At ICUL Service Corporation (referred to as "Envisant," "us" or "we"), we recognize that your privacy is important. This Policy discloses the privacy practices for the cumoney.com and envisant.com websites (the "Sites"), the CU Money mobile app (the "App"), as well as related products and services we may offer to you (collectively referred to as the "Services"). This Policy also covers how Personal Information that we receive or collect about you is treated.

This Privacy Policy is designed to be read in connection with any applicable terms and conditions, including prepaid cardholder agreements and disclosures. By accessing or using our Services, you agree to be bound by the applicable terms and conditions, as well as this Policy. If you do not agree to the terms of the Policy, do not use our Sites or Services.

We treat any data that identifies you, or reasonably can be linked to you, as "Personal Information." Data that has been de-identified or aggregated so that it cannot reasonably be linked to you is not Personal Information, and we may use that data for any purpose.

Personal Information We Collect From You

We attempt to only collect Personal Information that we need in order to provide you with our premier service and industry leading products, and that Personal Information may include:

• Contact Information, such as name, postal address, phone numbers, and email addresses.
• Internet or Similar Network Activity, such as your IP address and activity on our Website, as well as your interaction with our advertising and other communications.
• Commercial Information , such as information relating to your purchases and services, and purchasing or consuming histories or tendencies.
• Location Information, such as information collected when you access our Website.
• Financial Information , such as your card account number and other financial information collected when you obtain Services from us.

How We Obtain Your Personal Information

• From You : We obtain most of the Personal Information that we collect about you from you when you interact with our Services, including when you: (1) contact and communicate with us, (2) register for an account on our Sites or App, (3) purchase or use Services, including our Sites and App.
• From Our Partners : We may obtain Personal Information about you from our service providers or other partners, including marketing partners.

Our Use of Personal Information

We may use your Personal Information as follows:

• Provide Our Products and Services: We use Personal Information to furnish our Services, including to process and fulfill your purchases of our Services and to improve the quality, safety and security of the Services.
• Communicate with You: We use Personal Information to respond to communications, contact you about your transactions, promote our Services, provide other relevant information, and request information or feedback.
• Personalize Your Experience : We utilize Personal Information regarding your use of our Services, including our Sites and App, to personalize and enhance your experiences.
• Internal Research : We use Personal Information to conduct internal research to develop, improve or repair our products, services or technology.
• Security or Fraud Prevention : We use Personal Information to: (1) prevent, detect, protect against, or respond to security incidents, and (2) preserve the integrity or security of systems.
• Legal Compliance : We may use Personal Information to comply with applicable law or to comply with a lawful governmental request.

We strive to retain your Personal Information only for as long as necessary to fulfill the purpose(s) for which we obtained the information or as otherwise required by law.

Our Sharing of Personal Information

We may share Personal Information with service providers who act on our behalf, our partners, or others operating at your direction or where legally necessary or appropriate. We do not share Personal Information with third parties for their own marketing purposes.

• Legal Affiliates: We may share information our subsidiaries and legal affiliates.
• Service Providers : We engage third parties to act as our service providers and perform certain tasks on our behalf in connection with delivering you our products and services. The tasks performed by service providers include: (1) processing and storing Personal Information, (2) assisting with marketing communications and advertising, (3) customer service assistance; (4) processing credit, debit, prepaid card or other financial charges, and (5) providing technology services, including to assist with our Sites. We may provide service providers with all types of Personal Information described above. We encourage of service providers to take reasonable steps to ensure that they keep Personal Information confidential and only utilize the Personal Information as permitted.
• Partners : We may partner with third parties to provide services and other offerings. Upon your request, we may also share you information with service partners to provide products or services that may interest you. We take reasonable steps to ensure that the entities to which we share your Personal Information keep the information confidential and only use it as permitted.
• Other Legal Purposes : We also may share Personal Information: (1) with your consent, (2) to respond to subpoenas, court orders, or other legal process or otherwise as required or allowed by law or the competent governmental or judicial authorities; (3) to cooperate with law enforcement, government or regulatory entities, and safety or investigation authorities; (4) to establish or preserve a legal claim or defense; or (5) as part of a corporate restructuring, sale of assets, merger or divestiture.

Use of Cookies

Like many commercial websites, we analyze how visitors use our Sites with "cookie" technology. A cookie is a small text file that is placed on your computer when you access our website and allows us to recognize you each time you visit the website. We may use cookies to (1) enhance or personalize your website usage and experience; (2) monitor website usage; and (3) improve the website and our services, including providing you with interest-based ads. If you choose, you can set your browser to reject cookies or you can manually delete individual cookies or all of the cookies on your computer by following your browser's help file directions. However, if your browser is set to reject cookies or you manually delete cookies, you may have some trouble accessing and using some of the pages and features on our website. Please note that browser-management tools for cookies are outside of our control, and we cannot guarantee their effectiveness.

We may also use web beacons on our Sites, in our emails, and in our advertisements on other websites. Web beacons are tiny graphic images that are used to collect information about your visit to the website, such as the pages you view and the features you use, as well as information about whether you open and/or act upon one of our emails or advertisements. We may also collect the URL of the website you visited immediately before coming to our website. Web beacons help us analyze the behavior of visitors to our website and portals and measure the effectiveness of the sites and our advertising. We may work with service providers that help us track, collect and analyze this information.

We may combine the information we collect through cookies and web beacons with other information we have collected from you or information from other sources.

Security of Your Personal Information

We use commercial reasonably physical, technical and administrative security measures to reduce the risk of loss, misuse, unauthorized access, and disclosure. Our secure services and our data centers are protected by industry-standard encryption, and our servers reside behind firewalls and employ high-level password protection. Please note, however, that no security measures are perfectly secure, and we are unable to guarantee the security of your Personal Information. We encourage you to take steps to help protect the confidentiality and security of your account and Personal Information.

Third Party Websites and Applications

Our Sites may contain links to websites or applications hosted by third parties. This Policy only applies to websites and applications within our control and does not apply to any third party sources. Any data collected through third party websites or applications shall be subject to the privacy practices of the third party, and you should review the privacy policies of these third parties prior to sharing any data.

Your Rights and Choices

Your choices regarding our use and disclosure of Personal Information

We give you certain choices regarding our use and disclosure of your Personal Information for promotional purposes. You may opt-out from receiving electronic communications from us by contacting us at envisant.legal (AT) envisant.com . If you no longer want to receive promotional-related emails from us, you may opt-out according to instructions in such communications. Please note that if you opt-out of receiving marketing-related messages, we may still send you important administrative messages.

Access, change or deletion of Personal Information

If you would like to request to review, correct, update, or delete Personal Information that you previously have provided to us, please contact us at envisant.legal (AT) envisant.com . We will respond to your request consistent with applicable law. Please note that we may act as a service provider in some functions, including, storing records on behalf of third parties, and that requests to correct, update, or delete Personal Information provided to us by third parties often will be transmitted to those parties to respond accordingly.

Personal Information Concerning Children

Our Sites and App are not intended for anyone under the age of 16. We do not knowingly collect Personal Information from individuals under the age of 16, unless the Personal Information is submitted with verifiable parental consent.

Updates to the Policy

We may update this Policy periodically as we offer new products and services, and as our business, technology, and laws change. You can determine when this Policy was last revised by referring to the "Last updated" reference below. Any changes will become effective upon posting of the revised Policy.

Contact Us

ICUL Service Corporation (dba Envisant)

1807 W. Diehl Road

Naperville, IL 60563

Email: envisant.legal (AT) envisant.com

Last updated: July 5, 2022