Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

• Identity Information: Name, date of birth, Social Security Number, government-issued ID
• Contact Information: Address, phone number, email address
• Financial Information: Employment status, income, assets, account balances, transaction history
• Authentication Information: Passwords, security questions, biometric data (when available)
• Communication Records: Call recordings, chat transcripts, email correspondence

1.2 Information We Collect Automatically

• Device Information: IP address, device type, operating system, browser information
• Usage Information: Pages visited, time spent, click patterns, login times
• Location Information: GPS coordinates (with permission), IP-based location
• Cookies and Tracking: Website usage analytics, preference settings

1.3 Information from Third Parties

• Credit reporting agencies for creditworthiness assessment
• Identity verification services
• Payment processors and other financial institutions
• Government agencies and law enforcement (when required)
• Fraud prevention services

2. How We Use Your Information

2.1 Primary Business Purposes

• Opening and maintaining your accounts
• Processing transactions and payments
• Providing customer service and support
• Verifying your identity and preventing fraud
• Complying with legal and regulatory requirements

2.2 Additional Services

• Offering new products and services that may interest you
• Improving our website and mobile applications
• Conducting market research and analytics
• Personalizing your banking experience
• Sending account alerts and important notices

3. Information Sharing and Disclosure

3.1 With Your Consent

We share information when you explicitly authorize us to do so, such as when you link external accounts or use third-party financial services.

3.2 For Business Operations

• Service Providers: Third-party companies that help us operate our business (payment processors, technology providers, customer service)
• Affiliates: Other companies within the Nexus Bank corporate family
• Business Transfers: In the event of a merger, acquisition, or sale of assets

3.3 Legal Requirements

• Government agencies and regulators (banking supervisors, IRS, FinCEN)
• Law enforcement agencies (with proper legal process)
• Courts and legal proceedings (subpoenas, court orders)
• Credit reporting agencies (for credit-related products)

3.4 Fraud Prevention and Security

• Fraud prevention services and databases
• Other financial institutions (to verify transactions)
• Security service providers

4. Data Security and Protection

4.1 Security Measures

• Encryption: All data transmissions use TLS 1.3 encryption
• Access Controls: Multi-factor authentication and role-based access
• Monitoring: 24/7 fraud monitoring and suspicious activity detection
• Physical Security: Secure data centers and restricted facility access
• Employee Training: Regular security awareness and privacy training

4.2 Data Retention

We retain your information for as long as necessary to provide services and comply with legal requirements. Account information is typically retained for 7 years after account closure, as required by banking regulations.

5. Your Privacy Rights

5.1 Access and Correction

• Request copies of your personal information
• Correct inaccurate information in your records
• Update your contact preferences

5.2 Marketing Communications

• Opt out of promotional emails and marketing calls
• Limit sharing for marketing purposes
• Choose your communication preferences

5.3 State-Specific Rights

Residents of certain states (California, Virginia, Colorado, Connecticut) may have additional privacy rights under state law, including the right to request deletion of personal information and disclosure of information sharing practices.

6. Cookies and Online Tracking

6.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality and security
• Performance Cookies: Help us improve website performance
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Understand how visitors use our website

6.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality and your ability to access certain features.

7. Mobile Application Privacy

7.1 Mobile-Specific Data Collection

• Device identifiers and mobile advertising IDs
• App usage analytics and crash reports
• Push notification preferences
• Camera access for mobile check deposit
• Location services for branch/ATM finder

7.2 Mobile Permissions

Our mobile app requests specific permissions only when necessary for functionality. You can manage these permissions through your device settings.

8. Third-Party Services

8.1 External Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of external sites and encourage you to read their privacy policies.

8.2 Third-Party Integrations

Some services (like account aggregation or payment services) may be provided by third parties. These services have their own privacy policies that govern their use of your information.

9. Children's Privacy

We do not knowingly collect personal information from children under 13. Our services are intended for individuals 18 years and older. If we become aware that we have collected information from a child under 13, we will delete that information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information during international transfers.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes through email, website notice, or account alerts. Your continued use of our services constitutes acceptance of the updated policy.

12. Contact Information

13. Regulatory Compliance

This Privacy Policy complies with applicable federal and state privacy laws, including:

• Gramm-Leach-Bliley Act (GLBA)
• Fair Credit Reporting Act (FCRA)
• California Consumer Privacy Act (CCPA)
• Virginia Consumer Data Protection Act (VCDPA)
• Other applicable state privacy laws