions:

Right to Know: You may request that We disclose the categories and specific pieces of Personal Information We have collected about You, the categories of sources from which it was collected, the business or commercial purposes for collecting, selling or sharing it, and the categories of third parties to whom We have disclosed, sold or shared it.

Right to Delete: You may request that We delete the Personal Information We have collected from You, subject to certain exceptions (for example, where We are required to retain the information to comply with a legal obligation).

Right to Correct: You may request that We correct inaccurate Personal Information that We maintain about You.

Right to Opt-Out of Sale or Sharing: We may sell or share Personal Information (as those terms are defined under the CCPA) with third parties such as marketing partners and financing or lending partners. You have the right to opt out of the sale or sharing of Your Personal Information at any time by contacting Us as described in Section 13 (Opting Out of Data Processing) or, where available, by using the “Do Not Sell or Share My Personal Information” link on Our Site. We do not knowingly sell or share the Personal Information of consumers under 16 years of age.

Right to Limit Use of Sensitive Personal Information: To the extent We collect sensitive Personal Information (such as financial account information), You may request that We limit Our use of it to the purposes permitted under the CCPA.

Right to Non-Discrimination: We will not discriminate against You for exercising any of Your CCPA rights, such as by denying You Services, charging You a different price or providing a different level or quality of Services.

To exercise these rights, please contact Us using the information in Section 16 (Contact Us). We will need to verify Your identity before responding to Your request, and We will respond within the timeframes required by law. You may also designate an authorized agent to make a request on Your behalf; We may require proof of the agent’s authority and verification of Your identity.

10. Your Rights Under the Fair Credit Reporting Act (FCRA)

If We obtain credit-related information about You through a soft credit inquiry as described in Section 1 (Data We Collect From You), the following applies:

Purpose Disclosure: We conduct soft credit inquiries strictly for the purpose of lead scoring and determining Your qualification for financing or credit offers, as permitted by the FCRA, and only with Your authorization. A soft credit inquiry does not affect Your credit score and is not visible to other lenders reviewing Your credit file.

Access to Credit Data: You may request information about the credit-related data We collected about You during the pre-screening process.

Dispute Inaccuracies: You have the right to dispute any inaccuracies in Your credit information and request corrections. Because this information is obtained from a consumer reporting agency, You may also dispute inaccurate information directly with that agency, which is required by the FCRA to investigate Your dispute and to correct or delete information that is inaccurate, incomplete or unverifiable.

Adverse Action Notices: If We decline to refer You for, or You are declined for, a financing or credit offer based in whole or in part on information in a consumer report, You will be provided with the notices required by the FCRA, including the name, address and telephone number of the consumer reporting agency that furnished the report.

Sharing of Credit Data: Credit-related information is shared only with authorized entities, such as the financing or lending partners for whose offers You are being evaluated and the service providers that assist Us in performing the soft credit inquiry, and only in compliance with the FCRA.

Prescreened Offers: You may opt out of receiving prescreened offers of credit or insurance from consumer reporting agencies by calling 1-888-5-OPTOUT (1-888-567-8688) or visiting www.optoutprescreen.com.

This section summarizes certain rights only. For a complete description of Your rights under the FCRA, see “A Summary of Your Rights Under the Fair Credit Reporting Act,” published by the Consumer Financial Protection Bureau at www.consumerfinance.gov/learnmore.

11. SMS Offering and Opt-Out Rights

For SMS text messages, You may unsubscribe at any time by replying STOP.

Message and data rates may apply, and message frequency varies. Reply HELP for help. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

12. Choices Regarding Your Personal Information

We understand that and value Your rights over Your Personal Information. We have taken steps to allow You to access, correct, amend, delete or port Your Personal Information and give You choices regarding the collection, use and sharing of Your Personal Information. You may manage your receipt of marketing and non-transactional communications by clicking on the “unsubscribe” link located on the bottom of Our marketing emails, or by replying STOP to any text message You receive from Us. If You are Our customer or a partner, You can update many types of Personal Information directly within Your Account settings. If You are unable to change Your Personal Information within Your Account settings, or if You are concerned about data collected as You visit Our Site, please contact Us using the information in Section 16 (Contact Us). Please understand that if You delete or limit the use of Your Personal Information, the Services may not function properly or certain Services may not be available.

13. Opting Out of Data Processing

You may object to or opt out of Our processing of Your Personal Information at any time, subject to applicable law. Depending on the type of processing, You can opt out as follows:

Marketing Emails: Click the “unsubscribe” link located at the bottom of any marketing email We send You.

Text Messages: Reply STOP to any text message You receive from Us.

Telephone Calls: Ask to be placed on Our internal do-not-call list during any call, or contact Us using the information in Section 16 (Contact Us).

Cookies and Targeted Advertising: Use the browser settings and industry opt-out tools described in Section 3 (Cookies) under “Opting Out.”

Sale or Sharing of Personal Information: California residents may opt out of the sale or sharing of their Personal Information as described in Section 9 (Residents of California).

Soft Credit Inquiries: Soft credit inquiries are performed only with Your authorization. You may decline to authorize a soft credit inquiry, in which case We may be unable to evaluate You for financing or credit offers. To opt out of prescreened credit offers from consumer reporting agencies, see Section 10 (Your Rights Under the Fair Credit Reporting Act).

All Other Processing: To object to or restrict any other processing of Your Personal Information, or to withdraw consent You have previously given, please contact Us using the information in Section 16 (Contact Us). We will honor Your request to the extent required by applicable law. Please note that We may need to continue processing certain information to complete a transaction You have requested, to comply with Our legal obligations or to protect Our rights, and that if You opt out of processing, some Services may not function properly or may not be available to You.

14. Children’s Privacy

Our Site and Services are intended for and directed to adults. We do not knowingly collect Personal Information from individuals under 18 years of age, and individuals under 18 may not use the Services or submit information to Us. If We learn that We have collected Personal Information from an individual under 18, We will delete that information promptly. If You believe that a minor has provided Us with Personal Information, please contact Us using the information in Section 16 (Contact Us).

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in Our practices, technologies, legal requirements or other factors. When We do, We will post the revised Privacy Policy on Our Site and update the Effective Date at the top of this page. If the changes are material, We may also provide additional notice, such as by email or a notice on Our Site. We encourage You to review this Privacy Policy regularly to stay informed about how We are protecting Your information. Your continued use of the Site or the Services after the revised Privacy Policy is posted constitutes Your acceptance of the changes.

16. Contact Us

If You have any questions or concerns about this Privacy Policy or Our data practices, or if You wish to exercise any of the rights described in this Privacy Policy, please contact Us at:

One Tap

30 N Gould St, Suite R

Sheridan, Wyoming 82801